Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/323430363a393330303a3a2f33322d3438203d3e203338353036.roa
File:                     323430363a393330303a3a2f33322d3438203d3e203338353036.roa (raw, json)
Hash identifier:          Oz2Qeiz5xyOTL/MwYfZrBtOVufZJPKw0poJngZ0glFA=
Subject key identifier:   D3:21:FE:3E:44:B9:27:C0:57:13:A1:0A:E1:C1:E7:A1:15:10:C3:D4
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       0CCA90BCD2D8B609F2F9D4ECB9BFC1341675EC38
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/323430363a393330303a3a2f33322d3438203d3e203338353036.roa
Signing time:             Sat 18 Apr 2026 09:00:53 +0000
ROA not before:           Sat 18 Apr 2026 08:55:53 +0000
ROA not after:            Sat 17 Apr 2027 09:00:53 +0000
asID:                     38506
IP address blocks:        2406:9300::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Apr 2026 09:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ca:90:bc:d2:d8:b6:09:f2:f9:d4:ec:b9:bf:c1:34:16:75:ec:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Apr 18 08:55:53 2026 GMT
            Not After : Apr 17 09:00:53 2027 GMT
        Subject: CN=D321FE3E44B927C05713A10AE1C1E7A11510C3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:d3:55:e4:48:ac:48:ff:26:dd:ec:91:f4:
                    f1:3c:68:c0:5a:ab:ee:5c:2c:dd:21:95:73:54:4f:
                    81:bd:eb:24:06:b6:5b:6b:6d:0b:1e:a9:37:c2:65:
                    64:23:57:a8:87:fc:6e:4f:a6:a2:66:52:5a:f1:62:
                    7a:7e:f1:03:f6:a1:3f:06:54:00:34:03:45:c7:10:
                    f8:37:02:40:7e:69:a3:43:2f:4e:13:96:57:d6:01:
                    7e:a2:a7:69:34:53:a0:ed:0e:c6:81:67:e1:b3:bc:
                    6a:a0:a5:09:f6:af:2a:a8:c5:b0:86:e9:b1:ee:2e:
                    39:84:ed:ed:7c:85:ed:a3:ef:2d:3c:e0:2d:3d:7a:
                    e4:4a:57:47:ba:08:d6:33:74:db:be:5b:c4:88:7d:
                    39:05:9f:dd:b0:b8:93:4e:63:0d:31:16:85:25:d7:
                    c6:69:4e:e4:fc:49:bb:61:ff:8c:9f:87:31:7e:b3:
                    c0:fa:74:51:a0:f5:15:75:94:c1:03:58:7e:23:d0:
                    82:2f:23:9c:96:7f:a4:e0:c2:48:ee:f0:dc:10:5b:
                    23:a0:8b:a8:8d:ef:1e:f2:71:24:d1:6e:ba:64:4f:
                    f5:b9:1f:0e:48:e3:ee:1b:7e:b4:6c:b1:64:c5:35:
                    6b:39:73:02:8e:62:9e:da:e6:65:d2:4b:22:cb:b1:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:21:FE:3E:44:B9:27:C0:57:13:A1:0A:E1:C1:E7:A1:15:10:C3:D4
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/323430363a393330303a3a2f33322d3438203d3e203338353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9300::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:ba:48:0a:84:6d:1b:32:ca:0b:cc:0b:12:85:54:ee:80:6c:
         eb:e1:dd:2d:ef:42:4e:a3:9f:85:4e:f6:01:1d:dd:3c:f4:f0:
         40:c6:86:4b:75:53:59:72:5d:d4:70:61:85:90:69:95:67:c8:
         f5:44:7d:86:86:4d:f6:72:d9:e3:55:b7:68:cc:18:a7:03:ce:
         2c:c1:7a:95:05:7b:bd:b3:19:13:2d:b6:f0:dd:7e:71:3f:cc:
         05:b8:4f:07:29:8c:8d:fc:30:d5:d0:44:d9:1d:53:32:a7:29:
         8a:ca:37:66:50:40:ac:02:20:a5:ed:e4:c6:ce:8b:8a:16:fb:
         cb:82:76:dc:f3:11:ac:9f:34:98:2c:be:4f:1b:5e:c8:73:22:
         5e:3e:a5:4f:19:a7:34:16:57:54:4b:d5:78:1c:47:c9:37:94:
         e2:6a:6a:2f:49:9f:5f:10:9c:df:5e:20:6e:34:27:ee:e9:fc:
         13:3c:2b:30:11:fb:91:7f:72:cd:35:08:09:9b:bf:82:dd:f8:
         2c:22:29:48:ef:23:83:75:47:7b:1d:5b:b6:0a:bd:64:9f:e1:
         16:17:98:7b:65:1f:28:1e:fe:8a:ed:d7:e6:da:fc:b0:2b:8d:
         83:2b:94:19:3c:c8:b3:90:91:2e:ef:ea:eb:c7:df:99:59:01:
         ad:08:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:24:12 2026 by rpki-client