Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a3a2f33322d3332203d3e20313334363337.roa
File:                     323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (raw, json)
Hash identifier:          h8pC3O5UrBoUEC6ODx88QnSAsLryVqTwUJG85o9TxOg=
Subject key identifier:   7C:E4:37:10:86:B0:47:35:A6:44:24:BB:95:1B:AC:D1:03:AA:E2:F5
Certificate issuer:       /CN=41E81C122CFE1947633AAA5A517B7923E1A78966
Certificate serial:       73DCB62789C10BF9B751243AB97903E6593AC2ED
Authority key identifier: 41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a3a2f33322d3332203d3e20313334363337.roa
Signing time:             Sun 03 May 2026 02:12:07 +0000
ROA not before:           Sun 03 May 2026 02:07:07 +0000
ROA not after:            Sun 02 May 2027 02:12:07 +0000
asID:                     134637
IP address blocks:        2403:e380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl
                          rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:dc:b6:27:89:c1:0b:f9:b7:51:24:3a:b9:79:03:e6:59:3a:c2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E81C122CFE1947633AAA5A517B7923E1A78966
        Validity
            Not Before: May  3 02:07:07 2026 GMT
            Not After : May  2 02:12:07 2027 GMT
        Subject: CN=7CE4371086B04735A64424BB951BACD103AAE2F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b2:72:81:44:55:0e:ca:5f:1d:c2:07:3e:3c:
                    94:47:6a:e9:7b:e5:c7:91:48:75:e5:ff:7d:ba:6c:
                    4a:9b:c6:fa:c4:ca:71:15:00:c2:53:5c:62:3a:f3:
                    e3:9e:1f:8a:e3:d6:f7:e5:04:06:df:e7:f0:13:d7:
                    47:40:b1:02:12:aa:b7:35:b2:75:cb:a0:8c:61:64:
                    85:21:63:9a:2c:00:16:e3:6b:e5:79:33:9a:03:ba:
                    b9:47:63:6b:8f:8b:df:39:4c:59:df:5b:fb:1b:34:
                    af:77:93:18:08:c3:8e:4f:c4:3c:51:74:0c:da:ba:
                    76:5b:47:0a:f8:88:29:58:2a:05:38:46:8c:9a:ab:
                    c7:72:78:76:8f:81:71:e0:8d:b2:7b:7b:c2:0a:99:
                    07:47:e5:56:56:12:ce:6f:ce:22:d5:39:df:e1:e4:
                    e4:6e:cf:c2:97:cc:c3:ef:8a:09:c9:ae:8b:9b:77:
                    a9:d6:6b:a5:f9:21:83:cf:26:5b:b3:0b:a2:02:fd:
                    0a:ac:23:a3:71:b2:85:4a:0d:b8:f1:9e:9b:4e:96:
                    d7:0f:52:3a:5b:92:ec:29:3f:5d:0c:ba:88:e5:14:
                    13:d8:b0:62:db:d9:d2:02:c2:d7:f0:ca:5c:57:0d:
                    73:85:9b:c6:00:80:e6:f1:c7:c6:32:69:1d:3a:92:
                    cc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E4:37:10:86:B0:47:35:A6:44:24:BB:95:1B:AC:D1:03:AA:E2:F5
            X509v3 Authority Key Identifier:
                keyid:41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a3a2f33322d3332203d3e20313334363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:e380::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:93:88:a7:71:fe:8b:b5:28:82:59:72:b8:17:b4:74:48:f2:
         1c:2f:79:17:b8:c4:7e:b5:bc:14:52:c8:c0:5b:60:ef:79:16:
         1b:f4:9d:fc:e9:cd:79:34:74:f7:74:33:af:86:91:85:c4:31:
         26:5d:2a:08:9a:6d:21:9c:af:d4:4d:76:59:ab:66:75:30:2b:
         fe:d1:84:23:a3:46:b3:fc:84:09:d3:9a:ea:dd:76:7c:c6:2d:
         31:10:42:a0:2e:f9:9a:b9:0b:72:23:b0:90:17:7f:f4:65:21:
         cd:3f:62:3b:02:78:01:cc:a6:30:9a:f8:ec:2e:78:a1:81:c6:
         a3:50:fa:ba:00:36:2a:63:0e:6a:da:b4:1a:e1:af:73:1f:f7:
         0b:79:8b:a3:31:c3:17:a2:e7:b3:6c:88:0c:c0:e0:cf:6d:0b:
         0e:a6:4b:04:d5:90:20:33:5e:ef:8a:47:6c:bc:36:8a:5f:9e:
         8d:22:17:17:ba:e9:8a:83:e2:03:a0:71:58:34:38:0c:ce:43:
         3e:6d:f7:82:4c:57:a4:51:67:d2:c5:bc:e2:89:24:26:b4:24:
         49:1a:e1:42:56:41:03:ab:50:d6:71:94:55:82:48:ff:22:11:
         24:93:d5:5a:88:dd:47:e7:d9:b0:4f:6e:a6:af:d9:fe:f3:a9:
         4a:68:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:56 2026 by rpki-client