Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/323430353a396434303a3a2f33322d3438203d3e203538343935.roa
File:                     323430353a396434303a3a2f33322d3438203d3e203538343935.roa (raw, json)
Hash identifier:          skUK10knkCBShybDHpDUtmDu/rajXkD3RG/uOlM7FK4=
Subject key identifier:   81:95:52:52:17:97:DA:A4:AB:E5:10:C3:5D:55:52:75:BD:21:8C:AD
Certificate issuer:       /CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6
Certificate serial:       6F6A6DC473FAC017C67A919E89FC00AC7C6C7C91
Authority key identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/323430353a396434303a3a2f33322d3438203d3e203538343935.roa
Signing time:             Sun 03 May 2026 02:14:44 +0000
ROA not before:           Sun 03 May 2026 02:09:44 +0000
ROA not after:            Sun 02 May 2027 02:14:44 +0000
asID:                     58495
IP address blocks:        2405:9d40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl
                          rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6a:6d:c4:73:fa:c0:17:c6:7a:91:9e:89:fc:00:ac:7c:6c:7c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6
        Validity
            Not Before: May  3 02:09:44 2026 GMT
            Not After : May  2 02:14:44 2027 GMT
        Subject: CN=819552521797DAA4ABE510C35D555275BD218CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:b7:7e:d6:4f:d5:d0:ab:df:38:6d:a1:ea:
                    d5:b6:f6:8d:5a:61:74:18:e6:4c:97:11:69:5a:e5:
                    2a:b3:f0:4e:1c:a4:36:56:0f:7c:68:b8:08:d4:5a:
                    21:d8:85:41:a9:91:79:c5:00:e0:ff:c6:1e:e7:cc:
                    60:9f:08:43:70:80:a6:0c:9e:1b:6a:a6:bf:ac:00:
                    4a:9d:09:c6:d4:df:42:62:29:0a:9e:b5:0b:92:79:
                    63:e6:c1:73:06:f3:4d:71:df:dc:31:a0:15:89:92:
                    56:f5:34:6b:00:5a:7f:7a:93:ad:5a:9b:43:de:16:
                    ca:23:5e:73:cc:25:d5:d1:b0:4d:f2:a5:bf:3c:8c:
                    47:bc:25:24:1e:1b:48:fb:41:ff:5e:10:89:4c:7c:
                    4c:a3:c6:8e:c6:ca:17:3e:26:af:d2:a9:18:95:37:
                    58:60:0e:f2:53:69:68:ad:71:f3:47:31:b2:4d:22:
                    3b:4e:42:f9:b4:27:4e:dd:1c:82:3b:34:d0:6b:c4:
                    c4:d8:e0:f9:80:dd:be:c7:a6:9d:6e:23:cd:27:a4:
                    13:9e:1c:0b:01:4c:4e:78:8e:b2:4a:95:b1:ed:f6:
                    76:7b:48:ca:27:dc:10:57:df:7c:1d:16:6f:2d:83:
                    f5:8c:08:b5:7a:16:41:38:b3:89:b5:b8:0b:de:78:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:95:52:52:17:97:DA:A4:AB:E5:10:C3:5D:55:52:75:BD:21:8C:AD
            X509v3 Authority Key Identifier:
                keyid:BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/323430353a396434303a3a2f33322d3438203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:f9:a9:8a:fa:73:78:19:aa:67:35:3e:8f:1e:6b:0b:ff:28:
         21:69:c4:f1:23:61:c8:ed:8e:44:35:b2:52:23:d1:ee:8c:8d:
         fa:a4:d2:27:50:e2:a8:f2:49:51:91:27:c5:c8:1d:d5:66:30:
         7d:d8:62:24:32:34:1d:60:79:1e:f8:af:23:95:e2:46:ee:8a:
         e6:cb:1a:ee:dc:4e:9f:9c:09:a7:5f:63:1e:48:7a:9c:62:ce:
         ea:94:f6:3c:16:d2:e6:70:11:6c:3e:0c:ce:9f:dd:cf:e4:ef:
         6f:bf:f0:d7:22:f0:2b:48:76:d0:f2:e0:28:d2:54:6f:9b:9a:
         16:62:f4:8b:67:3c:9d:24:b4:c3:fc:6e:0d:26:07:e4:2a:8b:
         5d:3c:90:2c:6e:ec:43:19:3c:2c:13:ad:75:40:00:10:a6:68:
         32:7c:9e:70:da:02:52:4f:a7:5f:87:a1:d0:90:ff:7d:87:d2:
         9e:a3:39:db:41:cd:08:62:33:a7:47:c5:07:59:e1:7a:21:f8:
         df:21:82:03:93:c4:02:5a:69:a2:dd:4a:db:8e:1b:7f:40:55:
         4f:c5:6e:47:39:77:f1:98:72:5f:ba:77:87:ed:a5:54:ea:fc:
         3d:eb:6a:14:ce:ba:7d:0b:fc:e0:ec:01:3c:3f:20:d4:af:f0:
         1a:bd:97:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:31 2026 by rpki-client