Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa
File:                     323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (raw, json)
Hash identifier:          xM4nPkfrKQ/KWF8+Mu6GtG7DRliUUO1OiNjm+6857dQ=
Subject key identifier:   74:3E:4F:1F:AE:8D:72:F2:5F:89:5D:9C:D6:28:11:B0:2D:76:72:F6
Certificate issuer:       /CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4
Certificate serial:       3D78B261EA82E1B685F537E00FD9676379AF8703
Authority key identifier: B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa
Signing time:             Sun 03 May 2026 02:20:57 +0000
ROA not before:           Sun 03 May 2026 02:15:57 +0000
ROA not after:            Sun 02 May 2027 02:20:57 +0000
asID:                     58495
IP address blocks:        2404:4780:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl
                          rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 00:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:78:b2:61:ea:82:e1:b6:85:f5:37:e0:0f:d9:67:63:79:af:87:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4
        Validity
            Not Before: May  3 02:15:57 2026 GMT
            Not After : May  2 02:20:57 2027 GMT
        Subject: CN=743E4F1FAE8D72F25F895D9CD62811B02D7672F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:09:cb:07:33:44:9d:6d:77:c8:a5:b8:7b:
                    49:b9:77:6b:db:4b:f3:c6:03:36:3e:bd:e2:f0:e5:
                    cf:8e:42:ff:34:f8:bd:a7:e1:22:48:6a:81:75:4a:
                    64:ee:d0:92:e9:9c:40:6c:b6:d1:f6:37:5b:fa:f0:
                    b4:c3:4c:d6:61:26:4e:7f:6d:8b:07:39:92:4a:c4:
                    25:8b:3a:f0:32:30:60:56:1e:a5:d5:4a:52:f2:62:
                    da:74:10:5f:99:75:3f:cc:9f:dc:f1:77:57:6b:5f:
                    10:bf:83:56:8a:b4:ce:72:40:43:39:b5:ad:e7:15:
                    4e:6c:d4:15:fc:62:66:8f:5f:c6:72:bf:fe:b2:be:
                    3c:0d:6c:07:75:6f:1b:97:f4:04:0d:e2:3c:c8:90:
                    56:5b:c5:23:41:e9:57:96:10:72:55:e4:58:1a:c5:
                    c5:53:be:a8:58:7e:24:e2:7f:85:5a:c8:96:41:73:
                    15:b7:7f:f5:1e:b8:7e:2e:16:52:52:b1:75:56:10:
                    45:0c:fd:62:65:eb:22:6e:32:f9:47:d8:0e:49:34:
                    6e:50:e1:86:f7:2a:65:d0:55:e3:1c:e2:a8:0a:2e:
                    54:25:3b:10:89:29:ed:1a:56:47:29:de:fa:dc:a4:
                    ec:4f:20:82:4f:d3:4a:50:37:a1:b8:38:3c:f6:23:
                    5f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3E:4F:1F:AE:8D:72:F2:5F:89:5D:9C:D6:28:11:B0:2D:76:72:F6
            X509v3 Authority Key Identifier:
                keyid:B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:4780:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:ba:5d:72:e4:13:1d:6a:db:f2:d0:89:05:cf:2a:84:45:c6:
         de:0f:e4:37:6b:f3:6e:7c:ed:82:f8:d0:f9:09:9d:70:20:51:
         83:9c:71:73:a4:72:7c:80:51:1f:be:3b:1d:f4:64:9a:c8:68:
         a0:d4:cc:1a:8e:82:c7:ab:32:e9:bb:2d:f5:a0:00:0d:c6:9b:
         a9:69:63:ad:3e:54:9f:51:02:83:06:5e:80:86:c4:1e:84:b8:
         90:59:a3:a4:05:b3:d4:2c:09:8b:6e:f5:cb:32:ee:23:5b:a9:
         61:c2:53:63:d4:16:2f:67:45:fb:ca:56:1b:a3:7f:c7:07:9c:
         2d:1c:15:4e:ad:3e:53:fc:34:1e:96:01:59:cb:5e:e9:68:a0:
         c8:b4:43:5b:8c:09:b2:80:df:af:17:a6:66:98:8b:c4:e9:1c:
         4c:ad:ff:2e:13:62:5b:b2:2c:8e:fe:4b:6f:cd:7a:52:20:a5:
         3b:d1:40:0e:28:3b:15:cf:34:db:9b:e9:ac:2c:3a:1e:c2:d7:
         35:da:ef:64:b5:8f:41:46:ac:ac:33:48:f9:d1:2b:4e:e6:6c:
         13:4b:99:46:3e:64:bf:26:70:8b:27:e3:36:e6:f4:30:03:80:
         ca:15:ae:95:c8:e9:ed:8f:d6:29:51:9b:36:81:65:bf:96:a9:
         67:1f:57:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:21 2026 by rpki-client