Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/323430313a646234303a3a2f33322d3332203d3e20313336383635.roa
File:                     323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (raw, json)
Hash identifier:          jhYHGOtLAWmv9OcO3/5rDKvnFPZl5OTObgAsQoi8r50=
Subject key identifier:   45:50:F7:31:70:C7:B9:0C:DE:92:58:44:24:92:41:CB:C9:0D:68:8C
Certificate issuer:       /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
Certificate serial:       7659ADC34AC6DB7B52C69D9B38D5666828C31DE8
Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/323430313a646234303a3a2f33322d3332203d3e20313336383635.roa
Signing time:             Sun 03 May 2026 02:37:15 +0000
ROA not before:           Sun 03 May 2026 02:32:15 +0000
ROA not after:            Sun 02 May 2027 02:37:15 +0000
asID:                     136865
IP address blocks:        2401:db40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl
                          rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 11:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:59:ad:c3:4a:c6:db:7b:52:c6:9d:9b:38:d5:66:68:28:c3:1d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6
        Validity
            Not Before: May  3 02:32:15 2026 GMT
            Not After : May  2 02:37:15 2027 GMT
        Subject: CN=4550F73170C7B90CDE925844249241CBC90D688C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:b7:b3:ad:c9:ea:ae:81:9a:84:38:33:72:
                    06:30:d0:65:bf:d3:88:a0:73:2a:5d:28:24:1c:cd:
                    73:2a:fc:19:9f:a5:28:ea:c8:99:1e:75:63:f8:bc:
                    ed:db:0c:5a:03:62:8e:fa:20:2d:7f:93:23:c3:dd:
                    20:0e:08:97:91:27:99:fc:e5:7d:25:40:d5:f4:d2:
                    9f:6c:49:fd:0b:07:b6:14:e7:51:1c:45:a2:8b:db:
                    25:98:2d:ad:62:62:ec:ec:df:52:30:73:0b:c2:da:
                    b4:de:be:14:65:25:40:df:e3:7e:f4:8c:41:6c:93:
                    33:79:62:57:e6:fc:ce:cb:dd:be:47:5e:9f:66:3b:
                    28:88:5e:9f:6f:06:33:e6:3f:4d:64:90:ca:9d:f1:
                    4c:ef:32:47:fe:3a:f9:b9:81:cd:c7:ea:24:6e:b9:
                    ac:50:08:20:4e:fa:f0:54:44:e4:ae:e0:06:37:ff:
                    8f:c9:22:22:b2:d0:e0:6c:b8:34:2e:40:5f:30:01:
                    57:22:85:40:c8:b2:fa:b5:d3:4a:b6:39:fa:53:4d:
                    99:af:28:31:00:b3:10:86:8d:9d:a7:82:cd:62:6e:
                    6f:a1:d8:84:8e:77:94:5c:57:93:68:23:e2:6f:f4:
                    d7:e3:0c:cf:ec:02:88:76:2e:e9:6c:80:c3:f9:93:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:50:F7:31:70:C7:B9:0C:DE:92:58:44:24:92:41:CB:C9:0D:68:8C
            X509v3 Authority Key Identifier:
                keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/323430313a646234303a3a2f33322d3332203d3e20313336383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:db40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:51:d9:6b:2e:ec:b1:bd:3e:12:e4:24:38:25:7d:5e:7c:18:
         da:55:fd:52:a1:f7:55:be:0a:a8:44:d5:d2:4c:5b:7c:1d:64:
         22:58:e0:d1:89:1c:6a:5a:44:68:2b:8a:b5:26:7c:12:e3:e7:
         c8:e9:6e:28:6c:ee:10:f1:08:03:b3:06:02:c9:7e:19:5c:5a:
         1b:60:85:42:d6:75:89:57:01:6c:5d:22:56:f7:d4:55:59:2d:
         a2:c3:f7:76:c3:1d:8b:db:76:2b:ef:82:27:ef:be:9d:b8:44:
         93:ec:fa:3a:42:4d:a8:be:21:b6:d8:2b:0d:a6:78:99:f2:83:
         98:20:76:0c:da:68:1d:e9:7b:e8:dd:23:1f:c4:f2:7d:74:10:
         67:2c:49:d6:94:3e:42:4d:65:3f:66:d5:a3:b4:bf:af:5c:d7:
         aa:fb:cc:a1:5b:49:92:48:f2:3f:0c:c3:3f:86:e6:6b:3e:07:
         ed:63:da:ed:06:8e:1e:3c:93:c8:a4:67:ce:7b:b3:af:b8:5e:
         4a:12:e5:d8:0b:6d:d8:c0:2b:c6:81:b5:bd:8c:03:b2:a5:f7:
         53:f7:91:2a:2d:16:c5:cb:6d:3a:36:8a:1f:ed:92:3f:57:b8:
         19:1a:2e:38:4e:9e:8c:1b:a8:6f:c3:d5:59:84:55:b1:44:50:
         6c:96:30:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 19:06:22 2026 by rpki-client