Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/323430313a383234303a3a2f33322d3438203d3e203338373834.roa
File:                     323430313a383234303a3a2f33322d3438203d3e203338373834.roa (raw, json)
Hash identifier:          5AQkhCDteB07iPZX8nhNE6+kuxwwFLMt5gQdPyMYJFE=
Subject key identifier:   54:85:01:55:6E:D2:4E:93:48:22:16:7E:A1:AF:96:7C:4E:D4:E3:56
Certificate issuer:       /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E
Certificate serial:       3F5AD3DF7BC1605783B6DB380082B1C4513289C9
Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/323430313a383234303a3a2f33322d3438203d3e203338373834.roa
Signing time:             Sun 03 May 2026 03:04:50 +0000
ROA not before:           Sun 03 May 2026 02:59:50 +0000
ROA not after:            Sun 02 May 2027 03:04:50 +0000
asID:                     38784
IP address blocks:        2401:8240::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl
                          rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 00:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5a:d3:df:7b:c1:60:57:83:b6:db:38:00:82:b1:c4:51:32:89:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E
        Validity
            Not Before: May  3 02:59:50 2026 GMT
            Not After : May  2 03:04:50 2027 GMT
        Subject: CN=548501556ED24E934822167EA1AF967C4ED4E356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:50:e6:2d:7e:b6:67:c4:ef:d6:4b:fe:6b:
                    2c:41:fb:16:0b:97:ca:65:e0:3c:fe:cd:32:78:56:
                    bf:d0:74:65:2a:71:58:5d:5a:e1:52:10:74:93:58:
                    39:39:74:af:d5:94:b0:9b:c9:4e:8c:ec:9a:b4:83:
                    a5:9a:a5:63:70:eb:96:9d:83:08:6c:15:02:08:70:
                    92:da:52:c4:2e:98:ec:86:71:d0:28:16:e3:92:d6:
                    ee:af:19:30:32:aa:b8:0f:18:a1:4f:c5:53:25:8a:
                    e9:10:52:06:f6:92:2b:a0:33:b2:2a:12:31:53:af:
                    82:a9:89:34:33:f8:61:73:0a:92:92:d5:5e:6f:4a:
                    bd:39:d3:ed:82:c9:c9:8e:fd:4c:b7:1d:18:75:82:
                    5b:51:50:ce:b0:b1:67:ad:1c:25:e3:93:f6:aa:61:
                    8b:4e:70:28:87:72:36:b2:de:65:b6:e2:78:17:c4:
                    bc:5a:9e:8d:57:49:b5:55:4e:78:40:2c:ff:09:04:
                    81:13:fd:b8:a3:47:c3:25:ae:d7:6b:91:d8:fc:00:
                    13:c4:12:9c:b2:0d:bc:3e:69:33:4b:4c:fb:3d:07:
                    83:56:ae:12:1c:eb:9f:a1:01:a8:69:a6:97:b6:43:
                    23:b8:b3:dd:0b:99:87:d9:57:31:fe:eb:5e:59:98:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:85:01:55:6E:D2:4E:93:48:22:16:7E:A1:AF:96:7C:4E:D4:E3:56
            X509v3 Authority Key Identifier:
                keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/323430313a383234303a3a2f33322d3438203d3e203338373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8240::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:ec:21:e8:b1:47:9f:c2:05:12:8a:69:eb:74:b0:39:99:
         ed:ac:82:8f:cd:44:0c:d8:58:ca:46:37:2a:7f:aa:be:3a:00:
         fc:68:22:6a:e7:4f:5d:47:bb:91:b1:f1:f1:42:7f:f0:fa:f8:
         74:bd:76:60:02:21:78:b4:72:fa:72:81:a6:84:78:31:75:36:
         aa:dc:3f:81:23:6c:c7:5c:44:f5:42:bf:26:f8:d1:f4:e9:e5:
         0e:f0:18:06:bf:3e:5c:c5:62:0d:83:76:90:dc:39:25:d9:c9:
         d9:89:c3:1f:8d:96:ff:8c:4e:e7:b8:6d:6a:8d:56:a0:96:0b:
         c3:42:09:7d:83:da:20:a0:35:08:ca:0c:a5:b2:32:82:4f:38:
         ed:c8:43:ba:45:a1:0d:49:82:18:59:53:18:53:22:68:36:d7:
         e5:3f:52:a1:17:ac:ea:14:81:37:d7:fa:0c:25:af:04:10:20:
         d7:42:9a:15:6c:33:9c:56:0c:33:3c:97:fc:03:b8:c2:42:75:
         6f:70:2b:57:e0:b0:8e:6d:11:75:f0:ea:84:67:43:de:7c:c6:
         08:19:0d:96:a1:04:c4:4b:c8:7b:b9:7e:02:41:9e:16:01:7b:
         75:e4:98:01:84:f5:ff:5c:5f:8f:c0:94:10:df:0a:6b:2f:57:
         c9:cf:5b:5f
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUP1rT33vBYFeDtts4AIKxxFEyickwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3
NTAxQ0U2RTAeFw0yNjA1MDMwMjU5NTBaFw0yNzA1MDIwMzA0NTBaMDMxMTAvBgNV
BAMTKDU0ODUwMTU1NkVEMjRFOTM0ODIyMTY3RUExQUY5NjdDNEVENEUzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHVDmLX62Z8Tv1kv+ayxB+xYL
l8pl4Dz+zTJ4Vr/QdGUqcVhdWuFSEHSTWDk5dK/VlLCbyU6M7Jq0g6WapWNw65ad
gwhsFQIIcJLaUsQumOyGcdAoFuOS1u6vGTAyqrgPGKFPxVMliukQUgb2kiugM7Iq
EjFTr4KpiTQz+GFzCpKS1V5vSr050+2CycmO/Uy3HRh1gltRUM6wsWetHCXjk/aq
YYtOcCiHcjay3mW24ngXxLxano1XSbVVTnhALP8JBIET/bijR8Mlrtdrkdj8ABPE
EpyyDbw+aTNLTPs9B4NWrhIc65+hAahpppe2QyO4s90LmYfZVzH+615ZmE7RAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUVIUBVW7STpNIIhZ+oa+WfE7U41YwHwYDVR0j
BBgwFoAUezPvSbkSrvKhpRfCysk9DnUBzm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzQ1NDcxMDQtOTM5ZS00MGUzLThmYzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlC
OTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3NTAxQ0U2RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QjMzRUY0OUI5MTJBRUYyQTFBNTE3QzJDQUM5M0QwRTc1MDFD
RTZFLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M0NTQ3MTA0LTkzOWUtNDBlMy04
ZmM4LTQyNTIyNjQyMDQ0Yi8wLzMyMzQzMDMxM2EzODMyMzQzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMzMzgzNzM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAYJAMA0GCSqGSIb3
DQEBCwUAA4IBAQAd6Owh6LFHn8IFEopp63SwOZntrIKPzUQM2FjKRjcqf6q+OgD8
aCJq509dR7uRsfHxQn/w+vh0vXZgAiF4tHL6coGmhHgxdTaq3D+BI2zHXET1Qr8m
+NH06eUO8BgGvz5cxWINg3aQ3Dkl2cnZicMfjZb/jE7nuG1qjVaglgvDQgl9g9og
oDUIygylsjKCTzjtyEO6RaENSYIYWVMYUyJoNtflP1KhF6zqFIE31/oMJa8EECDX
QpoVbDOcVgwzPJf8A7jCQnVvcCtX4LCObRF18OqEZ0PefMYIGQ2WoQTES8h7uX4C
QZ4WAXt15JgBhPX/XF+PwJQQ3wprL1fJz1tf
-----END CERTIFICATE-----
Generated at Thu May 7 04:32:59 2026 by rpki-client