Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630313a3a2f34382d3438203d3e203538343935.roa
File:                     323430343a326638303a666630313a3a2f34382d3438203d3e203538343935.roa (raw, json)
Hash identifier:          FKEalfthQgNgNvB9Mg03c34yiaWMl0AFMqOGRjb2Nx8=
Subject key identifier:   72:6F:D3:E4:66:05:22:25:DB:58:E4:CC:5D:89:B5:6C:0D:06:B0:E6
Certificate issuer:       /CN=62DE2AF277EBF89C97513655B43DEF762311A799
Certificate serial:       289E6950C93C11696B59CCA218D74C3A235152D8
Authority key identifier: 62:DE:2A:F2:77:EB:F8:9C:97:51:36:55:B4:3D:EF:76:23:11:A7:99
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62DE2AF277EBF89C97513655B43DEF762311A799.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630313a3a2f34382d3438203d3e203538343935.roa
Signing time:             Sun 03 May 2026 03:09:55 +0000
ROA not before:           Sun 03 May 2026 03:04:55 +0000
ROA not after:            Sun 02 May 2027 03:09:55 +0000
asID:                     58495
IP address blocks:        2404:2f80:ff01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/62DE2AF277EBF89C97513655B43DEF762311A799.crl
                          rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/62DE2AF277EBF89C97513655B43DEF762311A799.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62DE2AF277EBF89C97513655B43DEF762311A799.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 10:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9e:69:50:c9:3c:11:69:6b:59:cc:a2:18:d7:4c:3a:23:51:52:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DE2AF277EBF89C97513655B43DEF762311A799
        Validity
            Not Before: May  3 03:04:55 2026 GMT
            Not After : May  2 03:09:55 2027 GMT
        Subject: CN=726FD3E466052225DB58E4CC5D89B56C0D06B0E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:05:ad:71:81:0e:d0:9c:58:48:e0:b3:6b:68:
                    51:53:82:84:09:2e:ec:f7:66:ca:cc:97:36:5f:70:
                    1c:91:88:26:10:63:c5:47:b5:af:c0:7d:d2:bd:71:
                    b8:1a:b4:47:e6:0f:66:e1:86:b1:4a:1c:3f:4d:d3:
                    79:9e:24:46:ad:6d:72:2e:0b:db:ee:0b:2d:e7:ab:
                    03:5c:ff:f5:9a:2d:18:c6:fb:77:8d:e0:81:bd:b2:
                    3c:4b:c6:b8:db:73:df:7e:d0:8c:9b:19:e2:c6:74:
                    f1:be:ab:3a:34:3e:b4:7d:35:73:0f:47:fc:4c:a3:
                    4c:0e:50:44:17:2b:af:69:d7:4a:0d:c5:c9:e4:93:
                    35:32:a2:4b:f2:57:88:1b:a1:7b:ad:d9:9a:1a:38:
                    8d:b2:92:33:09:6f:f5:20:9b:f6:a5:77:af:6f:6d:
                    14:ba:e6:7b:70:71:ff:03:e4:01:7e:95:93:7c:cf:
                    fc:e0:22:da:0a:5e:0e:0b:18:9a:40:1d:71:1f:8b:
                    d2:33:1c:8c:e8:c8:d6:2f:32:37:cd:58:e6:fd:2e:
                    eb:96:76:82:a3:4b:5c:5a:d6:93:38:11:60:7b:7f:
                    eb:9c:d7:6c:d0:8f:01:b3:90:b8:0f:35:46:1d:b8:
                    a2:9a:a8:3c:fe:cf:d3:2e:3d:bb:9c:d6:5a:dd:97:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6F:D3:E4:66:05:22:25:DB:58:E4:CC:5D:89:B5:6C:0D:06:B0:E6
            X509v3 Authority Key Identifier:
                keyid:62:DE:2A:F2:77:EB:F8:9C:97:51:36:55:B4:3D:EF:76:23:11:A7:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/62DE2AF277EBF89C97513655B43DEF762311A799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62DE2AF277EBF89C97513655B43DEF762311A799.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630313a3a2f34382d3438203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:2f80:ff01::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:12:9e:d2:82:95:c2:59:33:e0:f1:48:63:c0:14:8b:f2:9a:
         98:22:39:4f:1b:03:ff:f8:14:40:a1:64:10:60:49:b3:50:65:
         21:a4:df:15:df:5a:67:76:0b:ea:db:15:a1:2e:72:c3:e5:4c:
         1f:7b:1b:2b:e7:65:87:16:23:b7:ba:af:bf:d3:04:be:84:8d:
         5e:03:72:63:92:4d:10:94:14:e7:a0:aa:a1:2a:c7:bc:95:17:
         64:37:ee:a1:34:b3:29:ea:7b:5b:35:5a:cc:48:6a:86:3b:84:
         8e:1b:58:e7:55:1f:3e:7d:4a:bf:48:96:72:a7:af:23:e4:39:
         2f:57:e9:45:71:2c:ac:a0:02:64:cc:53:50:a7:14:28:07:2f:
         33:0f:55:0c:66:6b:2f:a1:4f:dc:e1:fa:f8:65:89:34:c3:53:
         09:a0:f8:1b:59:f5:e1:56:5e:11:59:74:3b:09:73:34:54:d6:
         b5:5a:f9:c3:fa:78:ca:c0:cc:a2:9c:b9:6b:4d:74:e5:94:77:
         89:7b:30:ab:09:39:ef:68:85:5b:54:04:dd:99:8f:f5:97:a5:
         b4:2e:1e:e5:50:a1:ad:57:65:e2:1b:fd:1a:c1:44:81:14:87:
         3e:c6:32:fd:6d:b5:2b:67:7e:2f:07:7a:8a:66:92:48:32:53:
         ae:0e:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:32 2026 by rpki-client