Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          +LaMq3pdEi/ORlc8tmXfVIVpjCo7oBNFmlzgxZi8Xto=
Subject key identifier:   71:73:34:56:7C:F9:14:D6:AD:2F:09:DB:E1:B6:E7:06:55:B3:A4:46
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       0734C388020133CF30CE1E319E7189F7BB0FAD52
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 28 Jan 2026 04:00:02 +0000
ROA not before:           Wed 28 Jan 2026 03:55:02 +0000
ROA not after:            Wed 27 Jan 2027 04:00:02 +0000
asID:                     38526
IP address blocks:        2405:3740:901f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 20:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:34:c3:88:02:01:33:cf:30:ce:1e:31:9e:71:89:f7:bb:0f:ad:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Jan 28 03:55:02 2026 GMT
            Not After : Jan 27 04:00:02 2027 GMT
        Subject: CN=717334567CF914D6AD2F09DBE1B6E70655B3A446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:94:ea:c8:7c:86:95:51:c9:ac:8b:3c:a9:
                    83:c1:74:57:d2:f3:d1:27:38:76:88:8d:64:dc:7e:
                    6f:28:f1:a8:5d:50:2d:c5:90:c4:d6:88:7d:cd:af:
                    65:45:51:f5:2d:69:6d:d3:45:dc:17:e7:2c:c8:60:
                    f1:38:15:d5:43:1a:54:84:2d:70:52:b7:31:b0:6f:
                    9e:bd:b1:5a:11:04:00:49:a6:82:a0:fb:ad:e3:4b:
                    d0:7d:92:b2:e7:cf:92:81:25:b3:5b:a9:ba:e4:20:
                    74:af:a7:dc:2c:9e:d9:77:6f:55:9b:63:3e:3a:d6:
                    aa:ea:3e:d9:8d:ad:b3:c9:2b:10:63:f3:77:7a:5e:
                    0b:94:e3:a1:38:2b:1f:43:ab:30:c6:af:7b:2c:36:
                    92:6c:61:f4:b6:af:e8:08:3d:0e:31:5e:07:95:90:
                    be:ae:10:6d:ff:49:72:49:ff:b2:71:c4:eb:15:e6:
                    90:55:23:0f:6c:31:4a:d5:51:3a:67:9f:e4:db:0e:
                    bb:b8:96:18:e6:45:e6:e0:bc:4b:ac:60:83:b4:dd:
                    92:35:f5:06:a0:5c:3a:7d:54:e2:cd:77:94:d5:8c:
                    c7:b4:f7:43:f8:b3:1d:e4:2a:d6:14:97:cd:3b:80:
                    b4:ad:fd:75:74:a6:8c:8c:21:a5:e7:26:b2:8f:51:
                    25:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:73:34:56:7C:F9:14:D6:AD:2F:09:DB:E1:B6:E7:06:55:B3:A4:46
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:901f::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:ea:5d:a2:45:9c:78:a0:df:c5:31:5d:83:db:64:17:37:c1:
         69:c3:18:ae:57:d9:de:ee:6a:f7:9b:8d:49:d5:33:fc:b6:ca:
         fc:34:ca:82:e9:0f:bf:69:89:c4:99:0a:fe:0d:67:93:fe:fe:
         0d:45:b9:c2:10:e7:b4:81:bf:29:0c:6c:af:93:b8:da:b2:a0:
         75:9e:d8:3e:a9:85:54:cd:38:fb:e5:8f:0a:64:5d:d1:e0:03:
         c3:6c:91:57:27:f9:5a:14:f5:e1:6d:0d:0a:ec:b0:8d:60:4c:
         89:8c:17:f7:41:b6:66:a2:98:b6:05:bc:5d:7e:5d:33:75:30:
         6d:c3:f7:a4:58:b3:92:21:91:b4:6e:b4:82:8a:b0:bb:37:8f:
         5e:4f:de:92:a0:54:24:bb:f8:e3:12:d6:40:e2:c2:43:d4:4c:
         dc:e8:cd:4e:95:42:0f:a8:16:b6:e7:fb:48:21:5f:e3:34:b6:
         ac:72:39:36:55:ba:15:e6:89:e6:04:a0:ef:fc:33:1e:2c:67:
         38:eb:b8:40:7e:56:c7:70:0f:53:f9:3f:b5:c5:ee:0d:ef:5c:
         61:ba:8d:66:9c:58:41:db:7f:0e:3c:ec:61:7f:d0:a5:11:d6:
         95:5e:9a:db:de:53:a4:78:8e:b3:22:43:b4:31:6c:1e:98:a0:
         93:e0:dd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:41 2026 by rpki-client