Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a313533303a3a2f34382d3438203d3e20313533303837.roa
File:                     323430343a393763303a313533303a3a2f34382d3438203d3e20313533303837.roa (raw, json)
Hash identifier:          DVRCBZGJCMQ3UFWLlu0nlfz5oZhk8Rg3chAA9mxuZpI=
Subject key identifier:   83:AC:1C:2C:FE:11:B8:38:69:D1:0A:17:94:0A:5D:78:D2:DF:56:6F
Certificate issuer:       /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
Certificate serial:       55DF587AA67920DC1800032AFE9CA885DEE7DE5D
Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a313533303a3a2f34382d3438203d3e20313533303837.roa
Signing time:             Sun 03 May 2026 02:11:47 +0000
ROA not before:           Sun 03 May 2026 02:06:47 +0000
ROA not after:            Sun 02 May 2027 02:11:47 +0000
asID:                     153087
IP address blocks:        2404:97c0:1530::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl
                          rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:df:58:7a:a6:79:20:dc:18:00:03:2a:fe:9c:a8:85:de:e7:de:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
        Validity
            Not Before: May  3 02:06:47 2026 GMT
            Not After : May  2 02:11:47 2027 GMT
        Subject: CN=83AC1C2CFE11B83869D10A17940A5D78D2DF566F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:b8:29:61:72:1a:b7:a5:e7:c7:33:0c:9e:
                    3b:37:26:70:00:98:4f:c5:6f:fa:a9:f5:07:54:34:
                    9c:09:77:e2:d3:97:92:90:f5:3b:b6:b4:53:c2:e9:
                    05:c3:2b:4b:46:af:88:ea:3c:2a:55:20:ed:c4:90:
                    fa:0e:68:d6:29:d0:33:e7:e7:b4:48:f1:91:9d:f3:
                    81:23:47:fe:83:af:38:45:32:f5:81:10:88:9d:0b:
                    a4:1d:6a:7f:8e:e5:5c:35:1e:81:4e:84:dc:7c:7b:
                    72:cc:4b:6e:64:e2:4f:7e:e4:e5:4d:25:f3:7d:54:
                    bc:84:a0:fe:44:3a:4d:98:d2:10:0f:3b:73:ac:fa:
                    1a:8e:82:e5:54:33:d6:8e:c4:41:b5:e3:4f:98:9d:
                    03:a1:76:42:40:12:cf:2a:68:4f:69:38:08:c8:7b:
                    22:3b:b2:6c:5d:bd:82:1f:e1:e4:f7:b7:3c:fb:2d:
                    91:f8:30:82:c4:1f:5a:5c:d0:c7:54:e2:d6:df:19:
                    58:9d:98:63:6a:49:77:05:9b:7c:96:dd:3f:8b:7d:
                    97:b7:26:2c:b9:ff:92:16:47:69:d3:56:4e:db:4a:
                    e7:64:9b:b7:29:ea:99:40:df:48:de:1f:fb:0f:ef:
                    c8:d8:f2:9d:57:c8:5c:d7:1d:2f:67:fb:1c:43:98:
                    08:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AC:1C:2C:FE:11:B8:38:69:D1:0A:17:94:0A:5D:78:D2:DF:56:6F
            X509v3 Authority Key Identifier:
                keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a313533303a3a2f34382d3438203d3e20313533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:97c0:1530::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:19:c5:78:2a:07:ab:37:36:d1:dd:e7:d0:65:a6:48:f9:ee:
         c6:d3:a6:84:d0:bf:84:2c:ee:f6:21:01:73:d7:e8:df:5f:0f:
         a0:9e:14:77:5f:68:ea:91:5e:6b:9f:74:4a:a3:b7:a5:a3:f4:
         46:2c:0e:22:96:e0:41:69:12:5f:62:49:c1:cf:30:38:c4:34:
         41:27:84:64:ee:ca:9c:63:ca:cd:63:55:d9:c2:48:cc:9e:fc:
         59:87:5f:bb:cd:93:3e:75:bd:db:38:54:59:01:c7:63:45:9c:
         9e:fe:dc:4d:c8:d6:52:6a:9b:0e:c1:2c:1b:23:06:72:a6:c0:
         a3:f7:2f:46:34:c3:e3:ec:eb:98:08:65:2a:16:46:b9:6d:73:
         3d:70:ff:09:a5:89:5c:16:0f:61:39:64:fe:23:03:a6:f3:a3:
         91:ae:1c:3b:f4:31:4c:b3:86:6d:71:3d:8d:cc:a8:23:e9:39:
         38:03:9a:d2:fc:fc:c3:58:0a:23:d3:ff:b6:01:18:4a:9d:1a:
         bb:81:9e:ea:3f:39:0d:b6:f6:e0:2e:62:90:de:8c:c3:00:0c:
         60:24:fd:6b:1f:9a:54:2a:9e:e8:7d:6a:4d:99:ca:a3:30:93:
         12:d3:a4:06:85:3b:35:06:8a:56:54:f5:ee:75:2c:e8:4c:06:
         8e:50:a6:f6
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUVd9YeqZ5INwYAAMq/pyohd7n3l0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk4MEVGRDY5REE0QzhBQjNGQzcxMzhGNTdCRTNDREFG
ODAyMjM4QjAeFw0yNjA1MDMwMjA2NDdaFw0yNzA1MDIwMjExNDdaMDMxMTAvBgNV
BAMTKDgzQUMxQzJDRkUxMUI4Mzg2OUQxMEExNzk0MEE1RDc4RDJERjU2NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjLgpYXIat6XnxzMMnjs3JnAA
mE/Fb/qp9QdUNJwJd+LTl5KQ9Tu2tFPC6QXDK0tGr4jqPCpVIO3EkPoOaNYp0DPn
57RI8ZGd84EjR/6DrzhFMvWBEIidC6Qdan+O5Vw1HoFOhNx8e3LMS25k4k9+5OVN
JfN9VLyEoP5EOk2Y0hAPO3Os+hqOguVUM9aOxEG140+YnQOhdkJAEs8qaE9pOAjI
eyI7smxdvYIf4eT3tzz7LZH4MILEH1pc0MdU4tbfGVidmGNqSXcFm3yW3T+LfZe3
Jiy5/5IWR2nTVk7bSudkm7cp6plA30jeH/sP78jY8p1XyFzXHS9n+xxDmAjjAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUg6wcLP4RuDhp0QoXlApdeNLfVm8wHwYDVR0j
BBgwFoAUuYDv1p2kyKs/xxOPV7482vgCI4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDY1NGE4YzMtMzBjOC00OTU3LTgyOTEtYTBjMWY5YjE4MzllLzAvQjk4MEVGRDY5
REE0QzhBQjNGQzcxMzhGNTdCRTNDREFGODAyMjM4Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9COTgwRUZENjlEQTRDOEFCM0ZDNzEzOEY1N0JFM0NEQUY4MDIy
MzhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04
MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzEzNTMzMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
BJfAFTAwDQYJKoZIhvcNAQELBQADggEBADAZxXgqB6s3NtHd59Blpkj57sbTpoTQ
v4Qs7vYhAXPX6N9fD6CeFHdfaOqRXmufdEqjt6Wj9EYsDiKW4EFpEl9iScHPMDjE
NEEnhGTuypxjys1jVdnCSMye/FmHX7vNkz51vds4VFkBx2NFnJ7+3E3I1lJqmw7B
LBsjBnKmwKP3L0Y0w+Ps65gIZSoWRrltcz1w/wmliVwWD2E5ZP4jA6bzo5GuHDv0
MUyzhm1xPY3MqCPpOTgDmtL8/MNYCiPT/7YBGEqdGruBnuo/OQ229uAuYpDejMMA
DGAk/WsfmlQqnuh9ak2ZyqMwkxLTpAaFOzUGilZU9e51LOhMBo5QpvY=
-----END CERTIFICATE-----
Generated at Wed May 13 15:07:20 2026 by rpki-client