Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3333343a3a2f34382d3438203d3e20313533303837.roa
File:                     323430343a393763303a3333343a3a2f34382d3438203d3e20313533303837.roa (raw, json)
Hash identifier:          So3u9P+p+H/w+BwyGDFSwAAKhMdRFnr0HhL71B0/lSE=
Subject key identifier:   19:53:12:F9:CB:D0:3C:BF:A8:73:20:DD:C6:CC:12:A5:44:55:47:F4
Certificate issuer:       /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
Certificate serial:       0DA9FFBB886A8A2602A83ACED64E74DDF5303D28
Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3333343a3a2f34382d3438203d3e20313533303837.roa
Signing time:             Sun 03 May 2026 02:11:45 +0000
ROA not before:           Sun 03 May 2026 02:06:45 +0000
ROA not after:            Sun 02 May 2027 02:11:45 +0000
asID:                     153087
IP address blocks:        2404:97c0:334::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl
                          rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a9:ff:bb:88:6a:8a:26:02:a8:3a:ce:d6:4e:74:dd:f5:30:3d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
        Validity
            Not Before: May  3 02:06:45 2026 GMT
            Not After : May  2 02:11:45 2027 GMT
        Subject: CN=195312F9CBD03CBFA87320DDC6CC12A5445547F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:21:87:e9:2f:c6:4a:74:af:28:41:1b:8b:
                    00:1c:de:42:bd:7e:15:22:9d:0c:d7:cb:99:b7:5e:
                    f7:bb:a2:f3:26:83:3b:96:59:d6:4d:65:59:d0:a2:
                    dd:51:31:29:9d:e4:e0:ad:33:d6:d1:78:7f:b1:e0:
                    d6:a9:87:81:e8:66:50:72:34:2e:2a:43:83:ef:ca:
                    63:09:c1:f9:14:45:95:6a:2c:95:01:52:94:9a:a1:
                    7f:a6:24:ee:b5:bb:ce:77:bd:e1:94:4e:88:e0:39:
                    1a:8c:cb:f7:41:6e:20:5d:f3:2a:d6:88:fd:c5:73:
                    de:d6:d9:5e:23:c2:a0:44:c7:ca:d1:49:7a:78:e8:
                    7c:9f:89:d6:9f:54:4c:c0:1a:58:5a:e5:51:99:15:
                    1b:4a:95:72:5d:1c:96:d2:d8:9c:d7:f3:f8:fc:e6:
                    b9:48:6c:d2:ef:92:d8:6a:75:fc:ca:33:d7:aa:80:
                    bc:dd:ce:7d:0d:02:a4:02:20:96:57:47:a0:69:dc:
                    4c:63:88:82:c9:2d:83:5e:82:56:96:f3:1a:69:54:
                    1e:7e:7f:2e:f9:aa:6d:3c:ac:db:ff:93:f2:36:16:
                    0c:65:9c:1b:25:1f:9b:54:4d:49:f7:9b:63:ab:fc:
                    5b:f6:ac:f0:a0:5c:66:5e:7b:1f:d0:14:f5:ee:e6:
                    0e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:53:12:F9:CB:D0:3C:BF:A8:73:20:DD:C6:CC:12:A5:44:55:47:F4
            X509v3 Authority Key Identifier:
                keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3333343a3a2f34382d3438203d3e20313533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:97c0:334::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:2c:46:70:9c:42:a8:8f:db:3b:64:d5:38:b7:de:ae:29:80:
         a5:76:3f:52:61:b7:cd:83:bd:24:b6:2c:86:73:d2:12:30:43:
         b1:2e:22:56:5e:fc:20:7c:f7:0e:ee:c3:ee:99:dc:bf:4d:9c:
         33:99:a3:bc:f8:de:0b:52:63:89:2f:ef:a0:93:29:92:79:d9:
         f9:61:ec:3e:2d:51:83:8e:62:7e:bf:bd:90:8c:aa:85:c2:c4:
         eb:e7:39:0d:a3:be:11:f7:20:15:59:56:a5:ba:b1:df:17:0d:
         85:3c:8d:e5:6f:f4:8e:c0:1d:2c:b9:dd:e0:bd:41:a6:cb:cd:
         1d:93:e2:8a:58:5c:e7:73:eb:43:d0:9d:2f:94:8d:38:fd:65:
         8c:12:ba:37:f7:21:b8:48:7f:d0:48:19:eb:65:b2:63:ce:af:
         c6:ec:87:66:e6:ce:90:ab:13:e0:9b:6d:ee:ac:6e:c8:d9:c1:
         0c:7a:a0:19:08:e3:b5:29:72:d6:18:72:5e:3b:29:a1:af:6d:
         e8:d4:ae:08:1b:c4:22:c1:4a:24:a8:4e:c7:3a:ad:4c:ea:0c:
         74:40:07:d2:35:7f:62:09:54:8b:e6:c2:cb:78:2c:a2:7c:58:
         76:13:0d:26:4c:b7:d1:55:d2:cb:a7:df:e0:e0:54:18:43:f0:
         4d:ed:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:34 2026 by rpki-client