Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a33333a3a2f34382d3438203d3e20313533303837.roa
File:                     323430343a393763303a33333a3a2f34382d3438203d3e20313533303837.roa (raw, json)
Hash identifier:          VJgOjHGIxblXrzrkaX+lbvvw8H0oWZAett+dpCPZJa4=
Subject key identifier:   94:98:A5:D5:B2:92:05:5B:82:98:D7:C6:28:B5:EF:E6:6D:1B:80:91
Certificate issuer:       /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
Certificate serial:       157E1963A01BB2FAC00FAC5E2B83EC5D2E93126D
Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a33333a3a2f34382d3438203d3e20313533303837.roa
Signing time:             Sun 03 May 2026 02:11:50 +0000
ROA not before:           Sun 03 May 2026 02:06:50 +0000
ROA not after:            Sun 02 May 2027 02:11:50 +0000
asID:                     153087
IP address blocks:        2404:97c0:33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl
                          rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7e:19:63:a0:1b:b2:fa:c0:0f:ac:5e:2b:83:ec:5d:2e:93:12:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
        Validity
            Not Before: May  3 02:06:50 2026 GMT
            Not After : May  2 02:11:50 2027 GMT
        Subject: CN=9498A5D5B292055B8298D7C628B5EFE66D1B8091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:a9:7f:bd:25:d6:44:d0:99:de:38:fd:d1:
                    12:60:48:c0:13:72:eb:69:4a:39:80:1e:1e:1a:79:
                    c0:14:d3:7b:f7:bd:ad:77:c5:cc:7b:41:90:3b:46:
                    b3:42:94:c3:cd:f1:5b:42:40:a0:d5:77:c2:62:ac:
                    93:4c:92:f3:78:4d:eb:bd:c9:86:a4:b8:d5:7e:89:
                    ef:b4:94:7d:fc:46:98:9a:8c:bb:32:10:10:cb:96:
                    da:81:b7:65:9c:ae:1a:5b:22:fc:7d:b6:6d:2b:4e:
                    93:c1:3f:e3:0b:0a:0b:48:27:83:a8:76:4a:21:bd:
                    30:33:16:a5:84:78:8c:09:30:45:b1:46:27:5d:85:
                    cd:6a:28:d7:3a:a5:ba:ad:cf:8e:97:8d:9b:43:c0:
                    be:ca:78:da:8e:f4:5b:01:1e:af:26:82:dd:10:cc:
                    4e:0a:96:2b:5a:8e:25:52:34:5a:90:a7:2b:31:41:
                    b1:ba:62:56:a4:48:fc:cb:76:14:d3:98:e6:e3:16:
                    d8:8e:d5:70:07:85:89:7c:02:3f:7a:00:c7:5a:bf:
                    89:e9:42:9f:4c:a2:69:f7:c1:49:c6:83:f6:14:a0:
                    00:93:28:5d:9d:00:96:5c:a4:59:78:b3:9b:22:3e:
                    f2:93:67:bb:93:ad:1d:86:3a:3c:4a:cd:6d:20:a9:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:98:A5:D5:B2:92:05:5B:82:98:D7:C6:28:B5:EF:E6:6D:1B:80:91
            X509v3 Authority Key Identifier:
                keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a33333a3a2f34382d3438203d3e20313533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:97c0:33::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:ef:3d:52:a2:f2:47:5d:a8:dd:e0:7c:e4:ac:d6:83:2e:b4:
         cb:ff:bf:ce:f1:52:e3:18:3b:a2:9c:5f:e3:2e:59:c2:df:32:
         a7:9d:7e:75:88:06:71:19:26:e0:cf:79:35:1e:74:42:0d:de:
         bf:b6:12:3b:a5:af:b1:47:a3:3d:95:65:99:47:76:41:3f:7c:
         0d:11:fd:41:26:55:7b:26:ba:0a:1c:a0:7e:12:ad:06:3d:39:
         8b:93:8e:62:28:df:2f:80:86:45:11:ef:78:01:bf:3e:d1:81:
         bf:af:88:8b:a7:6d:db:43:9f:e4:6f:b7:0c:a2:b0:a8:0e:a8:
         0f:71:b1:a3:a0:1f:87:7f:d3:58:ce:ac:f1:4f:35:be:7e:4d:
         f6:4b:8b:d6:6e:03:72:6e:68:8f:1f:11:78:04:97:ca:8a:cc:
         5e:1a:11:5a:0a:db:66:55:57:ff:71:6f:f6:a6:ee:d7:ea:31:
         a7:aa:77:9b:b0:c7:65:47:0a:e4:df:00:8e:46:8f:e8:17:9d:
         d7:cc:c5:e4:c4:20:1a:4c:1e:93:0b:ce:a0:4b:97:d7:f7:e3:
         58:a0:82:04:f2:a2:34:b6:0a:b6:0e:ce:70:41:ad:73:1d:30:
         45:ad:eb:20:c6:9a:4d:54:75:ff:3c:d5:0f:11:3b:7f:59:37:
         f2:b1:42:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:39 2026 by rpki-client