Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa
File:                     323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa (raw, json)
Hash identifier:          u/f9pBg0fHFgqAdliz0CbmpL4V+/eW84b3JUz0/QPns=
Subject key identifier:   96:44:5A:03:63:A7:B1:78:21:37:35:1B:C6:0C:F7:9B:4A:60:BD:0B
Certificate issuer:       /CN=ED63844C4B15010EA3F230F69A770C2B1C84C105
Certificate serial:       30D4F62D6C7017AEB3FF801391836B631D716727
Authority key identifier: ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa
Signing time:             Sun 03 May 2026 02:11:59 +0000
ROA not before:           Sun 03 May 2026 02:06:59 +0000
ROA not after:            Sun 02 May 2027 02:11:59 +0000
asID:                     142379
IP address blocks:        2001:df0:f500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl
                          rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d4:f6:2d:6c:70:17:ae:b3:ff:80:13:91:83:6b:63:1d:71:67:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED63844C4B15010EA3F230F69A770C2B1C84C105
        Validity
            Not Before: May  3 02:06:59 2026 GMT
            Not After : May  2 02:11:59 2027 GMT
        Subject: CN=96445A0363A7B1782137351BC60CF79B4A60BD0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:53:e6:4d:a6:bf:2b:48:d5:69:a6:fb:01:
                    57:64:5d:10:d7:4a:70:b2:a3:c0:f5:d5:8b:45:d5:
                    98:67:12:6a:9a:96:1e:3c:e2:ea:2c:82:a6:6b:b3:
                    54:c9:41:fb:fd:e8:29:8d:e9:6a:a2:63:d5:b1:a4:
                    92:71:f3:e8:6e:db:ee:1f:fb:29:0a:4e:3c:bc:7b:
                    98:7f:69:3a:7f:f9:fd:29:8c:c7:58:69:9a:c1:1e:
                    23:ff:3a:0a:fd:20:a0:f7:5e:43:9e:8d:d3:a2:b2:
                    8a:4a:73:4e:af:52:eb:9f:a2:14:ec:44:27:11:0a:
                    a3:2a:6b:da:0d:a1:23:a6:ce:a8:05:c1:3e:39:c6:
                    97:ff:d3:2c:08:a7:af:bb:9c:17:1f:82:04:79:a0:
                    3a:85:62:df:4f:20:b7:18:60:0f:fa:6f:53:27:73:
                    81:ef:df:40:a8:c9:aa:77:ea:f8:ba:f1:15:8e:1c:
                    ce:5c:9e:8d:4f:0f:27:6e:3c:b9:56:0a:0f:8a:53:
                    12:b2:f6:ee:6b:8b:4e:a8:35:04:21:9f:d0:e3:88:
                    c4:94:96:2b:ea:96:b9:19:a9:27:ed:30:1d:1c:91:
                    24:ca:32:e5:ef:24:eb:e8:38:50:ee:c2:d8:b0:13:
                    70:49:fb:67:47:a4:e4:12:b7:e9:d4:5c:b7:2a:51:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:44:5A:03:63:A7:B1:78:21:37:35:1B:C6:0C:F7:9B:4A:60:BD:0B
            X509v3 Authority Key Identifier:
                keyid:ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:f500::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:4b:1b:9d:c9:c2:f0:03:e5:3a:bc:0a:cd:c3:1c:24:c8:b5:
         3b:d2:d3:91:4f:34:ed:67:2a:2a:25:cd:2a:14:ff:0c:ba:4b:
         7a:83:e3:f2:ee:d4:ed:0e:19:1b:3a:02:78:9f:63:22:f4:62:
         96:83:e0:55:d3:29:de:52:fe:8c:65:ed:08:df:6e:6a:8e:8d:
         23:c3:26:49:90:bb:d6:b4:e3:37:2c:66:17:91:74:cb:b7:d9:
         40:77:03:0d:1e:36:12:74:d4:3a:85:25:4d:1d:56:3c:64:f1:
         ae:48:df:1f:dd:a4:3d:f5:41:db:16:15:16:5d:14:9f:9b:bd:
         0a:a5:6b:0a:96:ad:d9:c8:48:71:2a:40:a4:98:a2:cb:d5:ae:
         b7:bb:8b:15:af:5a:38:c3:5c:67:83:0e:a9:05:8a:99:9b:61:
         67:f8:63:7f:be:c4:2f:ec:0f:d8:b9:8c:22:be:a8:13:51:9b:
         59:14:65:b6:c2:aa:ae:53:17:10:22:8f:89:c5:54:41:68:9e:
         c1:e9:eb:bc:40:2e:73:1e:ad:ee:ec:79:13:30:45:c4:b1:39:
         86:67:76:ee:6e:56:3a:9a:7c:25:24:ec:b4:ef:d6:59:68:51:
         72:77:59:c4:d6:17:3d:54:33:e1:be:37:9f:62:81:0a:e0:d4:
         51:3d:aa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:47 2026 by rpki-client