Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa
File:                     323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa (raw, json)
Hash identifier:          y6c9d5I2X9TgLwiQ6/FSp7aNwbosfjWCWkEcd+1p7Q4=
Subject key identifier:   FD:DE:D8:36:8B:8F:2C:1E:7B:B8:CA:79:94:3B:9B:56:95:7A:6B:39
Certificate issuer:       /CN=F369E66B61D5402A7A72C94237FB69A9A071899A
Certificate serial:       42965E22C00FA7F78BC6591A333C4CDA63922564
Authority key identifier: F3:69:E6:6B:61:D5:40:2A:7A:72:C9:42:37:FB:69:A9:A0:71:89:9A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F369E66B61D5402A7A72C94237FB69A9A071899A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa
Signing time:             Sun 03 May 2026 02:14:14 +0000
ROA not before:           Sun 03 May 2026 02:09:14 +0000
ROA not after:            Sun 02 May 2027 02:14:14 +0000
asID:                     141127
IP address blocks:        2001:df5:5280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/F369E66B61D5402A7A72C94237FB69A9A071899A.crl
                          rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/F369E66B61D5402A7A72C94237FB69A9A071899A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F369E66B61D5402A7A72C94237FB69A9A071899A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:96:5e:22:c0:0f:a7:f7:8b:c6:59:1a:33:3c:4c:da:63:92:25:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E66B61D5402A7A72C94237FB69A9A071899A
        Validity
            Not Before: May  3 02:09:14 2026 GMT
            Not After : May  2 02:14:14 2027 GMT
        Subject: CN=FDDED8368B8F2C1E7BB8CA79943B9B56957A6B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:c9:99:34:48:47:cf:5d:67:5e:01:3d:68:
                    81:0b:c8:73:2e:1e:ed:b6:b4:64:6f:e2:86:e1:24:
                    cb:85:96:a3:06:07:35:98:37:eb:8f:a5:1a:a5:da:
                    e8:ee:2c:7b:28:af:b0:e3:78:e5:da:6f:86:36:9c:
                    b0:29:ae:19:53:ef:01:b3:31:a7:e4:cd:1f:46:97:
                    a5:5a:f6:20:21:ab:e8:f7:ea:2e:7a:62:64:21:7a:
                    b0:c4:56:08:be:23:99:2a:38:0f:a7:db:53:d6:7b:
                    7d:95:46:8f:93:f8:c0:7f:19:a1:05:02:86:6d:2b:
                    1f:7b:08:c7:80:fb:0f:25:1d:6f:85:52:dd:6e:fd:
                    ff:5a:84:2f:e4:53:aa:a6:ed:20:b5:92:81:85:81:
                    69:da:72:98:99:30:8f:cb:9d:ce:2d:ec:5c:59:fa:
                    f8:4a:88:de:d8:32:b8:3c:5f:21:89:c6:88:a0:09:
                    9e:73:6b:83:14:72:ff:aa:da:fd:f8:da:b2:1f:de:
                    74:d2:9a:22:d8:11:20:57:e5:ab:f8:69:5d:14:f5:
                    5f:15:15:2c:a0:be:0d:ef:cf:10:9a:01:b1:36:e6:
                    1c:f4:80:77:4d:44:60:43:bf:de:1a:be:ec:ab:a6:
                    af:1b:de:52:7e:e4:18:fe:80:00:d8:0d:b4:81:a6:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DE:D8:36:8B:8F:2C:1E:7B:B8:CA:79:94:3B:9B:56:95:7A:6B:39
            X509v3 Authority Key Identifier:
                keyid:F3:69:E6:6B:61:D5:40:2A:7A:72:C9:42:37:FB:69:A9:A0:71:89:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/F369E66B61D5402A7A72C94237FB69A9A071899A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F369E66B61D5402A7A72C94237FB69A9A071899A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:5280::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:73:41:2a:ab:84:70:f6:0b:66:85:43:02:9b:91:66:30:08:
         9a:f9:86:73:6a:0b:a6:f7:78:4f:e4:2e:e9:c1:be:07:d6:c8:
         3b:74:04:76:ca:2d:f7:2d:c4:db:1d:48:9d:e0:63:45:40:b6:
         d6:ff:89:b5:4a:54:8d:25:9d:a8:63:d3:21:31:b5:6a:95:91:
         c1:04:4e:09:85:fb:f7:73:8f:ac:df:68:bd:40:87:43:72:da:
         e3:12:69:7c:ef:03:03:19:e4:50:81:36:2d:b2:18:9c:fe:b4:
         2e:c0:25:6e:62:f6:d9:3f:9b:5b:a2:01:19:26:e4:0a:30:eb:
         b4:27:c9:a1:74:39:58:a5:39:0a:50:f8:6f:12:6d:68:a5:c5:
         1c:33:40:8c:0c:b5:3f:d1:40:95:ba:4e:be:09:44:d4:9f:77:
         c5:a7:dc:ef:26:1c:0f:4e:1d:fb:56:d8:ac:8d:7d:f8:81:a1:
         a5:9d:34:b3:67:0e:27:28:6d:2e:af:2d:43:a5:c2:cc:06:31:
         5d:5a:58:8a:fa:63:63:24:bc:ec:20:30:61:0d:ea:34:2c:54:
         e6:a2:17:9e:2b:65:85:8d:58:fb:82:a7:34:16:1c:84:72:2f:
         63:50:0e:86:0b:fe:11:b8:8e:d8:81:77:c3:81:12:c9:cb:69:
         a8:59:b4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:45:58 2026 by rpki-client