Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa
File:                     323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (raw, json)
Hash identifier:          4neWrZ2U5Ifz5ZV+5kk+4b2Vcx4ltU0Zb9JXxN912Dk=
Subject key identifier:   A8:2E:67:9F:1A:A6:C4:B2:0B:E9:A0:20:8B:4F:1F:2E:20:AB:85:DF
Certificate issuer:       /CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0
Certificate serial:       4D77A1D1FE2902565C01A748F578DE23551150E1
Authority key identifier: B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa
Signing time:             Sun 03 May 2026 02:14:52 +0000
ROA not before:           Sun 03 May 2026 02:09:52 +0000
ROA not after:            Sun 02 May 2027 02:14:52 +0000
asID:                     138056
IP address blocks:        2001:df6:5900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl
                          rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:77:a1:d1:fe:29:02:56:5c:01:a7:48:f5:78:de:23:55:11:50:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0
        Validity
            Not Before: May  3 02:09:52 2026 GMT
            Not After : May  2 02:14:52 2027 GMT
        Subject: CN=A82E679F1AA6C4B20BE9A0208B4F1F2E20AB85DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:b0:c3:ff:0f:34:f9:6f:41:58:27:2f:3f:
                    ac:57:6a:2a:47:3a:90:a1:bc:bd:34:c8:ce:97:e3:
                    37:d8:c7:2d:d9:21:a3:3f:d1:bb:dd:3a:8d:8b:4d:
                    62:82:75:e5:3a:3b:84:76:a6:9f:57:e0:0f:b5:75:
                    ee:97:c4:07:8f:ee:cf:4c:0f:38:48:28:91:37:96:
                    e8:0f:8a:1d:8b:1c:05:04:85:c1:17:7c:18:8c:61:
                    56:7b:c0:63:87:45:1e:ad:40:2e:ee:fb:e1:3f:5a:
                    fb:26:4b:f5:4b:22:99:96:a7:77:83:d4:09:5d:4a:
                    fc:f6:91:f8:1c:cc:09:a5:69:fe:1f:87:6c:16:4c:
                    f0:98:87:2d:a2:9d:67:dd:4b:b2:d0:68:26:b1:77:
                    22:1b:04:92:e8:9b:b8:f0:be:9a:22:36:0f:5e:d2:
                    74:ed:22:32:fe:4f:50:88:7d:f3:6f:46:e9:35:61:
                    15:91:b0:57:8b:e4:a7:48:98:2d:3b:26:bc:41:b4:
                    6a:ca:e9:27:da:03:ea:9e:bf:a5:ee:dd:4a:60:72:
                    8d:f1:93:11:12:1c:93:54:e5:a1:45:77:c4:aa:b3:
                    32:2c:a4:d8:8d:81:5f:ca:7d:ca:21:2a:68:47:e3:
                    28:79:56:76:8b:64:3b:70:6e:f0:a7:d7:ab:ef:89:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2E:67:9F:1A:A6:C4:B2:0B:E9:A0:20:8B:4F:1F:2E:20:AB:85:DF
            X509v3 Authority Key Identifier:
                keyid:B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5900::/48

    Signature Algorithm: sha256WithRSAEncryption
         ce:92:5a:7e:1a:bc:cf:43:c6:af:49:26:d2:dc:e7:44:94:06:
         83:98:cc:81:5f:c0:0e:3b:7f:2a:7c:e3:42:4e:f3:ff:77:9d:
         6f:01:d1:e7:bf:c9:08:03:d1:ad:59:a7:1d:05:96:3d:0c:09:
         32:61:3d:c2:19:96:7f:5a:33:86:a3:5d:a2:fd:23:d6:fb:3b:
         45:3e:54:68:c3:9c:35:ef:73:d1:dd:36:ba:b5:aa:93:f6:17:
         bc:ea:c1:00:2f:a4:f1:96:65:37:87:88:ce:86:f4:78:2c:32:
         b2:7f:eb:32:5c:f3:51:06:75:9a:92:92:80:a7:a1:cf:d2:13:
         4e:2e:c5:85:dc:c3:4a:3f:fb:99:b7:d4:7e:ba:ed:b4:e8:d7:
         e3:0d:ad:4f:c9:d1:2d:8b:f7:58:e9:c4:de:e0:31:81:91:be:
         81:1d:58:27:ca:7a:6f:b7:da:d8:ef:c4:cc:2f:af:ec:85:cb:
         b2:7d:b0:af:45:5b:97:f5:44:8d:f2:a1:2a:2f:45:fb:ce:04:
         84:5a:79:36:aa:43:90:4d:ba:9d:12:b4:be:04:fe:71:cf:ea:
         09:2a:cf:99:99:f4:57:80:5d:43:b4:63:0c:9a:d1:b6:07:94:
         5b:67:f6:df:df:08:81:ae:64:29:4b:18:1f:48:7e:b6:6c:1c:
         6a:a8:8c:87
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTXeh0f4pAlZcAadI9XjeI1URUOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU2QkE2NkFDQjZCMjhBNzVDRjhCOTI2MjlGMzg5ODhF
NkJDRTVGMDAeFw0yNjA1MDMwMjA5NTJaFw0yNzA1MDIwMjE0NTJaMDMxMTAvBgNV
BAMTKEE4MkU2NzlGMUFBNkM0QjIwQkU5QTAyMDhCNEYxRjJFMjBBQjg1REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC977DD/w80+W9BWCcvP6xXaipH
OpChvL00yM6X4zfYxy3ZIaM/0bvdOo2LTWKCdeU6O4R2pp9X4A+1de6XxAeP7s9M
DzhIKJE3lugPih2LHAUEhcEXfBiMYVZ7wGOHRR6tQC7u++E/WvsmS/VLIpmWp3eD
1AldSvz2kfgczAmlaf4fh2wWTPCYhy2inWfdS7LQaCaxdyIbBJLom7jwvpoiNg9e
0nTtIjL+T1CIffNvRuk1YRWRsFeL5KdImC07JrxBtGrK6SfaA+qev6Xu3Upgco3x
kxESHJNU5aFFd8SqszIspNiNgV/KfcohKmhH4yh5VnaLZDtwbvCn16vviYxZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUqC5nnxqmxLIL6aAgi08fLiCrhd8wHwYDVR0j
BBgwFoAUtWumastrKKdc+LkmKfOJiOa85fAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTRlZjE5MjAtODUyMy00ZWQ0LWIzNTctOWRlOWEwYzkxNzEwLzAvQjU2QkE2NkFD
QjZCMjhBNzVDRjhCOTI2MjlGMzg5ODhFNkJDRTVGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNTZCQTY2QUNCNkIyOEE3NUNGOEI5MjYyOUYzODk4OEU2QkNF
NUYwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE0ZWYxOTIwLTg1MjMtNGVkNC1i
MzU3LTlkZTlhMGM5MTcxMC8wLzMyMzAzMDMxM2E2NDY2MzYzYTM1MzkzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM4MzAzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
9lkAMA0GCSqGSIb3DQEBCwUAA4IBAQDOklp+GrzPQ8avSSbS3OdElAaDmMyBX8AO
O38qfONCTvP/d51vAdHnv8kIA9GtWacdBZY9DAkyYT3CGZZ/WjOGo12i/SPW+ztF
PlRow5w173PR3Ta6taqT9he86sEAL6TxlmU3h4jOhvR4LDKyf+syXPNRBnWakpKA
p6HP0hNOLsWF3MNKP/uZt9R+uu206NfjDa1PydEti/dY6cTe4DGBkb6BHVgnynpv
t9rY78TML6/shcuyfbCvRVuX9USN8qEqL0X7zgSEWnk2qkOQTbqdErS+BP5xz+oJ
Ks+ZmfRXgF1DtGMMmtG2B5RbZ/bf3wiBrmQpSxgfSH62bBxqqIyH
-----END CERTIFICATE-----
Generated at Wed May 13 10:29:48 2026 by rpki-client