Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa
File:                     323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (raw, json)
Hash identifier:          /YjQziPfkygPIif69V6qP80rIoVIWnI2ryfoi9HJSBY=
Subject key identifier:   C4:C3:BC:09:73:AB:69:16:51:CF:BD:89:E5:59:C5:1C:F7:8C:93:A0
Certificate issuer:       /CN=C26EDB3142A0D7089EB5B4DE81D381D57270DFAA
Certificate serial:       10DA3ED247611BA4C19D7109CC22ED9A4E12DE30
Authority key identifier: C2:6E:DB:31:42:A0:D7:08:9E:B5:B4:DE:81:D3:81:D5:72:70:DF:AA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa
Signing time:             Sun 03 May 2026 02:17:18 +0000
ROA not before:           Sun 03 May 2026 02:12:18 +0000
ROA not after:            Sun 02 May 2027 02:17:18 +0000
asID:                     152806
IP address blocks:        2001:df3:e040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.crl
                          rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:da:3e:d2:47:61:1b:a4:c1:9d:71:09:cc:22:ed:9a:4e:12:de:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C26EDB3142A0D7089EB5B4DE81D381D57270DFAA
        Validity
            Not Before: May  3 02:12:18 2026 GMT
            Not After : May  2 02:17:18 2027 GMT
        Subject: CN=C4C3BC0973AB691651CFBD89E559C51CF78C93A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:bc:92:85:d8:1d:8f:29:94:71:1e:ab:f4:
                    97:ae:c1:a9:b2:38:1d:e6:f6:21:6f:b3:cc:c1:8d:
                    15:48:55:2a:9b:93:17:80:6f:bf:00:33:74:27:2a:
                    a5:a8:47:ef:0a:86:e4:07:85:4e:b7:ec:5d:cd:b8:
                    0b:a7:0b:96:42:bd:31:d4:65:12:90:b7:ab:23:50:
                    3e:3e:19:ce:50:ca:e8:af:00:8b:fa:5f:46:a4:a2:
                    53:98:da:50:4d:63:90:20:15:1a:c7:86:1a:63:2c:
                    40:01:28:a4:93:3c:43:df:c7:94:0e:d4:ab:dd:25:
                    1f:7f:61:2b:20:8a:6e:a6:0b:5f:35:27:c8:f1:0d:
                    0f:ce:fd:63:6a:3a:af:e1:86:6d:de:c4:c7:41:5c:
                    4f:61:96:ec:27:e8:f6:f9:b8:bb:56:92:57:ef:b0:
                    62:fa:20:63:81:c3:dc:0b:26:7d:85:7c:11:62:02:
                    43:f6:26:06:d1:25:68:c0:37:94:06:d6:fa:ae:66:
                    06:ed:8b:1a:cd:45:b4:13:62:60:46:2c:c5:ab:0a:
                    eb:66:d0:4d:05:a6:dd:98:69:08:5a:ac:43:7c:9b:
                    10:3e:07:8f:fa:f6:e9:da:8d:0f:93:4f:e8:23:e6:
                    e7:2a:32:88:b9:75:9b:9c:31:a1:5e:b2:b5:76:fe:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C3:BC:09:73:AB:69:16:51:CF:BD:89:E5:59:C5:1C:F7:8C:93:A0
            X509v3 Authority Key Identifier:
                keyid:C2:6E:DB:31:42:A0:D7:08:9E:B5:B4:DE:81:D3:81:D5:72:70:DF:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C26EDB3142A0D7089EB5B4DE81D381D57270DFAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:e040::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:47:71:b0:cb:82:a6:4a:2e:a4:37:97:a5:a6:ab:4c:a3:63:
         6d:60:60:f1:f3:41:3b:06:86:d5:26:9e:f1:f2:75:12:f5:d7:
         1a:f3:81:cd:9a:b9:4c:ca:f7:f1:cc:a7:fc:50:c0:ca:49:a1:
         6c:19:71:25:80:f9:dc:16:39:3a:93:a2:4f:86:e3:20:7b:5d:
         5b:d1:9f:de:d0:2c:e8:c5:0a:06:0f:c5:3b:90:94:b8:f6:68:
         6f:69:c0:b5:a3:6b:ee:fd:93:8c:f3:08:27:38:db:87:4e:8b:
         bf:36:2f:05:1a:36:1a:cc:9d:6b:7c:55:c1:44:bf:6c:56:ca:
         52:56:0c:44:d3:74:70:c8:be:cc:cc:c0:80:f5:05:9a:0b:0d:
         b7:c3:fa:2d:48:8b:ec:a2:61:47:1c:0d:99:d9:60:fe:ad:7a:
         f5:f9:16:03:8a:9b:fd:68:87:f4:fc:eb:29:2d:16:cb:1f:53:
         c5:f9:80:65:4f:79:35:a7:e1:14:54:23:b5:36:e1:a2:8a:14:
         cb:f7:4c:b0:f8:d8:07:6f:f4:d6:1e:99:77:7a:ab:9e:9e:c2:
         70:5a:48:7e:0f:bf:9c:cf:24:d1:fe:c7:3e:b4:a7:16:94:f7:
         80:b5:a4:d3:57:40:84:c2:c1:b5:5d:4e:d8:29:4f:38:7a:ea:
         aa:9e:35:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:44 2026 by rpki-client