Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa
File:                     323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (raw, json)
Hash identifier:          jcwrytSrVr9iAZjPRv58Wx2zSE/xYS0utsjnTbXZlh8=
Subject key identifier:   D0:CF:2F:05:90:DD:1A:9B:32:02:80:00:37:6A:B6:55:0B:CD:3F:91
Certificate issuer:       /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial:       5E4E87746DE456736EC4DFA247FD378EF1BE7E62
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa
Signing time:             Sun 03 May 2026 02:17:39 +0000
ROA not before:           Sun 03 May 2026 02:12:39 +0000
ROA not after:            Sun 02 May 2027 02:17:39 +0000
asID:                     45305
IP address blocks:        2001:df1:6380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
                          rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4e:87:74:6d:e4:56:73:6e:c4:df:a2:47:fd:37:8e:f1:be:7e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
        Validity
            Not Before: May  3 02:12:39 2026 GMT
            Not After : May  2 02:17:39 2027 GMT
        Subject: CN=D0CF2F0590DD1A9B32028000376AB6550BCD3F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:62:ca:91:46:b0:d5:79:b6:83:56:1b:1e:
                    52:e5:b3:e0:69:f6:a9:fd:85:4a:d2:3a:3d:bb:89:
                    1a:e0:5c:6c:f9:12:45:3b:ad:30:0f:e0:41:1c:4a:
                    a8:50:86:8e:45:77:2b:42:20:23:8e:0b:7f:9f:7e:
                    0a:03:8d:cb:77:92:3d:34:80:aa:54:65:ac:ee:68:
                    87:d3:0e:e3:d4:86:41:14:86:f4:32:74:ed:f7:f0:
                    a7:02:9f:85:bc:bc:26:d4:06:4d:2d:db:d3:5b:4e:
                    28:3d:f9:82:1f:f0:06:7f:bf:d3:80:d1:16:13:12:
                    7e:12:af:35:67:1f:74:da:72:f4:72:47:f0:70:9f:
                    fb:71:87:a6:b5:d5:18:5d:1e:f1:cd:b0:ae:4c:8d:
                    54:f1:e8:71:dc:9a:75:84:b8:27:67:a6:59:03:22:
                    7c:b0:e9:9d:f4:06:84:7c:a9:0a:67:a6:ee:91:52:
                    4e:f5:0a:f7:98:29:89:ea:ea:c9:69:63:73:61:0a:
                    10:49:0a:9a:b1:10:cd:3e:c1:d7:f3:9b:c2:4f:5c:
                    15:0f:66:e0:62:96:eb:b0:68:4f:b0:60:6a:b0:9c:
                    ee:3c:f3:03:6e:21:2e:90:9d:c6:bb:ca:75:44:47:
                    ad:8d:d3:d1:3d:49:69:b3:e6:de:e2:37:50:8b:fc:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CF:2F:05:90:DD:1A:9B:32:02:80:00:37:6A:B6:55:0B:CD:3F:91
            X509v3 Authority Key Identifier:
                keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:6380::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:d7:fe:dc:47:09:c8:4e:fd:b0:6f:5c:8c:87:b8:fd:22:a3:
         6b:48:88:f1:3a:6f:96:2d:d3:c8:da:40:62:8d:af:9b:cf:16:
         a2:b7:d9:15:ef:a8:ae:cb:a9:d1:f4:d7:74:3f:1b:c7:23:64:
         21:b1:87:15:0e:71:50:39:f4:58:62:be:32:16:aa:ca:28:e6:
         ee:c1:b2:d4:d7:ce:76:4d:94:24:68:8e:f2:f6:d3:5b:d1:83:
         6b:d7:bb:4f:6a:f1:f7:5a:9f:cb:c4:5b:bb:fb:1f:7a:0e:c4:
         63:22:81:92:6f:df:c4:44:20:04:c9:62:c8:82:1a:f6:45:a8:
         c2:80:e9:1e:df:1b:1d:f3:e3:2a:ef:b0:e3:ff:c4:5e:88:d0:
         52:40:e7:ad:b5:e8:47:65:0f:19:7c:af:bd:d4:6f:88:44:a3:
         28:8d:0d:b3:c1:36:56:3d:5c:81:e6:4a:e4:33:32:2d:d8:ac:
         2c:11:09:f5:aa:4c:a3:eb:9c:75:dc:8d:eb:87:d2:07:b4:66:
         b1:b6:1c:ba:f1:f1:8b:01:7b:73:5b:a7:46:c1:82:b9:af:eb:
         bd:0c:93:20:1a:3a:69:66:b2:fb:6d:d0:77:a5:cc:d4:9b:7a:
         08:2a:5b:dc:d5:ae:40:50:9e:24:63:36:b7:2a:e1:3a:83:b6:
         cb:78:f1:80
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUXk6HdG3kVnNuxN+iR/03jvG+fmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY2NjkzNTVFQkIwRkUzQUU2QzA2QzhERjdBOTE3QkVC
NDg4NDlBMDAeFw0yNjA1MDMwMjEyMzlaFw0yNzA1MDIwMjE3MzlaMDMxMTAvBgNV
BAMTKEQwQ0YyRjA1OTBERDFBOUIzMjAyODAwMDM3NkFCNjU1MEJDRDNGOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpGLKkUaw1Xm2g1YbHlLls+Bp
9qn9hUrSOj27iRrgXGz5EkU7rTAP4EEcSqhQho5FdytCICOOC3+ffgoDjct3kj00
gKpUZazuaIfTDuPUhkEUhvQydO338KcCn4W8vCbUBk0t29NbTig9+YIf8AZ/v9OA
0RYTEn4SrzVnH3TacvRyR/Bwn/txh6a11RhdHvHNsK5MjVTx6HHcmnWEuCdnplkD
Inyw6Z30BoR8qQpnpu6RUk71CveYKYnq6slpY3NhChBJCpqxEM0+wdfzm8JPXBUP
ZuBiluuwaE+wYGqwnO488wNuIS6Qnca7ynVER62N09E9SWmz5t7iN1CL/DT7AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU0M8vBZDdGpsyAoAAN2q2VQvNP5EwHwYDVR0j
BBgwFoAURmaTVeuw/jrmwGyN96kXvrSISaAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWRkYzFkZDgtNmQyNS00N2M3LWFhYTQtYmRkZjFiOWQ2NzdlLzAvNDY2NjkzNTVF
QkIwRkUzQUU2QzA2QzhERjdBOTE3QkVCNDg4NDlBMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NjY2OTM1NUVCQjBGRTNBRTZDMDZDOERGN0E5MTdCRUI0ODg0
OUEwLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZGMxZGQ4LTZkMjUtNDdjNy1h
YWE0LWJkZGYxYjlkNjc3ZS8wLzMyMzAzMDMxM2E2NDY2MzEzYTM2MzMzODMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfFj
gDANBgkqhkiG9w0BAQsFAAOCAQEAntf+3EcJyE79sG9cjIe4/SKja0iI8Tpvli3T
yNpAYo2vm88WorfZFe+orsup0fTXdD8bxyNkIbGHFQ5xUDn0WGK+Mhaqyijm7sGy
1NfOdk2UJGiO8vbTW9GDa9e7T2rx91qfy8Rbu/sfeg7EYyKBkm/fxEQgBMliyIIa
9kWowoDpHt8bHfPjKu+w4//EXojQUkDnrbXoR2UPGXyvvdRviESjKI0Ns8E2Vj1c
geZK5DMyLdisLBEJ9apMo+ucddyN64fSB7RmsbYcuvHxiwF7c1unRsGCua/rvQyT
IBo6aWay+23Qd6XM1Jt6CCpb3NWuQFCeJGM2tyrhOoO2y3jxgA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:43:09 2026 by rpki-client