Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/323030313a6466303a62363a3a2f34382d3438203d3e203633353130.roa
File:                     323030313a6466303a62363a3a2f34382d3438203d3e203633353130.roa (raw, json)
Hash identifier:          wArTDRmaVYsY0J6RNUpo0G6vqPez2HQdmxKAlx8JtIQ=
Subject key identifier:   32:63:39:FD:23:9B:25:4B:F2:88:58:14:B0:17:AA:5D:D8:4B:2A:ED
Certificate issuer:       /CN=F8C619ADD100D297A2F864708157AB59332532B3
Certificate serial:       0C9328A0512BD3137048090501233CE99E077D60
Authority key identifier: F8:C6:19:AD:D1:00:D2:97:A2:F8:64:70:81:57:AB:59:33:25:32:B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8C619ADD100D297A2F864708157AB59332532B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/323030313a6466303a62363a3a2f34382d3438203d3e203633353130.roa
Signing time:             Sun 03 May 2026 02:30:03 +0000
ROA not before:           Sun 03 May 2026 02:25:03 +0000
ROA not after:            Sun 02 May 2027 02:30:03 +0000
asID:                     63510
IP address blocks:        2001:df0:b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/F8C619ADD100D297A2F864708157AB59332532B3.crl
                          rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/F8C619ADD100D297A2F864708157AB59332532B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8C619ADD100D297A2F864708157AB59332532B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:93:28:a0:51:2b:d3:13:70:48:09:05:01:23:3c:e9:9e:07:7d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C619ADD100D297A2F864708157AB59332532B3
        Validity
            Not Before: May  3 02:25:03 2026 GMT
            Not After : May  2 02:30:03 2027 GMT
        Subject: CN=326339FD239B254BF2885814B017AA5DD84B2AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:11:63:35:fb:f4:a6:45:3b:c9:36:f1:d7:
                    65:df:6e:4d:11:80:0c:f9:6f:1e:18:8b:94:b3:53:
                    37:79:df:72:fb:13:76:a2:30:ff:2e:87:8a:c7:b3:
                    ad:3b:9a:b1:77:b1:9c:f5:b2:18:33:88:9e:34:78:
                    0f:8f:29:96:d0:3d:b6:f1:c0:5e:c3:a2:c8:23:57:
                    8a:72:16:e3:81:61:fd:33:a3:6d:60:5b:24:3b:aa:
                    ee:fc:ed:a7:49:45:a3:6f:cc:e0:93:02:71:22:bc:
                    67:0b:fc:42:59:a7:15:c8:93:e6:91:1c:3c:c0:e3:
                    eb:d3:e2:96:bd:b8:74:2b:61:4d:88:25:0b:66:b4:
                    1d:7f:19:2d:87:d0:60:4a:26:13:cd:f1:cc:55:cc:
                    74:9b:81:6f:4f:af:f9:cb:33:ae:f8:76:1b:d2:13:
                    51:9e:e2:47:27:99:90:62:2c:4a:1d:36:be:29:b2:
                    59:19:38:91:8f:d5:78:d7:f2:60:ee:9a:54:2d:b7:
                    db:42:ce:bb:c7:70:3b:34:9a:e5:a0:72:04:4e:8c:
                    bc:2e:16:b9:ef:7b:08:ef:80:66:cf:68:8d:3f:75:
                    3a:72:16:8a:41:c7:58:28:74:c6:43:e9:39:e3:61:
                    6d:64:a8:64:6a:ee:d4:63:2f:4c:dc:87:c0:3e:73:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:63:39:FD:23:9B:25:4B:F2:88:58:14:B0:17:AA:5D:D8:4B:2A:ED
            X509v3 Authority Key Identifier:
                keyid:F8:C6:19:AD:D1:00:D2:97:A2:F8:64:70:81:57:AB:59:33:25:32:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/F8C619ADD100D297A2F864708157AB59332532B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8C619ADD100D297A2F864708157AB59332532B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/323030313a6466303a62363a3a2f34382d3438203d3e203633353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:b6::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:d6:b3:b3:e1:01:ad:71:a8:70:a9:ae:f0:47:20:08:28:13:
         67:dd:6c:7b:54:1a:41:b6:41:33:c0:5f:83:b8:31:6e:c1:81:
         70:f7:f6:41:da:f2:a3:c6:61:f0:1b:40:5c:ea:7b:61:36:b5:
         be:63:f1:e9:e1:52:25:14:92:28:53:6e:68:b2:7c:67:c6:43:
         00:7a:8f:eb:d1:18:6c:39:32:4d:d4:da:48:97:82:b6:60:1f:
         6d:63:2c:ae:6d:ab:e8:7c:72:ff:92:50:33:7b:86:7a:87:d2:
         a6:33:d0:09:fe:0e:42:d1:86:2a:cf:20:f8:f1:53:c3:92:67:
         06:1a:66:c7:82:6b:01:c8:8d:28:9b:1c:c7:28:e5:8b:c9:de:
         59:14:66:68:e1:72:d4:b6:91:00:65:7e:2c:a8:4c:57:f8:7e:
         5c:c3:f8:54:c7:65:c4:ab:28:e0:9e:42:f9:94:91:25:13:6b:
         29:ea:70:76:b8:87:fa:c2:82:30:25:75:53:ed:80:9f:08:39:
         1f:44:16:d4:fa:9e:b1:9b:d4:12:a1:3d:be:42:14:79:bc:4b:
         a7:cd:97:70:2c:cc:69:50:51:9a:58:53:8b:ff:44:e9:5f:67:
         ad:7d:0b:8c:d2:e1:1b:94:51:12:d5:c7:00:e9:d7:12:54:78:
         5f:b1:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:40 2026 by rpki-client