Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa
File:                     323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (raw, json)
Hash identifier:          6fSlTUT4FE6vxiMFjSI/8DBq6Z1TAZClCEVauizzEWY=
Subject key identifier:   93:B0:50:9B:D1:AF:23:C6:5C:4E:8F:FB:BE:F7:22:5D:DE:B7:BE:2F
Certificate issuer:       /CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E
Certificate serial:       5FE5F6EEE6473EB4A7C76C516B3C09C88E956C87
Authority key identifier: C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa
Signing time:             Sun 03 May 2026 02:32:01 +0000
ROA not before:           Sun 03 May 2026 02:27:01 +0000
ROA not after:            Sun 02 May 2027 02:32:01 +0000
asID:                     142389
IP address blocks:        2001:df2:81c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl
                          rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e5:f6:ee:e6:47:3e:b4:a7:c7:6c:51:6b:3c:09:c8:8e:95:6c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23B134220A7B95B81DCC83D8D7E06A5510A549E
        Validity
            Not Before: May  3 02:27:01 2026 GMT
            Not After : May  2 02:32:01 2027 GMT
        Subject: CN=93B0509BD1AF23C65C4E8FFBBEF7225DDEB7BE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:dc:aa:ff:d4:3c:14:ed:48:02:18:0e:53:
                    13:9e:87:86:93:e1:21:ba:33:cc:47:6a:ae:1e:b4:
                    8a:e0:68:5d:0f:41:ff:f3:93:d8:9a:21:f4:dc:18:
                    14:27:85:c3:3a:e8:30:70:23:b3:d6:05:09:e1:83:
                    43:d6:b7:61:72:0e:37:51:e8:a7:3c:07:d0:a2:e9:
                    be:9b:55:5a:aa:30:1a:0e:ac:9c:49:f5:8d:41:ff:
                    25:f3:63:f8:c6:65:33:f0:cc:d7:e3:08:35:42:ce:
                    93:d4:a8:8b:22:0b:9a:43:1a:97:17:50:24:98:f4:
                    d1:d4:6d:2a:d6:c7:b3:54:86:20:03:3b:e0:55:1c:
                    fa:ae:6b:ba:f8:18:0b:4c:b1:1a:2c:61:b8:9b:53:
                    97:d7:41:3e:67:44:c9:d2:cf:1c:6b:c9:48:39:16:
                    2f:43:9f:e9:39:d6:a5:98:7f:a8:cf:4c:7a:35:23:
                    dd:8e:d5:66:51:6f:85:61:2c:ed:0f:87:ce:70:82:
                    8d:68:bc:62:3e:81:c7:7f:d3:c4:c1:bd:8c:a1:73:
                    0d:45:d7:1b:c2:f6:07:52:2d:d1:14:5a:3e:35:e6:
                    b1:43:21:04:36:7d:5e:24:b2:08:5f:84:24:10:73:
                    33:70:5e:0d:cb:be:4b:fa:f5:cd:fd:8a:cd:45:02:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B0:50:9B:D1:AF:23:C6:5C:4E:8F:FB:BE:F7:22:5D:DE:B7:BE:2F
            X509v3 Authority Key Identifier:
                keyid:C2:3B:13:42:20:A7:B9:5B:81:DC:C8:3D:8D:7E:06:A5:51:0A:54:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/C23B134220A7B95B81DCC83D8D7E06A5510A549E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C23B134220A7B95B81DCC83D8D7E06A5510A549E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:81c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:8b:af:ec:02:b2:f6:d3:2e:eb:d2:81:ad:1e:77:4d:97:a6:
         a5:e3:a5:b3:06:3f:5e:f6:30:bd:06:d0:3d:3d:b2:9b:7e:b6:
         e3:3d:60:26:d9:e8:b4:6b:e9:b5:9a:af:4c:fb:c9:4b:c7:6a:
         00:25:95:85:21:4a:53:c6:96:4d:cf:b5:7a:36:9f:98:2e:43:
         d2:bd:94:40:b2:99:cc:51:f2:ae:3c:7c:f4:55:b9:a6:6e:39:
         b6:54:a1:95:b9:fb:3b:b3:28:89:b2:ff:d9:a7:cf:2c:26:5d:
         f5:c8:1f:0e:a3:5f:cd:65:2f:a7:bc:d9:bf:51:67:12:79:43:
         a3:8f:d4:96:5c:a2:21:71:20:b7:e0:dc:39:1e:2f:d5:a0:7b:
         e2:4a:1d:ba:21:17:30:9f:83:4a:99:08:39:33:09:c7:c9:d1:
         61:16:77:e0:2b:c3:61:1e:ac:2c:39:9d:00:9c:07:81:2b:06:
         08:c2:43:f4:65:2e:af:7a:e4:7f:87:5e:73:38:93:2f:9b:de:
         c2:62:9d:26:6b:54:6a:44:29:4b:98:03:4a:81:f0:1c:c5:36:
         22:d6:67:69:1f:34:79:e1:d0:47:b6:6f:de:25:70:58:f2:f0:
         c5:8d:fb:b6:6a:f8:a9:b3:3f:07:8e:d2:73:0e:bb:d0:cb:a9:
         31:0e:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:20 2026 by rpki-client