Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa
File:                     323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (raw, json)
Hash identifier:          71PyqcaPYwvm2e6i8fnxEnvNfxXMokDQ1xxLp0rozYA=
Subject key identifier:   6F:07:65:87:D5:22:63:27:D7:2D:C2:DB:67:8F:0E:CF:34:78:B5:1C
Certificate issuer:       /CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7
Certificate serial:       52018B0F02C3AD63056ED3B23017C7F296AA36F0
Authority key identifier: 8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa
Signing time:             Sun 03 May 2026 02:33:23 +0000
ROA not before:           Sun 03 May 2026 02:28:23 +0000
ROA not after:            Sun 02 May 2027 02:33:23 +0000
asID:                     150980
IP address blocks:        2001:df2:74c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl
                          rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:01:8b:0f:02:c3:ad:63:05:6e:d3:b2:30:17:c7:f2:96:aa:36:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7
        Validity
            Not Before: May  3 02:28:23 2026 GMT
            Not After : May  2 02:33:23 2027 GMT
        Subject: CN=6F076587D5226327D72DC2DB678F0ECF3478B51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:29:23:c0:59:20:b9:b3:8c:56:b1:fc:88:
                    34:ab:a8:4a:7b:c7:a9:f4:23:7e:56:6e:cb:c1:73:
                    f7:cd:03:22:e9:f9:1b:b3:ad:e6:f8:ef:5e:67:a4:
                    4e:c8:31:d1:e7:1f:55:48:2b:bf:37:7e:c4:fe:5e:
                    78:f0:ce:31:50:26:b5:00:fa:30:95:f6:30:8f:12:
                    85:66:c9:37:78:57:ab:ef:e0:04:e9:32:20:2a:4e:
                    c9:16:e0:cc:55:43:76:c7:f9:3f:75:59:0e:6d:07:
                    1c:fa:11:39:b9:bd:f1:aa:5a:34:8b:1a:ca:2c:0e:
                    e9:1a:d5:3a:03:6d:7b:bc:5a:0c:cd:50:37:98:a1:
                    87:1a:7b:65:d0:d7:ac:9a:37:bc:fc:78:92:77:fa:
                    53:76:52:d6:93:79:76:ee:1c:27:d5:38:7b:ff:2a:
                    7b:45:07:a1:6e:8e:81:be:1b:6c:80:e5:30:de:ba:
                    b8:70:e1:a8:50:1c:e1:cb:f6:f1:34:13:70:4d:6e:
                    9b:8b:db:3e:33:f6:fa:bd:df:95:c5:41:dc:02:11:
                    8f:9b:5f:ce:23:77:d9:14:ec:18:93:cc:7f:64:c7:
                    e3:e4:89:99:18:fc:88:7c:3d:26:8c:ef:d9:c7:53:
                    35:8d:05:f8:63:83:e2:de:5e:de:f4:11:11:47:a8:
                    3d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:07:65:87:D5:22:63:27:D7:2D:C2:DB:67:8F:0E:CF:34:78:B5:1C
            X509v3 Authority Key Identifier:
                keyid:8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:74c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:dc:7b:1b:3e:57:88:84:4d:77:f0:0f:a3:12:9b:ed:40:cd:
         7e:27:28:80:ec:de:a5:4f:a7:34:f0:7b:84:4d:d1:85:75:1c:
         31:92:14:06:90:23:79:29:cd:c4:ac:15:a3:d2:af:2a:cb:fc:
         fd:df:29:4b:1b:50:67:e4:68:97:c8:16:6f:eb:8c:46:74:17:
         f4:8a:6b:c7:82:3f:50:95:e7:2d:8b:95:ce:60:b2:4c:8c:7e:
         a6:48:f2:44:13:55:b1:05:07:8c:c3:c4:b5:2b:86:55:b7:b7:
         65:3a:79:ca:63:f8:3c:ed:30:b2:84:9f:53:58:d9:58:fd:2c:
         5a:92:d1:ad:d3:8e:53:29:03:89:65:28:b2:0a:64:ac:55:b3:
         a5:c4:77:6c:31:fc:8d:d5:36:30:55:9c:d6:bb:fb:9d:ed:73:
         9c:0a:f6:fb:6b:45:63:ce:9d:a1:7e:98:37:9c:8a:0e:3e:b2:
         3b:df:b2:c3:40:c1:3d:43:45:43:44:58:db:0d:8c:1e:1e:06:
         81:28:dd:9d:b5:11:b3:fe:9d:67:69:a8:15:ec:6d:38:b3:cc:
         6f:16:16:28:3e:33:b7:d6:8f:da:a5:ec:7f:ba:4f:0a:0a:d7:
         29:cb:26:6c:41:b9:c6:a3:ce:24:52:02:24:8f:31:66:ff:99:
         a9:d3:e8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:11 2026 by rpki-client