Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa
File:                     323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (raw, json)
Hash identifier:          s63GisiYkYpRSTD3slDNbXG2Qv97cpH0+c4eaoKLjgA=
Subject key identifier:   A6:61:F2:37:A0:13:61:B1:FE:C8:DD:A2:6C:F2:B3:D5:B9:85:BB:9E
Certificate issuer:       /CN=BE674235014841C34B81D477A887E851CCB5DE20
Certificate serial:       67E83A7A9E822A7EFA7AF5DD3A4EEC91F9A0562A
Authority key identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa
Signing time:             Sun 03 May 2026 02:34:22 +0000
ROA not before:           Sun 03 May 2026 02:29:22 +0000
ROA not after:            Sun 02 May 2027 02:34:22 +0000
asID:                     142333
IP address blocks:        2001:df2:f340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl
                          rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e8:3a:7a:9e:82:2a:7e:fa:7a:f5:dd:3a:4e:ec:91:f9:a0:56:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE674235014841C34B81D477A887E851CCB5DE20
        Validity
            Not Before: May  3 02:29:22 2026 GMT
            Not After : May  2 02:34:22 2027 GMT
        Subject: CN=A661F237A01361B1FEC8DDA26CF2B3D5B985BB9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:f5:8c:9b:8a:b7:51:9e:1c:f5:93:88:93:
                    94:3b:15:1f:0b:10:3d:70:f1:1f:61:2d:97:3e:06:
                    c0:71:2d:50:8e:2d:d2:29:91:50:cd:3d:0a:8c:42:
                    a4:5f:83:e5:b4:89:f6:81:63:26:90:77:f5:35:3d:
                    e8:bd:d1:80:cc:33:7f:ea:51:c3:79:a3:a7:b7:f5:
                    e0:73:09:c0:f7:2c:af:c2:2c:3a:22:be:9e:1d:0c:
                    52:c7:f2:b0:e6:b2:1d:72:42:7b:b3:33:48:ca:cf:
                    28:21:ae:6b:da:27:d5:e6:1b:00:c6:dd:26:42:f7:
                    5b:b3:55:f1:2f:ad:ac:6f:f5:db:c2:67:c8:7f:10:
                    0b:0f:7a:ed:1d:96:df:a2:00:59:af:a0:cb:c8:45:
                    68:6c:28:c3:0e:bc:f9:97:8e:ab:00:23:91:da:b8:
                    ef:79:84:23:36:95:c0:40:ec:d3:7f:c0:c2:e2:98:
                    30:78:97:b8:a3:42:f2:66:c6:ac:16:73:c9:41:6f:
                    d2:74:74:01:70:51:f5:2a:f6:18:29:90:ed:47:2c:
                    b7:76:78:c6:6f:eb:db:78:90:6e:6b:96:5b:12:33:
                    1d:a1:10:6c:1d:08:f4:6b:32:c3:c0:2c:3f:8f:a9:
                    ad:a6:ce:d6:b5:bd:ca:d6:fe:45:9a:08:a2:c1:a8:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:61:F2:37:A0:13:61:B1:FE:C8:DD:A2:6C:F2:B3:D5:B9:85:BB:9E
            X509v3 Authority Key Identifier:
                keyid:BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:f340::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:b0:0e:4d:69:c9:6d:c8:3d:1e:f2:d4:9c:b8:ee:00:a3:39:
         bf:a3:62:20:9a:72:27:e8:e3:9a:03:4a:e1:ba:b0:77:fb:d2:
         f0:98:ac:7e:4a:6c:de:ca:79:c7:ea:67:52:6d:8f:e6:0d:d5:
         8f:1e:e4:5b:ee:17:25:c8:c2:59:7c:89:85:6e:13:de:df:72:
         cb:df:48:89:46:7f:62:74:ff:cc:44:44:6a:13:36:0d:d0:ce:
         11:72:64:f8:d4:4a:03:ed:0c:c3:77:a3:dd:af:e2:a8:4c:bd:
         ca:22:dc:3b:42:0b:4e:0c:19:b2:71:78:b6:a0:f1:fb:65:6b:
         f6:c2:f9:8d:c3:1d:b7:65:61:0c:14:02:13:bd:a1:5a:93:14:
         d2:a2:bf:40:6f:8d:34:c9:97:83:45:f9:73:7e:bf:95:fb:c8:
         e2:ac:df:de:37:3f:e5:f5:26:0c:19:fd:56:ce:e1:25:78:a1:
         4f:e2:2f:3b:e9:b7:9d:35:ef:4e:f9:92:e4:33:21:51:3a:84:
         a1:c9:d2:88:1c:60:0c:c8:7c:07:93:36:6f:44:88:d4:62:c4:
         83:8d:b6:50:94:59:69:45:de:ef:22:86:9d:b3:b1:72:a5:63:
         79:b2:16:99:b3:e3:7c:05:10:31:1a:1c:26:28:c7:64:8a:11:
         7e:c2:46:e5
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZ+g6ep6CKn76evXdOk7skfmgViowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4NTFD
Q0I1REUyMDAeFw0yNjA1MDMwMjI5MjJaFw0yNzA1MDIwMjM0MjJaMDMxMTAvBgNV
BAMTKEE2NjFGMjM3QTAxMzYxQjFGRUM4RERBMjZDRjJCM0Q1Qjk4NUJCOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuffWMm4q3UZ4c9ZOIk5Q7FR8L
ED1w8R9hLZc+BsBxLVCOLdIpkVDNPQqMQqRfg+W0ifaBYyaQd/U1Pei90YDMM3/q
UcN5o6e39eBzCcD3LK/CLDoivp4dDFLH8rDmsh1yQnuzM0jKzyghrmvaJ9XmGwDG
3SZC91uzVfEvraxv9dvCZ8h/EAsPeu0dlt+iAFmvoMvIRWhsKMMOvPmXjqsAI5Ha
uO95hCM2lcBA7NN/wMLimDB4l7ijQvJmxqwWc8lBb9J0dAFwUfUq9hgpkO1HLLd2
eMZv69t4kG5rllsSMx2hEGwdCPRrMsPALD+Pqa2mzta1vcrW/kWaCKLBqO2jAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUpmHyN6ATYbH+yN2ibPKz1bmFu54wHwYDVR0j
BBgwFoAUvmdCNQFIQcNLgdR3qIfoUcy13iAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTcwYzFiYWItMTNmNC00Y2U2LTg1ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUw
MTQ4NDFDMzRCODFENDc3QTg4N0U4NTFDQ0I1REUyMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CRTY3NDIzNTAxNDg0MUMzNEI4MUQ0NzdBODg3RTg1MUNDQjVE
RTIwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU3MGMxYmFiLTEzZjQtNGNlNi04
NWY3LWMzODg3MzdmNmQxOS8wLzMyMzAzMDMxM2E2NDY2MzIzYTY2MzMzNDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMyMzMzMzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8vNAMA0GCSqGSIb3DQEBCwUAA4IBAQAAsA5NacltyD0e8tScuO4Aozm/o2IgmnIn
6OOaA0rhurB3+9LwmKx+SmzeynnH6mdSbY/mDdWPHuRb7hclyMJZfImFbhPe33LL
30iJRn9idP/MRERqEzYN0M4RcmT41EoD7QzDd6Pdr+KoTL3KItw7QgtODBmycXi2
oPH7ZWv2wvmNwx23ZWEMFAITvaFakxTSor9Ab400yZeDRflzfr+V+8jirN/eNz/l
9SYMGf1WzuEleKFP4i876bedNe9O+ZLkMyFROoShydKIHGAMyHwHkzZvRIjUYsSD
jbZQlFlpRd7vIoads7FypWN5shaZs+N8BRAxGhwmKMdkihF+wkbl
-----END CERTIFICATE-----
Generated at Wed May 13 14:11:06 2026 by rpki-client