Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa
File:                     323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (raw, json)
Hash identifier:          YPV3B1ufGyXuvBK3pUXWD2rG7sLNIONOEGTVhBpx+z4=
Subject key identifier:   01:9F:3E:65:9B:F9:9C:EB:C9:EE:AE:E1:36:D5:4D:35:4D:BD:38:34
Certificate issuer:       /CN=69D1B06609905E16DB4C45F18E3E2558EE62EFC4
Certificate serial:       7BBAFCCE603FA91480EE2B3AB22F63195E682289
Authority key identifier: 69:D1:B0:66:09:90:5E:16:DB:4C:45:F1:8E:3E:25:58:EE:62:EF:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69D1B06609905E16DB4C45F18E3E2558EE62EFC4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa
Signing time:             Sun 03 May 2026 02:37:20 +0000
ROA not before:           Sun 03 May 2026 02:32:20 +0000
ROA not after:            Sun 02 May 2027 02:37:20 +0000
asID:                     152440
IP address blocks:        2001:df3:c240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/69D1B06609905E16DB4C45F18E3E2558EE62EFC4.crl
                          rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/69D1B06609905E16DB4C45F18E3E2558EE62EFC4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69D1B06609905E16DB4C45F18E3E2558EE62EFC4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ba:fc:ce:60:3f:a9:14:80:ee:2b:3a:b2:2f:63:19:5e:68:22:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D1B06609905E16DB4C45F18E3E2558EE62EFC4
        Validity
            Not Before: May  3 02:32:20 2026 GMT
            Not After : May  2 02:37:20 2027 GMT
        Subject: CN=019F3E659BF99CEBC9EEAEE136D54D354DBD3834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:a2:19:c8:90:bd:3a:61:94:de:62:42:a6:
                    20:68:b9:7e:10:a6:32:c4:0f:86:68:50:5b:df:0d:
                    0a:2b:a1:c1:bd:6e:98:e8:7c:01:ef:7e:c5:70:77:
                    96:e9:58:78:07:01:b2:cd:42:88:5a:66:ea:22:56:
                    1a:ee:c1:e5:48:0c:5c:db:3c:fb:65:ad:70:c0:35:
                    14:ad:af:2f:62:8c:74:ef:22:a3:ea:6b:29:9f:0a:
                    79:ea:bf:56:1d:43:8c:3a:91:1e:1f:6e:ac:b9:11:
                    78:8f:86:be:5f:a7:12:f8:a5:94:30:5c:d0:62:44:
                    e1:be:f3:c7:2e:df:39:e1:91:2e:1c:2c:ed:4d:c1:
                    e2:8e:20:cc:f3:a6:36:81:ff:da:e4:5c:d1:fc:ca:
                    0e:00:48:96:00:9e:df:43:81:37:a6:1b:3b:7d:98:
                    ad:ce:4f:5b:70:cb:f0:a3:2e:f8:ed:57:8a:be:2e:
                    37:7d:be:e8:9b:cb:84:d3:75:af:36:2a:c5:22:d9:
                    24:d3:da:20:76:cd:36:3e:c3:2a:ad:c8:bd:07:12:
                    a0:5e:b0:98:a9:d6:b0:10:90:f4:1c:5e:e8:18:9a:
                    4c:ab:bd:35:de:c2:3b:31:39:a7:09:3f:a8:36:ef:
                    c7:a9:93:6b:5d:8a:41:c3:d9:86:9e:01:b4:b4:a1:
                    ea:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9F:3E:65:9B:F9:9C:EB:C9:EE:AE:E1:36:D5:4D:35:4D:BD:38:34
            X509v3 Authority Key Identifier:
                keyid:69:D1:B0:66:09:90:5E:16:DB:4C:45:F1:8E:3E:25:58:EE:62:EF:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/69D1B06609905E16DB4C45F18E3E2558EE62EFC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69D1B06609905E16DB4C45F18E3E2558EE62EFC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:c240::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:11:66:9d:92:58:da:5e:c6:ce:f5:6a:6d:f6:74:f2:9b:
         af:87:67:a5:57:b4:76:41:7e:ab:3f:bd:a7:f0:17:73:42:f5:
         a3:13:0f:1a:2f:e3:07:77:5e:b8:26:c6:a6:5a:dc:2b:74:aa:
         1c:32:e4:8c:c6:0e:6a:6e:90:bc:f8:a2:b6:0c:17:1a:35:3b:
         60:e0:6c:8c:50:45:80:8d:46:de:c6:6f:8a:9e:99:96:02:63:
         63:1e:e5:2b:24:6c:10:50:2e:47:b9:2c:3e:b7:e8:c5:75:f8:
         62:c2:3e:e0:aa:4c:8c:83:1a:24:fd:a8:50:3d:c1:2a:43:9e:
         e2:fc:99:1d:82:e7:da:e2:69:0a:73:78:19:00:b2:31:12:88:
         96:53:22:4e:d5:9e:e3:f3:c1:7c:af:d0:b1:aa:d4:dc:83:39:
         23:c3:e6:ba:3e:9c:96:a0:de:35:1b:1d:bb:97:51:7a:5d:c8:
         f6:d4:0d:c1:f6:9a:23:5e:e2:09:d5:d1:fa:1c:18:51:ef:a9:
         cf:0f:a5:b9:e8:7e:ed:e7:5a:33:59:00:db:82:55:42:f6:34:
         70:2c:b4:e6:ff:24:5c:a6:de:11:3e:fe:96:bc:a1:f8:56:9e:
         ba:0d:57:02:f1:22:61:1c:07:92:8f:76:43:2e:c7:34:bc:14:
         46:eb:b9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:00 2026 by rpki-client