Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa
File:                     323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (raw, json)
Hash identifier:          G90KEOKf6BnudPfrgNF9Y+RD3ZrjM9VxjF1gA2ddTwk=
Subject key identifier:   9C:1F:1A:96:55:10:D0:EC:D0:39:D7:13:2A:7C:26:2F:8B:8C:2B:4B
Certificate issuer:       /CN=34B29E7722E2B5DD7C273585E39574B57B896900
Certificate serial:       681F4CF35DD761C1507C26411529382CCF0C5D1A
Authority key identifier: 34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa
Signing time:             Sun 03 May 2026 02:45:14 +0000
ROA not before:           Sun 03 May 2026 02:40:14 +0000
ROA not after:            Sun 02 May 2027 02:45:14 +0000
asID:                     45731
IP address blocks:        2001:df0:bc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl
                          rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1f:4c:f3:5d:d7:61:c1:50:7c:26:41:15:29:38:2c:cf:0c:5d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B29E7722E2B5DD7C273585E39574B57B896900
        Validity
            Not Before: May  3 02:40:14 2026 GMT
            Not After : May  2 02:45:14 2027 GMT
        Subject: CN=9C1F1A965510D0ECD039D7132A7C262F8B8C2B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e8:3b:c2:09:7d:7f:c1:4a:3e:22:49:a1:13:
                    f6:58:aa:78:ff:6c:50:00:de:72:e8:3f:54:78:79:
                    cc:13:90:d9:e9:0b:ff:78:68:12:a7:aa:2e:fc:6c:
                    e6:0c:6e:06:09:09:c5:47:74:33:70:a7:8c:57:0a:
                    4a:6e:c4:1b:d7:17:dd:07:72:4b:e0:26:68:b4:45:
                    f8:f8:47:7a:6f:e7:0f:aa:5d:02:6f:e8:1b:0e:b0:
                    98:bf:f0:04:c3:86:30:26:a3:f4:2d:e4:cf:81:77:
                    fc:fa:f2:4f:98:40:08:1b:cf:bb:1a:dd:dc:22:5b:
                    c5:27:d7:5e:52:00:96:e1:4d:31:1d:85:35:92:37:
                    68:7a:a6:35:1d:67:90:52:56:7e:12:bb:95:19:ef:
                    6e:23:fe:7d:0e:51:a2:8b:bb:4d:57:a3:b1:c0:83:
                    bf:51:af:95:04:2a:5e:b0:4f:cd:48:fa:4a:8c:f8:
                    9f:2a:17:b2:3b:87:8a:19:4d:b7:ed:f6:4b:5d:e7:
                    8b:49:88:89:d6:4b:67:59:92:c3:46:11:14:82:d2:
                    52:04:f2:69:1a:a2:c2:58:e8:e4:70:a2:4e:6a:db:
                    13:95:80:70:3f:4c:35:21:dd:5f:46:0b:0b:d3:07:
                    31:e1:fa:cb:2b:76:d4:d3:60:f0:54:44:eb:5a:83:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1F:1A:96:55:10:D0:EC:D0:39:D7:13:2A:7C:26:2F:8B:8C:2B:4B
            X509v3 Authority Key Identifier:
                keyid:34:B2:9E:77:22:E2:B5:DD:7C:27:35:85:E3:95:74:B5:7B:89:69:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/34B29E7722E2B5DD7C273585E39574B57B896900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34B29E7722E2B5DD7C273585E39574B57B896900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:bc::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:1b:be:00:3f:f5:3a:98:6a:3f:b9:b8:3e:c5:3b:f4:fc:39:
         1f:b3:68:00:d6:d9:01:b1:d7:a6:df:de:e1:92:a8:4f:1f:e7:
         7f:b2:12:67:ff:2d:5e:a8:f5:60:db:73:76:c3:ab:c0:4f:da:
         4a:d5:9b:b1:ca:33:78:73:35:c3:95:2b:7d:0b:d8:f1:1d:67:
         b4:ae:64:0f:8b:ed:07:e0:a6:3e:93:81:80:f0:96:d9:fb:74:
         f5:de:8c:0c:28:7c:26:53:8c:ea:84:a6:11:b9:dc:8c:12:67:
         13:1b:ec:d4:d4:65:04:94:35:a0:7d:ff:88:f6:9a:95:fd:80:
         75:9a:9b:11:db:ad:24:b4:07:0f:c8:ab:b0:6d:6a:e5:d9:f2:
         0e:8a:94:df:8e:92:7a:af:68:e0:87:af:71:3a:b1:ca:9c:d9:
         b3:41:19:21:c4:08:c8:ea:80:ff:09:89:eb:d6:17:62:2e:67:
         cd:51:dc:e5:64:53:c8:a6:8e:4e:27:0f:e7:7c:a6:fd:f8:2a:
         7e:cf:ec:d3:86:1c:5d:0f:62:d3:63:51:c7:1f:c6:50:95:59:
         36:1b:cc:2a:09:38:36:f8:e1:a5:db:f4:53:d5:a5:be:13:72:
         9f:cc:3e:72:3c:c1:1f:84:13:18:e9:63:23:dd:83:51:7d:07:
         ab:20:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:20 2026 by rpki-client