Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa
File:                     323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (raw, json)
Hash identifier:          iEOirfkgczYrzGd99jmi+CiuNPWk8r0epFlglE1baOk=
Subject key identifier:   F7:CC:6E:39:87:4B:CD:01:2C:EF:AC:B7:4C:AF:2C:5C:17:49:B4:A2
Certificate issuer:       /CN=A756644413E3B0EEE4F12FAD5122BD7A104B029F
Certificate serial:       1E5F4F7ED2FDD284123AB3F73D8E0902064E84B9
Authority key identifier: A7:56:64:44:13:E3:B0:EE:E4:F1:2F:AD:51:22:BD:7A:10:4B:02:9F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A756644413E3B0EEE4F12FAD5122BD7A104B029F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa
Signing time:             Sun 03 May 2026 02:45:56 +0000
ROA not before:           Sun 03 May 2026 02:40:56 +0000
ROA not after:            Sun 02 May 2027 02:45:56 +0000
asID:                     131769
IP address blocks:        2001:df2:ef00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.crl
                          rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A756644413E3B0EEE4F12FAD5122BD7A104B029F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5f:4f:7e:d2:fd:d2:84:12:3a:b3:f7:3d:8e:09:02:06:4e:84:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A756644413E3B0EEE4F12FAD5122BD7A104B029F
        Validity
            Not Before: May  3 02:40:56 2026 GMT
            Not After : May  2 02:45:56 2027 GMT
        Subject: CN=F7CC6E39874BCD012CEFACB74CAF2C5C1749B4A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:c7:1a:c0:1f:75:b7:4b:91:b5:b3:08:d9:
                    2e:67:f3:39:8f:21:90:ae:db:ec:46:d2:db:45:fc:
                    57:97:53:f2:8b:92:8f:3f:14:50:fb:66:0f:b4:74:
                    ab:d5:e2:32:39:1d:f7:3b:ee:b5:83:b3:3f:60:10:
                    dc:b1:6a:9f:3d:9e:56:e9:58:13:f0:43:02:74:dd:
                    a1:ea:f1:12:0e:3b:b5:eb:84:d5:43:1b:28:04:90:
                    f1:00:39:a9:6a:ab:e4:5e:6c:2b:b2:b7:8e:76:3f:
                    d1:9f:d6:d5:db:27:f2:0f:c4:1f:0d:08:f2:1a:ca:
                    7a:6d:b8:bc:6d:7d:c4:4c:97:29:7e:00:44:2d:b5:
                    95:f7:7a:a3:f3:69:fd:c8:40:62:0c:27:9a:af:54:
                    ca:39:60:8b:b7:c5:0b:3c:08:2b:4e:53:f9:e4:f3:
                    c6:68:0b:a2:50:c5:fa:a9:f0:89:2e:bf:40:d5:42:
                    82:6e:30:95:89:1b:0f:83:8a:fe:6b:9b:f9:15:e3:
                    de:36:eb:8a:b5:5b:3e:46:1f:ee:dc:26:83:6b:84:
                    d8:90:83:87:74:19:29:7d:cd:0e:3e:f7:fb:45:99:
                    88:65:10:af:49:41:90:ff:e7:06:a8:13:21:55:69:
                    19:8c:e3:9b:e5:60:08:4e:5f:8d:ad:53:34:d8:08:
                    4f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CC:6E:39:87:4B:CD:01:2C:EF:AC:B7:4C:AF:2C:5C:17:49:B4:A2
            X509v3 Authority Key Identifier:
                keyid:A7:56:64:44:13:E3:B0:EE:E4:F1:2F:AD:51:22:BD:7A:10:4B:02:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A756644413E3B0EEE4F12FAD5122BD7A104B029F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:ef00::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:5c:25:2e:2c:74:3a:a5:31:bb:15:44:aa:37:e3:0b:07:39:
         fc:41:9d:fa:1c:ff:3e:2f:79:fc:bb:38:78:ab:98:43:73:1b:
         4a:ee:8e:91:4d:69:ff:0a:a1:48:f2:a0:31:09:86:b5:5f:5b:
         13:63:b6:bc:99:76:33:3b:84:21:d6:b6:64:53:35:06:1d:86:
         71:84:12:8b:7a:69:51:92:34:8d:64:62:00:20:7f:e0:c4:ed:
         59:c1:3c:25:f1:33:95:d1:d1:07:b9:93:fd:5f:80:a0:49:aa:
         06:ea:f5:ab:e6:e4:8d:07:0f:e8:ee:bc:e0:9c:c1:b4:11:0f:
         c1:9e:9f:32:af:24:30:36:ee:eb:03:30:6e:16:fb:8e:f9:ab:
         66:84:a8:95:b5:d1:0f:95:9b:53:2d:ac:7e:77:4d:a2:e2:49:
         c8:6b:3f:44:24:48:e9:04:e2:b0:c7:80:72:31:cf:3f:d1:fa:
         e1:22:73:de:e6:d2:60:1b:8f:45:ec:6f:a1:f1:b6:57:8b:bd:
         55:50:5d:98:36:9d:6c:a5:56:78:48:34:5a:9a:7c:42:65:7e:
         f5:6d:01:fa:af:e0:07:ca:0e:1f:99:de:b9:52:47:78:fe:49:
         5a:aa:42:9e:44:b4:4c:88:db:96:52:8a:de:87:69:2c:be:c1:
         f6:45:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:51:56 2026 by rpki-client