Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa
File:                     323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (raw, json)
Hash identifier:          rLDPQJO68wJrimu4TJs2pIl/cXWHfaWgrJapXpkI9R8=
Subject key identifier:   2B:1F:81:4C:0A:E7:11:A5:29:89:17:C9:42:80:99:DE:A5:5A:BA:D2
Certificate issuer:       /CN=C1107160ED19380A2A35934230DDBD4EBFCD6BB6
Certificate serial:       67816823088527E857BE5E3B3AB33C3A6232325D
Authority key identifier: C1:10:71:60:ED:19:38:0A:2A:35:93:42:30:DD:BD:4E:BF:CD:6B:B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa
Signing time:             Sun 03 May 2026 02:47:20 +0000
ROA not before:           Sun 03 May 2026 02:42:20 +0000
ROA not after:            Sun 02 May 2027 02:47:20 +0000
asID:                     142368
IP address blocks:        2001:df2:54c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.crl
                          rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:81:68:23:08:85:27:e8:57:be:5e:3b:3a:b3:3c:3a:62:32:32:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1107160ED19380A2A35934230DDBD4EBFCD6BB6
        Validity
            Not Before: May  3 02:42:20 2026 GMT
            Not After : May  2 02:47:20 2027 GMT
        Subject: CN=2B1F814C0AE711A5298917C9428099DEA55ABAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:c3:cb:45:d7:65:61:a7:a9:31:3b:6f:fa:
                    9d:75:06:a3:b4:41:48:42:97:ef:26:4c:8b:6c:1e:
                    27:83:85:54:ce:93:b7:47:d7:77:9f:a2:34:3b:c8:
                    76:d9:5b:b2:bf:0a:c8:51:e5:f7:e1:b1:33:12:88:
                    ec:5a:b5:7f:f9:d9:bd:15:5a:9a:cb:2b:cf:58:07:
                    45:82:cd:67:5a:2f:fb:d4:9e:d7:c6:b6:7c:21:b5:
                    18:cb:b2:61:0f:c2:e9:93:a7:09:be:ed:82:13:a4:
                    31:3f:98:f5:ce:a4:0e:4c:b3:04:76:b0:06:f7:6a:
                    c2:fd:2f:5e:54:d5:15:bc:5b:6d:3f:fa:f9:fd:58:
                    d8:34:ab:f6:23:87:5d:18:1b:72:66:60:8b:f5:80:
                    18:61:e2:9e:77:8f:e4:e3:59:2c:6f:bd:7e:6a:61:
                    ea:74:77:06:20:9c:10:da:22:a0:66:6c:30:b2:a2:
                    ed:b3:4f:83:24:bb:47:98:2b:f5:3d:86:ce:fd:06:
                    72:a5:c9:85:27:b3:1b:90:90:0f:f1:73:c8:7e:21:
                    9f:b3:9e:6e:71:52:9c:72:a0:c1:8d:72:bc:49:da:
                    fd:52:35:ad:3b:6f:35:ce:04:63:37:6b:17:19:2e:
                    81:96:bc:3c:e1:e2:2d:6d:13:71:c4:da:8b:38:7e:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1F:81:4C:0A:E7:11:A5:29:89:17:C9:42:80:99:DE:A5:5A:BA:D2
            X509v3 Authority Key Identifier:
                keyid:C1:10:71:60:ED:19:38:0A:2A:35:93:42:30:DD:BD:4E:BF:CD:6B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1107160ED19380A2A35934230DDBD4EBFCD6BB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:54c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:fb:5c:85:65:96:37:f6:b4:c3:18:be:4e:12:43:2e:aa:91:
         c5:39:ba:9f:ea:74:6a:9f:10:bc:7b:37:fb:96:e0:30:04:ff:
         bf:44:69:50:c4:1d:a6:9a:c6:fb:e3:7f:61:2c:91:01:80:01:
         14:81:73:43:47:d6:00:d2:4c:16:2b:26:e6:65:35:9f:2d:06:
         c8:4d:cf:09:4f:67:f1:d9:a7:e7:e0:05:55:b5:b6:a7:5a:8f:
         f3:8a:ae:8d:e6:5a:7a:58:f4:79:8f:44:c0:26:13:26:9c:fb:
         21:89:79:6f:fc:6e:49:cc:fa:1d:41:ab:58:08:d9:f7:11:c6:
         b8:fb:36:c0:41:14:d4:14:8c:eb:0e:3b:c3:14:a4:b2:78:d5:
         9c:42:8b:c6:bf:7d:d3:04:e1:0d:17:db:0d:ed:8b:fb:46:63:
         ab:5f:64:d7:e0:34:5f:5d:7b:6c:5e:86:95:a4:be:06:2f:67:
         4a:ea:ae:cd:5c:f4:ea:73:d1:68:27:fb:bb:2d:d9:b6:34:23:
         97:5c:b6:20:0c:a4:3f:7d:1a:2f:44:f6:e5:d7:c8:11:72:5f:
         f0:eb:27:21:9e:90:e6:80:e9:5a:90:13:cd:5a:d0:7d:18:f1:
         89:dc:00:cf:bf:b2:9c:6c:dd:69:7a:0a:18:90:55:4c:aa:d3:
         f5:a6:db:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:44 2026 by rpki-client