Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa
File:                     323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa (raw, json)
Hash identifier:          FmE6EgtaiTdvHmSv4NYOkhmIVErFQ56Arw5rq6qu5sc=
Subject key identifier:   FA:AE:6F:2B:C0:B6:66:C8:8E:C6:21:98:5F:D2:BC:A7:A0:CC:87:E4
Certificate issuer:       /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial:       62E9F65EC74DD17C9A7A1937597DC806877BB000
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa
Signing time:             Sun 03 May 2026 02:48:42 +0000
ROA not before:           Sun 03 May 2026 02:43:42 +0000
ROA not after:            Sun 02 May 2027 02:48:42 +0000
asID:                     63862
IP address blocks:        2401:f980:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
                          rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e9:f6:5e:c7:4d:d1:7c:9a:7a:19:37:59:7d:c8:06:87:7b:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
        Validity
            Not Before: May  3 02:43:42 2026 GMT
            Not After : May  2 02:48:42 2027 GMT
        Subject: CN=FAAE6F2BC0B666C88EC621985FD2BCA7A0CC87E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:54:8f:ea:da:ff:02:3c:df:5a:59:93:c0:
                    96:bf:54:d7:54:0f:4b:41:6d:a5:c5:14:6c:7f:8e:
                    f9:64:67:f3:36:41:9b:cb:13:03:c0:78:cd:a8:ff:
                    ee:32:78:29:71:57:90:dd:ea:bb:68:d7:9a:ef:c2:
                    72:38:13:25:19:af:97:95:5d:ab:d0:42:7b:f4:10:
                    9f:45:57:e5:7d:37:26:e2:f6:ac:9b:c6:88:d3:c1:
                    9f:37:4a:53:c2:1b:f7:18:65:f9:09:67:21:26:18:
                    15:81:05:94:58:1b:b2:63:99:13:6d:02:b2:8f:87:
                    90:6c:9a:38:a4:00:10:1e:44:f5:52:65:02:18:78:
                    cc:95:1c:0a:22:13:b6:71:00:c1:99:4b:5d:e1:fa:
                    0b:6a:72:4e:73:1e:0e:ad:0b:14:3e:bb:4e:1b:fe:
                    77:7d:8b:18:d8:d3:6f:ba:63:43:3e:76:62:d6:b2:
                    ce:6b:fb:dc:45:fa:a2:50:0c:e3:9b:c0:61:8f:8c:
                    85:24:8d:59:c1:a3:1b:0d:c9:ed:67:19:65:bd:d0:
                    4a:15:f7:a8:6e:13:f6:87:28:c5:f1:7b:ae:e0:be:
                    22:68:a3:53:99:5b:dd:21:72:eb:10:3f:e3:91:8d:
                    5d:71:ef:50:01:3b:1a:a1:e0:33:71:8e:6e:34:2b:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AE:6F:2B:C0:B6:66:C8:8E:C6:21:98:5F:D2:BC:A7:A0:CC:87:E4
            X509v3 Authority Key Identifier:
                keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f980:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bb:50:b1:b4:27:dc:6e:d3:18:7c:6f:8a:ec:fc:da:c0:7b:3f:
         3d:5b:ee:f8:43:a8:f5:34:3a:e4:35:0e:4a:3c:55:77:ce:35:
         c2:0c:e9:b3:c8:08:ed:58:ab:98:ff:b0:21:fe:c6:fc:4b:a8:
         96:e9:0b:7d:d2:ec:08:8f:0a:94:48:17:a9:d8:fd:b3:dc:38:
         aa:43:99:10:4b:1d:f1:66:79:02:b7:ab:91:7f:bb:6d:09:72:
         23:99:28:47:df:18:c1:bf:fe:60:b7:20:d5:a6:8b:4f:49:4d:
         1c:3a:85:17:a6:fd:61:01:d4:94:c3:cd:fe:e4:ff:97:5c:e4:
         40:3d:82:7d:d1:0c:63:eb:65:59:64:ef:78:5f:d4:f0:91:13:
         98:1e:8b:2e:61:78:d9:da:ab:52:2a:9e:d6:98:aa:f3:04:ce:
         4f:dc:67:56:0d:25:18:dc:82:7a:5e:6a:d2:0c:19:bc:fb:89:
         14:d6:b6:15:55:62:b9:9b:98:2c:b0:19:8c:96:eb:f0:37:d3:
         de:31:32:4e:0c:87:5c:5f:1a:59:08:6d:04:c0:7f:24:fb:62:
         25:ef:27:f9:69:35:12:59:f1:30:b3:c3:6c:c5:9c:cd:11:cc:
         7b:62:19:18:fd:4a:1a:eb:fe:47:fe:8e:1d:7c:1b:b1:3f:9c:
         58:3e:02:75
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYun2XsdN0Xyaehk3WX3IBod7sAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJGNkIwNUE1RDlENTZDNDdEMTUwMzkxMUIyQ0MwRjA0
QUJGQTU1RTAeFw0yNjA1MDMwMjQzNDJaFw0yNzA1MDIwMjQ4NDJaMDMxMTAvBgNV
BAMTKEZBQUU2RjJCQzBCNjY2Qzg4RUM2MjE5ODVGRDJCQ0E3QTBDQzg3RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7P1SP6tr/AjzfWlmTwJa/VNdU
D0tBbaXFFGx/jvlkZ/M2QZvLEwPAeM2o/+4yeClxV5Dd6rto15rvwnI4EyUZr5eV
XavQQnv0EJ9FV+V9Nybi9qybxojTwZ83SlPCG/cYZfkJZyEmGBWBBZRYG7JjmRNt
ArKPh5BsmjikABAeRPVSZQIYeMyVHAoiE7ZxAMGZS13h+gtqck5zHg6tCxQ+u04b
/nd9ixjY02+6Y0M+dmLWss5r+9xF+qJQDOObwGGPjIUkjVnBoxsNye1nGWW90EoV
96huE/aHKMXxe67gviJoo1OZW90hcusQP+ORjV1x71ABOxqh4DNxjm40KxMBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+q5vK8C2ZsiOxiGYX9K8p6DMh+QwHwYDVR0j
BBgwFoAU8vawWl2dVsR9FQORGyzA8Eq/pV4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODdlODMwYzgtZDU1OS00NTZhLTg4MzUtNGY2ZWI1NTI3YWEyLzAvRjJGNkIwNUE1
RDlENTZDNDdEMTUwMzkxMUIyQ0MwRjA0QUJGQTU1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMkY2QjA1QTVEOUQ1NkM0N0QxNTAzOTExQjJDQzBGMDRBQkZB
NTVFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04
ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhMzQzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMzMzgzNjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAH5
gEAwDQYJKoZIhvcNAQELBQADggEBALtQsbQn3G7TGHxviuz82sB7Pz1b7vhDqPU0
OuQ1Dko8VXfONcIM6bPICO1Yq5j/sCH+xvxLqJbpC33S7AiPCpRIF6nY/bPcOKpD
mRBLHfFmeQK3q5F/u20JciOZKEffGMG//mC3INWmi09JTRw6hRem/WEB1JTDzf7k
/5dc5EA9gn3RDGPrZVlk73hf1PCRE5geiy5heNnaq1IqntaYqvMEzk/cZ1YNJRjc
gnpeatIMGbz7iRTWthVVYrmbmCywGYyW6/A3094xMk4Mh1xfGlkIbQTAfyT7YiXv
J/lpNRJZ8TCzw2zFnM0RzHtiGRj9Shrr/kf+jh18G7E/nFg+AnU=
-----END CERTIFICATE-----
Generated at Wed May 13 09:54:22 2026 by rpki-client