Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa
File:                     323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa (raw, json)
Hash identifier:          gx4l1RClNVMIicd/OFhkIDB2zi0aLeUfQl4uYWjAKfI=
Subject key identifier:   1B:F0:63:5B:23:11:96:D9:E4:B3:AF:08:94:6C:B3:C6:10:23:BF:32
Certificate issuer:       /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial:       0FE469DF28477051DA800EEAAEF714F6D6E204C5
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa
Signing time:             Sun 03 May 2026 02:48:44 +0000
ROA not before:           Sun 03 May 2026 02:43:44 +0000
ROA not after:            Sun 02 May 2027 02:48:44 +0000
asID:                     63862
IP address blocks:        2401:f980:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
                          rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e4:69:df:28:47:70:51:da:80:0e:ea:ae:f7:14:f6:d6:e2:04:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
        Validity
            Not Before: May  3 02:43:44 2026 GMT
            Not After : May  2 02:48:44 2027 GMT
        Subject: CN=1BF0635B231196D9E4B3AF08946CB3C61023BF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:3a:b5:18:7e:aa:50:18:83:57:37:94:c9:
                    73:0f:91:d9:1a:f9:2d:62:cc:09:f3:54:0a:9a:39:
                    20:d1:d1:fa:38:c5:34:e5:55:8e:3c:27:40:19:fa:
                    6c:f2:a6:01:82:e3:d6:61:8d:a4:ad:6d:e8:ca:87:
                    b8:ee:b8:8d:cf:e4:7d:ae:a2:2e:88:90:9d:e6:79:
                    33:32:b3:c5:08:fb:a6:36:63:b4:75:31:42:9a:38:
                    d5:24:0a:51:13:41:92:cf:a0:b1:d7:87:e9:b5:9c:
                    a5:cb:2a:97:85:20:16:76:ec:b3:bc:6e:13:17:ea:
                    c7:6f:32:cc:33:8d:20:21:ac:1c:58:51:12:6a:d9:
                    9e:75:81:90:c5:16:fb:2e:69:ae:aa:17:0c:bc:2d:
                    14:e8:80:c6:a6:33:c3:2e:90:e3:ee:76:d0:e4:10:
                    e1:30:4b:b5:cc:27:55:ee:d5:65:f0:eb:57:73:c2:
                    80:6e:f9:8f:e5:3f:de:7e:8b:fd:f7:8e:76:c4:50:
                    08:28:cf:4e:76:cb:41:55:23:15:9b:c2:cb:27:0a:
                    a1:18:e1:cb:19:b7:9c:d6:49:42:b5:da:f2:9d:40:
                    a2:b6:25:cb:13:c5:b2:12:a1:10:9a:60:d2:57:d5:
                    71:0d:61:55:f9:fd:a4:53:3f:f1:1c:bf:50:2c:32:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F0:63:5B:23:11:96:D9:E4:B3:AF:08:94:6C:B3:C6:10:23:BF:32
            X509v3 Authority Key Identifier:
                keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f980:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         86:04:20:0c:6f:b1:10:5b:5f:de:14:d4:64:2c:83:20:69:90:
         c0:54:11:1e:f0:4c:25:7a:59:19:0c:1e:a9:67:6b:f7:65:a5:
         e8:96:bc:4c:35:5e:13:9d:10:7d:0b:6c:fc:f2:dc:a6:31:cc:
         29:44:8e:7e:b5:37:9c:e2:75:88:44:77:bc:0b:46:fd:8d:dd:
         0b:29:cf:d6:ad:ce:cb:4c:42:96:cb:f0:cc:1f:06:fe:b2:ac:
         1c:80:70:7f:09:4b:0d:02:21:c3:6f:06:53:91:3b:e9:19:ec:
         97:1e:3a:46:ed:ac:76:cb:a9:50:6a:73:69:9f:5b:a5:86:8e:
         6a:9b:ed:fd:2a:b2:72:d2:00:06:3c:e5:f0:c5:04:dc:b2:16:
         d1:0b:37:34:05:74:97:95:53:45:8a:ee:8b:49:1b:23:a7:15:
         7e:2b:d7:21:b1:9a:bf:9c:72:e5:78:25:7a:98:30:5f:f4:23:
         07:8e:52:09:97:4b:6f:8c:b1:52:2c:4e:f0:9e:8b:f3:8d:56:
         67:61:e0:0f:c8:71:3f:11:cc:d6:11:5b:4f:61:78:93:11:d1:
         ee:f1:b3:0e:17:6e:30:e4:a8:70:32:86:c5:83:47:1f:5c:b0:
         95:e5:61:b9:ba:d6:18:10:bc:19:f4:a5:f6:7d:9e:49:c8:38:
         e2:c8:94:9d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUD+Rp3yhHcFHagA7qrvcU9tbiBMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJGNkIwNUE1RDlENTZDNDdEMTUwMzkxMUIyQ0MwRjA0
QUJGQTU1RTAeFw0yNjA1MDMwMjQzNDRaFw0yNzA1MDIwMjQ4NDRaMDMxMTAvBgNV
BAMTKDFCRjA2MzVCMjMxMTk2RDlFNEIzQUYwODk0NkNCM0M2MTAyM0JGMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN9Tq1GH6qUBiDVzeUyXMPkdka
+S1izAnzVAqaOSDR0fo4xTTlVY48J0AZ+mzypgGC49ZhjaStbejKh7juuI3P5H2u
oi6IkJ3meTMys8UI+6Y2Y7R1MUKaONUkClETQZLPoLHXh+m1nKXLKpeFIBZ27LO8
bhMX6sdvMswzjSAhrBxYURJq2Z51gZDFFvsuaa6qFwy8LRTogMamM8MukOPudtDk
EOEwS7XMJ1Xu1WXw61dzwoBu+Y/lP95+i/33jnbEUAgoz052y0FVIxWbwssnCqEY
4csZt5zWSUK12vKdQKK2JcsTxbISoRCaYNJX1XENYVX5/aRTP/Ecv1AsMsPDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUG/BjWyMRltnks68IlGyzxhAjvzIwHwYDVR0j
BBgwFoAU8vawWl2dVsR9FQORGyzA8Eq/pV4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODdlODMwYzgtZDU1OS00NTZhLTg4MzUtNGY2ZWI1NTI3YWEyLzAvRjJGNkIwNUE1
RDlENTZDNDdEMTUwMzkxMUIyQ0MwRjA0QUJGQTU1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMkY2QjA1QTVEOUQ1NkM0N0QxNTAzOTExQjJDQzBGMDRBQkZB
NTVFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04
ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhMzUzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMzMzgzNjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAH5
gFAwDQYJKoZIhvcNAQELBQADggEBAIYEIAxvsRBbX94U1GQsgyBpkMBUER7wTCV6
WRkMHqlna/dlpeiWvEw1XhOdEH0LbPzy3KYxzClEjn61N5zidYhEd7wLRv2N3Qsp
z9atzstMQpbL8MwfBv6yrByAcH8JSw0CIcNvBlORO+kZ7JceOkbtrHbLqVBqc2mf
W6WGjmqb7f0qsnLSAAY85fDFBNyyFtELNzQFdJeVU0WK7otJGyOnFX4r1yGxmr+c
cuV4JXqYMF/0IweOUgmXS2+MsVIsTvCei/ONVmdh4A/IcT8RzNYRW09heJMR0e7x
sw4XbjDkqHAyhsWDRx9csJXlYbm61hgQvBn0pfZ9nknIOOLIlJ0=
-----END CERTIFICATE-----
Generated at Wed May 13 08:24:18 2026 by rpki-client