Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa
File:                     323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa (raw, json)
Hash identifier:          FG4YqxC2Q73IfOAJ8VlqlbH+o++S2tHH9i7KG5m04js=
Subject key identifier:   D6:66:F4:A9:A7:F6:EE:11:E7:94:65:FC:87:29:55:1C:B6:33:84:F9
Certificate issuer:       /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial:       7171D533367C23C26CC3BD21A51DD3516D7628EA
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa
Signing time:             Sun 03 May 2026 02:48:45 +0000
ROA not before:           Sun 03 May 2026 02:43:45 +0000
ROA not after:            Sun 02 May 2027 02:48:45 +0000
asID:                     63862
IP address blocks:        2401:f980:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
                          rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:71:d5:33:36:7c:23:c2:6c:c3:bd:21:a5:1d:d3:51:6d:76:28:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
        Validity
            Not Before: May  3 02:43:45 2026 GMT
            Not After : May  2 02:48:45 2027 GMT
        Subject: CN=D666F4A9A7F6EE11E79465FC8729551CB63384F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:d9:1d:0c:cb:64:1c:ca:11:f3:fe:60:21:
                    3f:d8:95:c3:02:3f:e4:d9:2f:d2:82:98:d3:4a:12:
                    c8:85:06:7a:b0:65:27:5c:c0:d4:24:fe:13:6c:c6:
                    b8:61:9d:db:b8:14:89:aa:8c:7e:2f:12:fe:68:2a:
                    3d:07:13:a9:3c:51:74:32:8b:1e:a0:37:47:de:9d:
                    11:45:4d:d1:ad:f5:9a:92:40:35:f9:e2:cd:59:94:
                    94:ef:09:c1:b1:56:ec:68:a6:57:af:f8:0a:1f:ff:
                    b5:73:53:0b:e1:1a:a5:5e:4c:bd:c4:35:df:49:a8:
                    72:bb:5b:ee:17:b3:c2:69:a0:cd:cf:83:4d:d1:d9:
                    50:03:55:cb:93:78:0b:7c:20:f1:3c:eb:b4:97:f3:
                    18:04:ae:1e:c9:f8:7f:bf:11:95:d7:5f:98:e3:0c:
                    14:0b:83:27:ce:00:a7:70:f8:c9:3f:b4:07:18:ea:
                    13:55:5f:5e:5e:de:72:63:85:77:2b:d8:c0:fa:e2:
                    50:3b:85:9e:bc:10:31:dd:e3:18:dd:cc:7f:ed:e2:
                    ba:b5:3c:df:27:21:18:9c:23:1a:2e:0a:7b:4a:d1:
                    af:3f:e3:7d:9c:66:0d:8b:86:26:14:5e:88:2e:18:
                    92:19:70:7e:3f:92:73:22:37:2f:ab:e0:30:b1:20:
                    80:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:66:F4:A9:A7:F6:EE:11:E7:94:65:FC:87:29:55:1C:B6:33:84:F9
            X509v3 Authority Key Identifier:
                keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f980:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b7:45:28:84:cb:fe:13:e4:56:4d:05:ed:ba:39:e0:d8:eb:9e:
         28:f2:11:6e:b9:5e:68:0b:77:76:eb:31:54:50:e9:79:66:55:
         ef:a4:ec:cf:5e:52:cf:5b:04:64:09:8c:a8:f0:6b:d1:70:6d:
         2b:8e:b3:3a:bf:20:fe:b0:92:04:c7:a1:85:86:eb:73:64:93:
         d0:77:51:fa:50:22:2e:b5:5e:10:c9:60:3b:bf:67:f9:7f:6e:
         24:04:37:5b:67:42:b8:34:1a:de:2c:59:bf:2e:ad:39:0e:f4:
         db:d8:66:53:5b:db:ef:23:85:4b:b2:5b:1f:03:fd:25:3b:ba:
         67:67:26:18:2d:40:f1:ad:28:31:57:d6:d0:00:95:a2:e7:ec:
         c6:09:05:e3:33:60:fa:a8:5f:a4:b5:b8:64:03:b6:58:14:03:
         ea:7d:87:f0:cf:5b:b1:e8:90:d5:f1:42:d7:95:d4:8e:64:ed:
         88:3e:22:f9:c1:89:bf:02:a2:ff:c9:1d:81:bb:cd:1c:37:20:
         e5:34:a2:d6:65:5f:f2:cf:d6:83:55:10:ab:96:dd:2a:70:12:
         0b:b9:c9:5d:ef:0b:2a:d2:4b:5c:16:82:9f:9b:b1:5f:9c:74:
         65:4f:af:37:ae:5f:40:f5:48:d7:6b:f6:cb:b4:82:19:5b:d1:
         52:56:56:85
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcXHVMzZ8I8Jsw70hpR3TUW12KOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJGNkIwNUE1RDlENTZDNDdEMTUwMzkxMUIyQ0MwRjA0
QUJGQTU1RTAeFw0yNjA1MDMwMjQzNDVaFw0yNzA1MDIwMjQ4NDVaMDMxMTAvBgNV
BAMTKEQ2NjZGNEE5QTdGNkVFMTFFNzk0NjVGQzg3Mjk1NTFDQjYzMzg0RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+l9kdDMtkHMoR8/5gIT/YlcMC
P+TZL9KCmNNKEsiFBnqwZSdcwNQk/hNsxrhhndu4FImqjH4vEv5oKj0HE6k8UXQy
ix6gN0fenRFFTdGt9ZqSQDX54s1ZlJTvCcGxVuxoplev+Aof/7VzUwvhGqVeTL3E
Nd9JqHK7W+4Xs8JpoM3Pg03R2VADVcuTeAt8IPE867SX8xgErh7J+H+/EZXXX5jj
DBQLgyfOAKdw+Mk/tAcY6hNVX15e3nJjhXcr2MD64lA7hZ68EDHd4xjdzH/t4rq1
PN8nIRicIxouCntK0a8/432cZg2LhiYUXoguGJIZcH4/knMiNy+r4DCxIIAjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1mb0qaf27hHnlGX8hylVHLYzhPkwHwYDVR0j
BBgwFoAU8vawWl2dVsR9FQORGyzA8Eq/pV4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODdlODMwYzgtZDU1OS00NTZhLTg4MzUtNGY2ZWI1NTI3YWEyLzAvRjJGNkIwNUE1
RDlENTZDNDdEMTUwMzkxMUIyQ0MwRjA0QUJGQTU1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMkY2QjA1QTVEOUQ1NkM0N0QxNTAzOTExQjJDQzBGMDRBQkZB
NTVFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04
ODM1LTRmNmViNTUyN2FhMi8wLzMyMzQzMDMxM2E2NjM5MzgzMDNhMzYzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNjMzMzgzNjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAH5
gGAwDQYJKoZIhvcNAQELBQADggEBALdFKITL/hPkVk0F7bo54NjrnijyEW65XmgL
d3brMVRQ6XlmVe+k7M9eUs9bBGQJjKjwa9FwbSuOszq/IP6wkgTHoYWG63Nkk9B3
UfpQIi61XhDJYDu/Z/l/biQEN1tnQrg0Gt4sWb8urTkO9NvYZlNb2+8jhUuyWx8D
/SU7umdnJhgtQPGtKDFX1tAAlaLn7MYJBeMzYPqoX6S1uGQDtlgUA+p9h/DPW7Ho
kNXxQteV1I5k7Yg+IvnBib8Cov/JHYG7zRw3IOU0otZlX/LP1oNVEKuW3SpwEgu5
yV3vCyrSS1wWgp+bsV+cdGVPrzeuX0D1SNdr9su0ghlb0VJWVoU=
-----END CERTIFICATE-----
Generated at Wed May 13 09:17:57 2026 by rpki-client