Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a373030303a3a2f33362d3336203d3e203633383632.roa
File:                     323430313a663938303a373030303a3a2f33362d3336203d3e203633383632.roa (raw, json)
Hash identifier:          rU/VCfOcmioGmVK72orlaC2seYco9bFHexowAk81BN4=
Subject key identifier:   F0:A7:18:4C:D8:10:C5:A3:07:FF:2E:ED:47:D6:52:54:77:66:A6:74
Certificate issuer:       /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial:       73ADA151EE1868F2C03EFCCD370618084A5E83C1
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a373030303a3a2f33362d3336203d3e203633383632.roa
Signing time:             Sun 03 May 2026 02:48:43 +0000
ROA not before:           Sun 03 May 2026 02:43:43 +0000
ROA not after:            Sun 02 May 2027 02:48:43 +0000
asID:                     63862
IP address blocks:        2401:f980:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
                          rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ad:a1:51:ee:18:68:f2:c0:3e:fc:cd:37:06:18:08:4a:5e:83:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
        Validity
            Not Before: May  3 02:43:43 2026 GMT
            Not After : May  2 02:48:43 2027 GMT
        Subject: CN=F0A7184CD810C5A307FF2EED47D652547766A674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:4e:03:d5:71:62:7a:ed:b7:28:b2:14:33:
                    96:7b:86:a1:da:a5:69:c6:6e:63:bd:48:39:a6:67:
                    13:16:75:c2:f5:46:20:57:c0:bf:6d:bb:99:5e:bc:
                    46:ed:8c:6f:2e:6e:bb:28:7d:af:a5:10:cb:f4:a7:
                    1b:e6:b6:63:fb:88:00:ab:30:03:15:0c:b7:1c:de:
                    3a:11:be:2b:74:14:e3:02:b2:bf:6d:36:3e:f2:59:
                    21:3d:b4:36:9d:6c:ec:91:89:c5:9a:be:39:3d:46:
                    e3:49:0b:3c:f7:14:ad:af:ed:65:15:14:ca:be:66:
                    2f:d4:0d:56:29:3c:57:d6:f4:fa:4b:b6:58:5f:e8:
                    0a:e8:6d:c4:9c:58:57:48:b6:e4:59:93:00:d7:77:
                    1c:05:f0:44:91:e4:e1:90:42:a9:67:b5:1f:24:cf:
                    57:95:2b:95:ec:1f:06:0e:5b:80:10:29:c0:6f:70:
                    ec:8f:df:9b:c9:21:27:c7:22:10:f8:aa:be:0c:2a:
                    d1:c9:9a:73:34:11:c3:cf:06:f2:72:74:12:3d:10:
                    67:f5:7d:07:6f:21:09:a6:77:07:93:2c:32:8f:d2:
                    f7:27:31:c7:1e:7d:d7:3c:ad:f5:7c:2b:66:51:c4:
                    f1:9a:17:c2:dd:66:7f:6e:02:5b:7a:29:8b:3d:70:
                    5e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A7:18:4C:D8:10:C5:A3:07:FF:2E:ED:47:D6:52:54:77:66:A6:74
            X509v3 Authority Key Identifier:
                keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a373030303a3a2f33362d3336203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f980:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:9e:ea:71:40:55:6a:a1:03:99:6f:da:d9:61:e0:a7:d1:21:
         67:e8:39:32:b2:35:69:5a:14:d7:ee:e4:14:a5:0a:e6:dc:51:
         e9:81:25:08:37:52:95:68:cf:44:8b:8e:57:2b:a6:71:6f:40:
         6c:67:e3:7c:5a:1e:c7:5f:b4:fb:64:04:49:a9:ab:9f:10:22:
         0e:d0:3e:8c:f1:4b:63:97:d0:1e:1a:cd:38:47:4e:31:29:dc:
         93:43:2a:75:6d:fd:3e:7a:d7:4c:f4:f2:85:27:98:7b:a4:5a:
         7f:f7:8f:fb:14:08:72:28:8a:2c:83:d0:f3:27:4a:f6:c3:b2:
         4d:7b:81:cf:ce:b8:a2:6e:c1:ef:46:67:b2:c4:46:f9:bd:06:
         3b:94:17:ab:07:d3:ec:d9:9e:ac:41:df:0e:65:a9:4d:39:2b:
         2a:ce:63:73:91:f0:0e:3f:64:82:7e:0a:29:46:e9:95:9d:2b:
         24:80:6f:1b:01:19:6d:22:05:98:8f:75:c3:b9:68:ae:a6:01:
         29:8c:36:e9:67:b3:f2:f3:95:32:08:54:e8:b8:01:ee:f8:ef:
         0e:04:1c:3d:17:8b:24:35:7b:ea:d1:69:a8:00:52:22:59:cf:
         05:0d:ae:cf:41:65:ca:bf:0d:88:9b:33:8b:f9:b3:dd:02:b9:
         67:6d:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:56 2026 by rpki-client