Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa
File:                     323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa (raw, json)
Hash identifier:          188nUZpWLjC5I5E2PwrEZNz+ZoqJ97KrIMhNsQpTeds=
Subject key identifier:   24:07:D8:BA:F5:34:5F:9F:18:48:DF:B4:40:02:05:69:BB:20:A3:7D
Certificate issuer:       /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial:       0184CE42B54C7B799B736B49BCD14657F7DA1E58
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa
Signing time:             Sun 03 May 2026 02:48:48 +0000
ROA not before:           Sun 03 May 2026 02:43:48 +0000
ROA not after:            Sun 02 May 2027 02:48:48 +0000
asID:                     63862
IP address blocks:        2401:f980:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
                          rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ce:42:b5:4c:7b:79:9b:73:6b:49:bc:d1:46:57:f7:da:1e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
        Validity
            Not Before: May  3 02:43:48 2026 GMT
            Not After : May  2 02:48:48 2027 GMT
        Subject: CN=2407D8BAF5345F9F1848DFB440020569BB20A37D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:1c:d8:7e:23:d3:c3:7f:b8:e5:ae:c9:6c:
                    bf:81:bc:60:ae:7e:c3:1f:7f:4c:7c:bd:05:c1:51:
                    18:35:81:0d:40:c5:45:99:fd:d9:fd:5a:04:84:94:
                    3d:e6:a4:b8:ba:4c:e5:50:31:f6:4e:7c:4c:02:1a:
                    ee:bd:8e:0c:85:b7:39:16:9b:03:50:0a:04:75:57:
                    1c:a8:7f:f4:cc:16:24:c1:21:71:11:ac:80:b9:7d:
                    56:95:d6:8a:80:86:4f:92:dd:2e:28:5e:e5:b2:d6:
                    a8:8f:f8:66:31:fa:07:87:b1:83:81:5d:39:a4:0e:
                    f7:dc:ef:ee:8f:b1:e8:67:1c:df:ab:bf:fa:70:3d:
                    fe:f1:b9:a1:e6:b9:33:4f:5f:23:8f:4c:b2:68:37:
                    e1:94:97:9e:13:06:b3:43:e5:d7:9f:df:9e:f4:92:
                    73:2d:e7:d7:51:db:c2:de:6c:4a:1b:2b:89:f7:97:
                    44:09:82:97:5e:28:d1:c3:46:bf:42:cd:66:7b:d9:
                    73:a8:e1:6b:ce:cf:9d:6b:b5:50:d9:80:00:e2:1b:
                    f5:35:39:cc:ec:01:40:6f:fe:8d:b3:d4:42:8d:50:
                    b6:7b:9c:f2:5f:5b:f5:6a:49:ac:da:db:8e:95:6f:
                    9a:9e:c8:d1:88:4a:84:a2:cb:42:3e:be:c0:72:c4:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:07:D8:BA:F5:34:5F:9F:18:48:DF:B4:40:02:05:69:BB:20:A3:7D
            X509v3 Authority Key Identifier:
                keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f980:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:7f:c8:cf:de:a1:86:48:e7:48:34:96:3b:b4:fc:8f:12:
         07:d1:5d:3a:08:c5:77:9d:64:93:a0:63:25:37:e2:e6:95:a2:
         6e:eb:09:04:8d:36:cf:09:b5:7e:2a:5f:c9:87:29:78:5f:a0:
         cb:e4:e0:15:45:d4:fa:51:87:75:66:a0:75:8d:86:af:4c:f0:
         13:1b:9d:64:5a:d8:ee:38:a9:6a:6a:cb:16:65:e3:5e:46:67:
         4e:04:f0:c0:a4:30:41:c4:9a:cf:96:55:3d:e8:87:2a:49:d6:
         b4:69:6d:48:33:02:e2:25:a2:4c:94:2f:62:73:a9:d1:9a:66:
         25:6f:6b:f0:7d:a3:8a:92:00:75:10:cc:0d:7c:72:e3:cb:7a:
         55:4f:88:15:86:1b:54:5f:af:13:0e:8b:0f:bc:de:36:df:66:
         57:6a:15:73:57:b2:4b:c6:7f:89:90:48:fb:fd:9b:2e:09:81:
         ca:bf:8e:eb:db:a8:54:89:ba:7d:ac:ea:c4:a0:b0:b6:6f:69:
         3e:73:a7:97:f1:a5:91:3a:24:0b:c8:3c:9d:63:9d:1c:c3:08:
         d6:32:eb:5c:17:b3:dc:2e:ca:32:f5:86:d4:27:02:42:4e:f3:
         bf:9c:15:e9:d1:37:0b:01:5c:4f:2e:df:01:fe:dd:a4:c9:92:
         d2:6e:b9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:32 2026 by rpki-client