Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa
File:                     323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (raw, json)
Hash identifier:          eE2EjWF5JyFRMHUXcgYuX1KiOGjP1McRgQBH4Ci3bis=
Subject key identifier:   0A:00:A9:75:A7:C2:5F:04:D1:51:C2:BB:68:1B:8F:6D:31:24:22:D9
Certificate issuer:       /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44
Certificate serial:       0846240803B32B16A52FF1E0BA8D2190B017A662
Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa
Signing time:             Sun 03 May 2026 02:49:46 +0000
ROA not before:           Sun 03 May 2026 02:44:46 +0000
ROA not after:            Sun 02 May 2027 02:49:46 +0000
asID:                     140421
IP address blocks:        2001:df2:c980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl
                          rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:46:24:08:03:b3:2b:16:a5:2f:f1:e0:ba:8d:21:90:b0:17:a6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44
        Validity
            Not Before: May  3 02:44:46 2026 GMT
            Not After : May  2 02:49:46 2027 GMT
        Subject: CN=0A00A975A7C25F04D151C2BB681B8F6D312422D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:f0:f3:a8:72:37:b2:4c:ad:7b:aa:04:4b:
                    53:3e:dc:72:78:40:f7:9f:d7:89:9d:4b:1a:c3:c2:
                    13:07:c3:a5:fc:04:ed:58:45:e6:e7:2c:e5:37:93:
                    db:cf:91:9b:7e:6b:ab:d5:ff:71:74:10:e5:f8:f4:
                    40:a5:62:9c:f2:7f:0c:6f:94:d1:16:c1:90:72:d2:
                    85:cf:ec:fa:47:62:4e:ed:01:d3:02:51:04:eb:9e:
                    d9:06:f4:f8:4c:19:eb:24:d6:49:42:f9:58:c9:81:
                    eb:b3:b8:8f:af:52:a0:de:34:a7:0d:d9:9e:22:e7:
                    64:f6:32:28:d7:9b:7c:a9:70:e1:16:15:ba:c4:d3:
                    bd:95:32:78:58:f6:ae:28:f9:59:a2:fc:bc:3a:34:
                    a9:c0:84:c5:92:f3:34:ae:c7:0e:5e:bd:d0:5c:b9:
                    09:bf:fb:fc:7e:e0:f0:ff:ad:c3:9c:b4:50:08:9b:
                    11:33:ad:8a:c5:8e:d0:ed:41:70:ec:2a:93:2d:3e:
                    18:7c:07:35:63:c2:c9:2f:84:c4:17:c7:e9:e9:31:
                    80:05:c0:58:66:38:64:04:a9:45:d1:7e:dc:9f:90:
                    4c:dd:1b:29:b8:91:44:3e:30:53:f1:c4:7a:c8:73:
                    65:5d:81:36:34:f7:e8:26:bd:08:cc:3a:07:f7:b0:
                    44:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:00:A9:75:A7:C2:5F:04:D1:51:C2:BB:68:1B:8F:6D:31:24:22:D9
            X509v3 Authority Key Identifier:
                keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:c980::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:de:e8:4c:19:15:75:94:bb:dc:be:3e:05:11:6f:f2:56:85:
         66:b1:73:e3:27:6c:84:79:61:66:46:ed:82:a9:0d:e0:cd:12:
         02:c5:ba:22:7c:3f:64:c9:79:65:38:62:8b:58:6e:06:d1:87:
         4b:ff:7e:73:8d:a3:53:2c:ca:3f:a4:80:17:21:94:65:15:e4:
         ef:01:2c:1a:81:c7:04:4e:c0:68:5e:e8:b7:d6:f1:1e:00:04:
         0e:34:c0:64:3c:47:f2:e5:75:79:b1:09:68:ad:ce:f8:a9:ab:
         09:a1:ac:97:6b:7d:4c:88:c4:ea:fa:d1:67:3a:8b:42:dd:0f:
         68:06:2a:7e:23:28:c3:b1:5f:d3:18:aa:88:b6:d4:26:28:b0:
         e4:d9:fa:fa:da:41:dd:18:a5:af:62:2c:0e:e8:a8:ee:1d:ee:
         d0:10:13:aa:9c:f8:48:3a:13:1b:f3:6d:22:00:2f:36:a1:20:
         fa:73:5c:23:05:de:22:df:b1:25:32:15:03:e2:a1:1b:1d:99:
         c5:23:b9:65:32:76:0c:3b:51:14:c5:a1:a1:7b:d2:0d:62:dc:
         83:e9:3c:84:39:c3:7d:8e:ba:4d:3a:14:b4:fc:df:16:31:04:
         52:30:a9:bf:a7:a8:dd:46:e1:3e:35:78:95:0a:7c:7f:77:92:
         ea:ca:1a:57
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUCEYkCAOzKxalL/Hguo0hkLAXpmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVG
MzgxMkI0NDAeFw0yNjA1MDMwMjQ0NDZaFw0yNzA1MDIwMjQ5NDZaMDMxMTAvBgNV
BAMTKDBBMDBBOTc1QTdDMjVGMDREMTUxQzJCQjY4MUI4RjZEMzEyNDIyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaqPDzqHI3skyte6oES1M+3HJ4
QPef14mdSxrDwhMHw6X8BO1YRebnLOU3k9vPkZt+a6vV/3F0EOX49EClYpzyfwxv
lNEWwZBy0oXP7PpHYk7tAdMCUQTrntkG9PhMGesk1klC+VjJgeuzuI+vUqDeNKcN
2Z4i52T2MijXm3ypcOEWFbrE072VMnhY9q4o+Vmi/Lw6NKnAhMWS8zSuxw5evdBc
uQm/+/x+4PD/rcOctFAImxEzrYrFjtDtQXDsKpMtPhh8BzVjwskvhMQXx+npMYAF
wFhmOGQEqUXRftyfkEzdGym4kUQ+MFPxxHrIc2VdgTY09+gmvQjMOgf3sEQhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUCgCpdafCXwTRUcK7aBuPbTEkItkwHwYDVR0j
BBgwFoAU6XsB6bEDoFlcEG+9tOqWNfOBK0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGI3MmVjYTQtNzNhZC00ZTBiLWE2YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlC
MTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVGMzgxMkI0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FOTdCMDFFOUIxMDNBMDU5NUMxMDZGQkRCNEVBOTYzNUYzODEy
QjQ0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhiNzJlY2E0LTczYWQtNGUwYi1h
NmE2LTdhNjU2OThiNzNiZS8wLzMyMzAzMDMxM2E2NDY2MzIzYTYzMzkzODMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzQzMjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8smAMA0GCSqGSIb3DQEBCwUAA4IBAQAr3uhMGRV1lLvcvj4FEW/yVoVmsXPjJ2yE
eWFmRu2CqQ3gzRICxboifD9kyXllOGKLWG4G0YdL/35zjaNTLMo/pIAXIZRlFeTv
ASwagccETsBoXui31vEeAAQONMBkPEfy5XV5sQlorc74qasJoayXa31MiMTq+tFn
OotC3Q9oBip+IyjDsV/TGKqIttQmKLDk2fr62kHdGKWvYiwO6KjuHe7QEBOqnPhI
OhMb820iAC82oSD6c1wjBd4i37ElMhUD4qEbHZnFI7llMnYMO1EUxaGhe9INYtyD
6TyEOcN9jrpNOhS0/N8WMQRSMKm/p6jdRuE+NXiVCnx/d5LqyhpX
-----END CERTIFICATE-----
Generated at Wed May 13 05:37:48 2026 by rpki-client