Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa
File:                     323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (raw, json)
Hash identifier:          rfjdhFUeqRzlpu/a6IIMJJdIbxMUcj3gavb0NZINzaQ=
Subject key identifier:   28:A6:23:40:63:7C:83:37:20:86:C3:54:2E:65:16:95:9E:4D:A4:60
Certificate issuer:       /CN=D51AA8B3D72CDB71C90345B767919665E60A217F
Certificate serial:       6E92A7BD36B8CE68A24106F92EF4BF60FC1ED621
Authority key identifier: D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa
Signing time:             Sun 03 May 2026 02:51:32 +0000
ROA not before:           Sun 03 May 2026 02:46:32 +0000
ROA not after:            Sun 02 May 2027 02:51:32 +0000
asID:                     137325
IP address blocks:        2001:df4:8b00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl
                          rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:92:a7:bd:36:b8:ce:68:a2:41:06:f9:2e:f4:bf:60:fc:1e:d6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D51AA8B3D72CDB71C90345B767919665E60A217F
        Validity
            Not Before: May  3 02:46:32 2026 GMT
            Not After : May  2 02:51:32 2027 GMT
        Subject: CN=28A62340637C83372086C3542E6516959E4DA460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:4e:be:94:8e:2f:ef:c8:0c:3b:57:04:17:
                    ae:f0:11:8c:1b:7f:40:8f:29:9a:21:1f:d4:86:bb:
                    5f:1b:bd:58:f6:50:3b:93:41:da:6a:80:d1:1a:f7:
                    4d:1f:ab:71:e9:4c:c0:57:ac:ec:4f:d1:86:dc:61:
                    52:b7:7d:ad:f1:90:89:c5:31:2c:af:2b:3a:52:38:
                    ff:30:1f:60:f8:8f:ab:04:60:7e:45:e1:25:31:63:
                    15:3f:ac:ba:db:e5:f6:bc:5a:19:c8:3b:f5:ff:e9:
                    30:69:3a:6b:78:14:12:7c:bc:77:b4:cb:29:c2:d4:
                    49:cb:4c:05:45:2f:a7:31:7d:14:2c:42:49:33:d0:
                    8a:a6:11:40:24:1d:92:5c:2b:a2:c3:cc:f0:7a:07:
                    8e:f4:e3:e2:60:d0:eb:56:6a:c9:26:4e:4f:fa:7f:
                    0f:d5:6a:a2:00:91:cb:24:90:9b:7e:3a:f7:5e:8a:
                    3b:2c:7d:4c:61:ba:9e:b7:77:5b:ab:27:0c:bb:d9:
                    6e:52:a3:04:c1:85:9e:3a:e7:c2:92:a6:1e:49:c1:
                    d3:f5:3e:4d:43:74:d6:af:e7:68:ec:67:0e:44:7e:
                    1a:96:10:bb:0f:f1:fc:66:54:d5:60:34:35:3b:d8:
                    27:03:42:8f:a5:81:ce:03:c9:54:ed:b9:fe:3d:85:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A6:23:40:63:7C:83:37:20:86:C3:54:2E:65:16:95:9E:4D:A4:60
            X509v3 Authority Key Identifier:
                keyid:D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:8b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:37:a8:cd:6c:38:d2:a2:e1:79:fc:15:31:c5:a2:ba:bb:ce:
         c1:56:8a:09:69:1b:90:fd:d6:0a:07:60:e1:85:55:cb:d7:1d:
         25:3a:d5:65:52:58:46:9b:3c:d8:b8:d5:8b:19:4a:42:49:4f:
         e7:d2:24:4f:0f:ad:bc:3a:30:a4:65:61:83:7d:61:64:f8:59:
         54:52:2a:cc:8a:de:42:9d:9d:56:1f:a9:62:33:a5:d3:3c:fc:
         a4:0d:5f:f6:66:f1:cd:e5:d0:53:35:d5:a6:0f:12:e6:2e:3d:
         96:2d:6d:6f:1d:8b:d9:19:5f:d9:a0:7b:d3:b9:24:b4:64:f0:
         45:3c:e8:aa:5d:40:04:6e:2d:4a:2e:c6:20:b7:c6:66:7b:da:
         28:06:cc:f5:fc:b6:f8:52:2b:45:47:ce:85:12:cb:f9:c1:0f:
         29:f0:de:94:57:e9:83:0e:77:42:81:96:41:30:29:0b:0b:a6:
         12:9f:8c:da:0f:02:12:92:9d:88:95:d2:1b:62:e3:a1:67:ee:
         87:ae:c5:a3:d7:b9:2a:0d:0e:1c:a8:70:57:1e:30:0f:50:a1:
         14:66:0a:b3:53:5d:fb:e8:c8:52:b8:0e:e5:76:fb:e4:a2:79:
         4e:8b:dc:4b:1a:1e:78:03:df:ae:90:de:44:41:f2:65:93:0c:
         a8:77:76:1d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUbpKnvTa4zmiiQQb5LvS/YPwe1iEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUxQUE4QjNENzJDREI3MUM5MDM0NUI3Njc5MTk2NjVF
NjBBMjE3RjAeFw0yNjA1MDMwMjQ2MzJaFw0yNzA1MDIwMjUxMzJaMDMxMTAvBgNV
BAMTKDI4QTYyMzQwNjM3QzgzMzcyMDg2QzM1NDJFNjUxNjk1OUU0REE0NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk9E6+lI4v78gMO1cEF67wEYwb
f0CPKZohH9SGu18bvVj2UDuTQdpqgNEa900fq3HpTMBXrOxP0YbcYVK3fa3xkInF
MSyvKzpSOP8wH2D4j6sEYH5F4SUxYxU/rLrb5fa8WhnIO/X/6TBpOmt4FBJ8vHe0
yynC1EnLTAVFL6cxfRQsQkkz0IqmEUAkHZJcK6LDzPB6B4704+Jg0OtWaskmTk/6
fw/VaqIAkcskkJt+OvdeijssfUxhup63d1urJwy72W5SowTBhZ4658KSph5JwdP1
Pk1DdNav52jsZw5EfhqWELsP8fxmVNVgNDU72CcDQo+lgc4DyVTtuf49hVP9AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUKKYjQGN8gzcghsNULmUWlZ5NpGAwHwYDVR0j
BBgwFoAU1Rqos9cs23HJA0W3Z5GWZeYKIX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTA2NTJiYzYtOGJiNi00ZjI2LTg4YjEtMzgwZGFjMThlMjY4LzAvRDUxQUE4QjNE
NzJDREI3MUM5MDM0NUI3Njc5MTk2NjVFNjBBMjE3Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ENTFBQThCM0Q3MkNEQjcxQzkwMzQ1Qjc2NzkxOTY2NUU2MEEy
MTdGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkwNjUyYmM2LThiYjYtNGYyNi04
OGIxLTM4MGRhYzE4ZTI2OC8wLzMyMzAzMDMxM2E2NDY2MzQzYTM4NjIzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM3MzMzMjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
9IsAMA0GCSqGSIb3DQEBCwUAA4IBAQBrN6jNbDjSouF5/BUxxaK6u87BVooJaRuQ
/dYKB2DhhVXL1x0lOtVlUlhGmzzYuNWLGUpCSU/n0iRPD628OjCkZWGDfWFk+FlU
UirMit5CnZ1WH6liM6XTPPykDV/2ZvHN5dBTNdWmDxLmLj2WLW1vHYvZGV/ZoHvT
uSS0ZPBFPOiqXUAEbi1KLsYgt8Zme9ooBsz1/Lb4UitFR86FEsv5wQ8p8N6UV+mD
DndCgZZBMCkLC6YSn4zaDwISkp2IldIbYuOhZ+6HrsWj17kqDQ4cqHBXHjAPUKEU
ZgqzU1376MhSuA7ldvvkonlOi9xLGh54A9+ukN5EQfJlkwyod3Yd
-----END CERTIFICATE-----
Generated at Wed May 13 15:24:51 2026 by rpki-client