Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa
File:                     323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (raw, json)
Hash identifier:          BdIV5PbAUlJnh4RApHNLwZ1Ca32+bF84gt8/bqThZfc=
Subject key identifier:   2B:BB:2D:41:C4:0A:58:DE:72:94:B0:FE:35:06:92:52:CA:92:D2:B5
Certificate issuer:       /CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F
Certificate serial:       2ED90D5ACB7E1380880ADFA0F19A2AB5F3C45799
Authority key identifier: EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa
Signing time:             Sun 03 May 2026 02:52:34 +0000
ROA not before:           Sun 03 May 2026 02:47:34 +0000
ROA not after:            Sun 02 May 2027 02:52:34 +0000
asID:                     138114
IP address blocks:        2001:df7:2f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl
                          rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d9:0d:5a:cb:7e:13:80:88:0a:df:a0:f1:9a:2a:b5:f3:c4:57:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F
        Validity
            Not Before: May  3 02:47:34 2026 GMT
            Not After : May  2 02:52:34 2027 GMT
        Subject: CN=2BBB2D41C40A58DE7294B0FE35069252CA92D2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:32:be:e8:af:a7:48:e7:ab:a8:16:e1:27:
                    65:9d:37:42:e3:e6:d7:3a:70:b4:c8:76:d8:9d:92:
                    df:40:b1:8a:35:8a:8c:ab:ee:aa:b2:a1:43:ca:e9:
                    00:41:ba:b5:42:cb:86:84:88:71:f5:fa:86:b8:e4:
                    81:84:67:fe:77:66:48:ce:ba:06:91:3b:c5:a0:0e:
                    41:8d:e8:2a:4a:b9:5e:b0:e1:cc:94:40:eb:0e:73:
                    2a:4e:54:76:89:d7:ac:4f:cb:21:0f:b0:4d:89:bf:
                    12:a1:8c:5d:3f:4f:71:7d:b9:c5:40:2a:7a:88:c6:
                    5f:fa:dd:d2:46:23:4e:7f:9e:6f:1c:e9:5a:34:67:
                    f1:e2:11:5c:b4:c4:7e:eb:69:90:f8:02:76:05:ce:
                    a8:91:98:16:e4:7f:00:40:83:39:4b:12:f2:0e:6b:
                    8a:26:49:18:75:36:05:ec:46:09:db:4f:1b:a3:26:
                    60:45:8d:07:88:8e:d4:f5:6d:86:4c:72:05:a3:95:
                    e1:e7:89:d0:33:15:43:04:42:b7:30:3b:17:b1:4e:
                    50:23:1f:28:96:47:2f:44:38:f4:1a:56:6e:f9:a4:
                    37:33:43:72:10:ac:d6:9d:38:5b:6a:28:5b:94:b5:
                    05:82:2a:c4:0a:22:2a:80:3b:7e:26:eb:22:ac:54:
                    73:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BB:2D:41:C4:0A:58:DE:72:94:B0:FE:35:06:92:52:CA:92:D2:B5
            X509v3 Authority Key Identifier:
                keyid:EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:2f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:90:23:47:9c:b3:89:df:ef:69:39:5d:04:22:d4:59:71:
         52:ca:39:46:ed:e4:3a:f8:16:c4:a7:b5:4f:84:78:9a:e8:8c:
         d5:97:d6:ef:5d:bb:56:6a:65:48:b6:8a:c6:8d:a8:cc:b7:30:
         16:8d:b5:48:71:92:a9:09:9a:9f:6f:02:64:28:52:f4:4d:d0:
         88:e0:78:0b:b7:b6:b5:53:90:8f:a5:fc:77:2c:23:6e:49:c8:
         0d:85:b9:3a:2a:a4:33:37:bb:7a:88:1e:bd:a7:2c:7a:fd:88:
         ad:ab:6d:eb:19:0c:15:26:e0:81:eb:71:62:b7:ce:15:41:b8:
         9f:ed:f8:d0:5c:f9:77:ca:92:cd:a8:ef:0b:25:9a:69:17:0e:
         eb:0d:89:c4:4f:4f:11:d3:06:d6:26:c7:1f:29:8c:3a:64:ad:
         d7:a3:dd:76:51:0e:cf:71:b9:0b:94:bb:16:e3:49:be:12:0c:
         65:bf:47:a4:96:21:ce:6b:e7:a7:e6:00:70:9f:18:c2:27:00:
         73:97:81:a1:c5:82:a2:d2:ec:be:73:59:65:11:a3:31:54:9b:
         b2:f1:e8:35:34:4e:35:f8:bb:94:c8:3e:78:ea:ab:3a:aa:08:
         3c:64:c1:26:0f:eb:0b:94:d7:de:5b:ee:c5:47:e5:12:2a:fe:
         b8:2f:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:05 2026 by rpki-client