Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa
File:                     323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (raw, json)
Hash identifier:          0KpGk+Me0s5mBlSvDHCHu9w7qKthN0KZwNcXUygtBFI=
Subject key identifier:   78:6E:83:7A:31:29:BD:CA:4B:3F:99:CA:A9:1C:47:2E:E3:01:CD:41
Certificate issuer:       /CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5
Certificate serial:       691EEC500BC5F3091FE926ABFFE3C17387BAC9C0
Authority key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa
Signing time:             Sun 03 May 2026 02:54:30 +0000
ROA not before:           Sun 03 May 2026 02:49:30 +0000
ROA not after:            Sun 02 May 2027 02:54:30 +0000
asID:                     135480
IP address blocks:        2001:df5:9600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl
                          rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1e:ec:50:0b:c5:f3:09:1f:e9:26:ab:ff:e3:c1:73:87:ba:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5
        Validity
            Not Before: May  3 02:49:30 2026 GMT
            Not After : May  2 02:54:30 2027 GMT
        Subject: CN=786E837A3129BDCA4B3F99CAA91C472EE301CD41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:75:38:f7:48:19:01:87:2e:ee:58:4f:b6:
                    2a:df:97:86:03:51:b3:c6:15:19:4f:93:08:56:2e:
                    70:3f:73:68:2f:e9:60:52:17:7c:71:f6:69:dc:36:
                    a7:22:08:bc:fe:f0:fd:a3:ae:9e:f5:9f:56:4b:85:
                    50:7a:b3:ec:b6:b1:85:b3:6d:25:5c:16:da:3b:67:
                    49:df:fc:0e:37:30:ae:03:45:38:78:b0:74:3d:a4:
                    7c:05:fc:3c:94:29:ec:50:cc:d6:21:48:cb:3a:9b:
                    07:70:96:10:57:98:1a:51:77:6c:39:09:c5:d9:fa:
                    3e:78:a5:2f:5e:64:0f:90:da:d3:19:7e:ce:a4:18:
                    60:9c:88:01:a7:e3:44:cd:7e:1e:b9:70:57:fe:cd:
                    53:ae:d5:e5:63:94:85:95:30:4e:ec:c2:f7:16:64:
                    03:8b:f7:62:ea:fb:57:1e:bb:96:b8:c7:f2:9f:09:
                    62:12:c0:f8:b6:8d:d6:de:e1:83:b9:24:37:48:ad:
                    9c:43:2c:7c:45:2e:e1:24:95:23:66:4d:c8:72:7d:
                    65:9e:0c:b4:7d:86:16:df:0c:b1:5f:14:76:cb:4f:
                    3f:82:68:33:eb:54:93:ad:9a:59:65:1e:2f:46:45:
                    11:3d:26:91:72:0a:6a:7a:ce:98:b8:ce:eb:7e:54:
                    60:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6E:83:7A:31:29:BD:CA:4B:3F:99:CA:A9:1C:47:2E:E3:01:CD:41
            X509v3 Authority Key Identifier:
                keyid:B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:9600::/48

    Signature Algorithm: sha256WithRSAEncryption
         de:96:aa:ff:fe:23:0f:91:3b:68:35:9b:ef:ee:99:18:63:6a:
         a1:77:f9:76:52:87:1d:f6:da:5c:4d:72:25:4b:c4:b6:59:0e:
         a0:e9:57:57:50:11:5a:95:35:88:d8:70:4c:ea:1b:bd:fa:0e:
         a5:86:3a:02:ea:b0:27:41:29:06:97:81:33:bd:0d:d3:88:a8:
         0d:4b:9a:12:73:cc:7f:03:4b:13:d0:66:c3:da:db:04:86:d9:
         74:31:4c:02:71:a1:39:d6:48:36:d7:ee:e0:a0:85:6d:df:5e:
         b9:c0:a3:92:cd:d1:94:69:2d:2b:41:e2:34:a0:ce:1e:fe:36:
         65:54:2b:1b:03:4d:54:f5:1a:bf:46:bb:95:43:56:25:9e:a4:
         5c:88:1d:2a:64:74:e6:f2:35:d1:50:2d:55:d5:fc:5c:75:05:
         c3:84:ee:39:46:48:00:95:5b:73:c5:9e:35:5d:a1:dd:91:de:
         98:b8:c8:e4:58:c3:5e:e6:4b:98:ee:ad:35:42:63:74:2a:5a:
         8f:91:73:f6:01:42:55:54:c3:e2:94:9a:fe:60:36:f4:33:1b:
         6a:9c:42:65:a0:06:de:51:77:f3:59:61:0b:57:d3:62:8d:19:
         0b:66:72:9b:98:a4:cf:fc:5b:4b:a6:5e:0d:43:56:d8:93:2f:
         d3:7a:14:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:43:11 2026 by rpki-client