Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa
File:                     323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (raw, json)
Hash identifier:          JKgFMQaINLByyiM950YQkJcRlrQw6yejg4NQUwVUK6M=
Subject key identifier:   6D:DF:8A:43:D8:D4:F7:86:29:46:66:F2:21:8C:62:76:C8:AE:A1:22
Certificate issuer:       /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial:       6E39EFBF9843A86411B67DBFEBF974A2AAEE9C17
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa
Signing time:             Sun 03 May 2026 02:55:46 +0000
ROA not before:           Sun 03 May 2026 02:50:46 +0000
ROA not after:            Sun 02 May 2027 02:55:46 +0000
asID:                     38759
IP address blocks:        2001:d68:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
                          rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:39:ef:bf:98:43:a8:64:11:b6:7d:bf:eb:f9:74:a2:aa:ee:9c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
        Validity
            Not Before: May  3 02:50:46 2026 GMT
            Not After : May  2 02:55:46 2027 GMT
        Subject: CN=6DDF8A43D8D4F786294666F2218C6276C8AEA122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:f9:32:33:37:d2:d3:a1:2d:d9:0d:df:ae:
                    9f:db:a6:cb:48:43:c9:60:bc:a9:b6:f5:a8:74:53:
                    a3:bf:30:64:8b:bc:89:71:c3:0f:b3:60:a4:c9:34:
                    46:e6:61:b8:d1:9d:ee:79:2f:b4:cd:b1:1f:9e:0e:
                    46:9f:da:a2:8f:c1:e9:6c:8f:d5:ba:af:59:15:74:
                    fe:6a:f2:b1:ef:d0:1c:c3:44:38:cb:0a:b0:97:ca:
                    0e:81:0b:71:3f:e7:f2:a0:d6:50:16:26:f9:61:c1:
                    ad:76:89:1a:10:a6:72:ed:bd:f9:d8:6b:21:77:ef:
                    c7:0d:10:4f:8b:10:e9:7a:c2:27:12:4a:9e:d5:d9:
                    85:c7:3f:ae:23:3e:94:89:e2:fe:62:6b:6b:61:37:
                    cc:b6:c2:cf:78:b3:80:3b:1e:04:d5:29:48:03:4c:
                    04:be:1b:74:37:1a:91:46:bb:57:4d:c9:d9:db:c8:
                    09:b0:0d:78:c2:6e:49:6f:25:91:bc:20:28:10:3d:
                    1d:9f:0a:b5:df:37:c3:83:96:b8:96:7d:9d:67:07:
                    76:50:22:94:1f:dd:27:9c:23:a5:da:1c:56:6a:6a:
                    59:1a:6b:39:ed:5f:8e:89:62:f0:06:4b:f4:bb:55:
                    1e:70:f1:36:eb:2f:14:ff:ef:3a:bf:13:9f:8a:8a:
                    28:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DF:8A:43:D8:D4:F7:86:29:46:66:F2:21:8C:62:76:C8:AE:A1:22
            X509v3 Authority Key Identifier:
                keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d68:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:04:12:df:95:5c:13:fb:b3:43:2f:8a:e0:95:a1:51:fa:7a:
         34:f6:41:d3:13:7c:44:ea:1c:b0:d5:53:7d:0a:52:a7:36:a0:
         35:1f:12:b8:32:c2:92:41:88:e4:93:81:c9:4e:cd:e9:eb:19:
         24:a3:b1:85:79:14:02:bf:4f:c2:c2:ce:ce:ed:0a:de:75:08:
         88:a6:b9:06:7a:63:32:a8:a9:d3:cf:6d:48:a0:03:7c:bf:b7:
         41:73:65:9c:31:41:b1:20:b0:18:69:c0:26:d3:c2:6e:2e:d3:
         60:78:90:2c:b2:a3:4e:a3:d6:f2:ab:03:f8:94:10:58:4f:23:
         df:df:c1:33:79:f6:ca:50:14:ff:f9:aa:76:97:5c:26:98:d4:
         37:7f:1f:35:1e:b2:9b:27:31:ef:9b:a7:07:1f:bf:b1:50:bd:
         04:1d:b9:69:75:97:c8:75:e2:85:4f:d2:8b:37:9a:f7:42:e3:
         8b:db:dd:cb:96:d7:20:f2:64:7e:b6:db:d8:f2:59:81:4f:7e:
         21:c7:ce:09:42:4f:66:6f:4c:91:3c:aa:00:1c:a1:d9:09:3b:
         d3:a1:5f:42:33:89:ed:f5:5c:fa:22:f9:61:77:cc:84:22:0b:
         c8:c9:99:fd:71:aa:e0:2b:63:8f:2a:8e:7c:5f:15:5c:a7:cb:
         41:10:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:57 2026 by rpki-client