Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa
File:                     323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (raw, json)
Hash identifier:          SpoZTjV8Tcv0nyd4RXYSHRTLVA2GeIVthtYJ5roslNA=
Subject key identifier:   E1:E6:55:AF:E1:19:0A:DA:AE:E8:4E:06:D6:BB:D9:FC:7E:9B:6B:80
Certificate issuer:       /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial:       01E6DF3E572D65C7EC3593C92CB0A0FC0ED7FCE6
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa
Signing time:             Sun 03 May 2026 02:55:43 +0000
ROA not before:           Sun 03 May 2026 02:50:43 +0000
ROA not after:            Sun 02 May 2027 02:55:43 +0000
asID:                     38759
IP address blocks:        2001:d68:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
                          rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e6:df:3e:57:2d:65:c7:ec:35:93:c9:2c:b0:a0:fc:0e:d7:fc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
        Validity
            Not Before: May  3 02:50:43 2026 GMT
            Not After : May  2 02:55:43 2027 GMT
        Subject: CN=E1E655AFE1190ADAAEE84E06D6BBD9FC7E9B6B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c6:76:34:7f:00:02:7f:e4:2d:4c:f6:7c:52:
                    39:76:9c:dd:29:be:1c:a0:6b:b8:71:7a:8c:a1:76:
                    e9:c3:2c:b4:89:ad:16:a3:64:4d:06:b8:93:56:e9:
                    ce:0d:50:d5:34:2b:21:55:d1:de:ed:9d:4e:8f:17:
                    53:95:0b:71:4f:dd:a4:e4:6f:51:5a:bd:02:96:97:
                    fc:53:10:d1:76:d4:c1:8d:6a:63:aa:3a:d2:a9:9e:
                    d2:60:b5:f8:28:86:68:c8:3e:0a:e3:78:38:70:92:
                    87:cb:0d:b6:ce:ab:72:8d:7f:9b:3a:b9:11:16:c7:
                    f7:2f:cf:80:37:3e:9d:c5:2b:89:ef:b2:3b:98:a0:
                    91:0b:bc:51:39:e0:c1:22:66:d7:40:da:29:fa:58:
                    54:b0:7e:50:f6:63:39:67:64:b3:3d:09:ef:68:a3:
                    0d:c9:ff:36:18:a9:ae:81:69:98:68:c0:bc:53:85:
                    c5:e3:57:dc:4c:75:56:3d:76:22:60:cc:80:e3:00:
                    52:2e:60:d0:91:e8:1f:ee:72:52:c0:01:48:58:88:
                    02:af:08:1a:cd:64:90:05:fb:b7:e9:c3:e5:3e:93:
                    f7:20:38:d9:f1:f2:9d:fd:76:7f:93:d0:0f:d1:6e:
                    40:62:0a:8b:b6:fa:68:dc:68:e3:65:72:5f:42:f6:
                    c2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E6:55:AF:E1:19:0A:DA:AE:E8:4E:06:D6:BB:D9:FC:7E:9B:6B:80
            X509v3 Authority Key Identifier:
                keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d68:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:9c:31:39:e4:6c:9b:f6:03:ee:ff:b0:f2:87:b9:7d:c6:be:
         1f:65:8b:2b:5e:de:4e:91:c2:58:06:9d:71:77:17:de:68:a4:
         8c:5a:3a:ed:2f:d9:0e:2a:c0:71:78:b0:b0:d7:7f:e6:01:42:
         33:26:ab:a4:de:d7:ea:ee:79:fb:d7:3a:8f:01:c5:53:5d:7a:
         1d:fa:4c:61:d4:72:37:32:aa:d1:96:8e:81:7f:36:14:a6:87:
         0a:03:8c:66:6f:6b:1b:30:62:1a:a6:9a:94:78:be:10:b7:d3:
         d2:05:96:4d:94:d0:fc:ed:26:48:68:62:86:6e:54:a0:8d:50:
         d3:a0:71:66:22:1f:f0:04:f9:44:a8:ac:bf:c9:b4:3e:8e:98:
         4f:3e:d6:65:e7:92:4b:ec:5c:b7:8b:da:62:a8:c3:61:6d:a3:
         5e:5f:03:ba:7a:7c:7b:c9:5d:6c:95:97:8c:fb:a5:43:fb:dd:
         59:cc:ed:aa:5b:0f:75:73:06:3d:27:ed:8c:d8:b5:91:0b:5d:
         24:f1:61:3d:21:d5:37:b3:66:b3:d5:a9:51:d3:64:49:cb:00:
         99:7c:1c:00:40:2a:b1:1c:fc:99:7a:b4:e6:a1:37:6f:c5:e3:
         b8:06:58:de:4f:cd:d7:3a:4a:2c:13:e7:61:35:27:85:1c:41:
         e0:16:30:5e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUAebfPlctZcfsNZPJLLCg/A7X/OYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIwNjJBMEE4QTcwOEY2NTQ2MDZBMjUyRUZCRDMxRjgx
RDczODMxNTAeFw0yNjA1MDMwMjUwNDNaFw0yNzA1MDIwMjU1NDNaMDMxMTAvBgNV
BAMTKEUxRTY1NUFGRTExOTBBREFBRUU4NEUwNkQ2QkJEOUZDN0U5QjZCODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsxnY0fwACf+QtTPZ8Ujl2nN0p
vhyga7hxeoyhdunDLLSJrRajZE0GuJNW6c4NUNU0KyFV0d7tnU6PF1OVC3FP3aTk
b1FavQKWl/xTENF21MGNamOqOtKpntJgtfgohmjIPgrjeDhwkofLDbbOq3KNf5s6
uREWx/cvz4A3Pp3FK4nvsjuYoJELvFE54MEiZtdA2in6WFSwflD2YzlnZLM9Ce9o
ow3J/zYYqa6BaZhowLxThcXjV9xMdVY9diJgzIDjAFIuYNCR6B/uclLAAUhYiAKv
CBrNZJAF+7fpw+U+k/cgONnx8p39dn+T0A/RbkBiCou2+mjcaONlcl9C9sIjAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU4eZVr+EZCtqu6E4G1rvZ/H6ba4AwHwYDVR0j
BBgwFoAUAgYqCopwj2VGBqJS770x+B1zgxUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTEyZjIyOGMtZGYyMC00NzI4LTlmOTYtOGZhYTEzNDAwMTdhLzAvMDIwNjJBMEE4
QTcwOEY2NTQ2MDZBMjUyRUZCRDMxRjgxRDczODMxNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMjA2MkEwQThBNzA4RjY1NDYwNkEyNTJFRkJEMzFGODFENzM4
MzE1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ExMmYyMjhjLWRmMjAtNDcyOC05
Zjk2LThmYWExMzQwMDE3YS8wLzMyMzAzMDMxM2E2NDM2MzgzYTMxMzEzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzczNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAENaAARMA0G
CSqGSIb3DQEBCwUAA4IBAQAdnDE55Gyb9gPu/7Dyh7l9xr4fZYsrXt5OkcJYBp1x
dxfeaKSMWjrtL9kOKsBxeLCw13/mAUIzJquk3tfq7nn71zqPAcVTXXod+kxh1HI3
MqrRlo6BfzYUpocKA4xmb2sbMGIappqUeL4Qt9PSBZZNlND87SZIaGKGblSgjVDT
oHFmIh/wBPlEqKy/ybQ+jphPPtZl55JL7Fy3i9piqMNhbaNeXwO6enx7yV1slZeM
+6VD+91ZzO2qWw91cwY9J+2M2LWRC10k8WE9IdU3s2az1alR02RJywCZfBwAQCqx
HPyZerTmoTdvxeO4BljeT83XOkosE+dhNSeFHEHgFjBe
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:04 2026 by rpki-client