Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a3a2f33322d3332203d3e203338373539.roa
File:                     323030313a6436383a3a2f33322d3332203d3e203338373539.roa (raw, json)
Hash identifier:          8a+k6Urf56bW4XhUqBSneuIVBM3K/B21j/TAuqOETY4=
Subject key identifier:   B5:52:FF:55:CD:A3:E1:E8:97:71:CB:87:69:FA:A4:94:B3:D3:41:D4
Certificate issuer:       /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial:       469E9F8BD7B46A90091DE8E086C7F739AF9779F8
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a3a2f33322d3332203d3e203338373539.roa
Signing time:             Sun 03 May 2026 02:55:47 +0000
ROA not before:           Sun 03 May 2026 02:50:47 +0000
ROA not after:            Sun 02 May 2027 02:55:47 +0000
asID:                     38759
IP address blocks:        2001:d68::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
                          rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9e:9f:8b:d7:b4:6a:90:09:1d:e8:e0:86:c7:f7:39:af:97:79:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
        Validity
            Not Before: May  3 02:50:47 2026 GMT
            Not After : May  2 02:55:47 2027 GMT
        Subject: CN=B552FF55CDA3E1E89771CB8769FAA494B3D341D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:24:ef:4d:b8:74:9f:fa:94:c5:b4:3e:61:b3:
                    54:99:78:8b:c7:73:13:7c:48:77:b3:57:41:47:d3:
                    ad:23:60:26:11:12:4c:ee:71:f4:9d:b4:38:c1:4d:
                    c3:f5:cb:45:2f:43:bf:50:5c:6a:bb:e6:2f:fb:b4:
                    22:13:1d:bc:3c:b1:89:34:12:2c:38:62:34:eb:1e:
                    c1:3c:1f:cf:40:8a:6d:0d:d7:46:c2:de:36:28:74:
                    f0:c8:7b:11:fb:9a:39:c5:c7:17:7f:db:4a:de:0d:
                    b5:e6:3f:e2:f3:19:fe:db:56:c3:2a:0e:57:1f:bf:
                    69:80:db:18:23:0b:51:75:04:6c:a8:73:8b:0f:3a:
                    06:65:2a:d1:32:c8:09:b5:43:c1:e1:fd:05:c6:89:
                    f3:5a:d0:4b:c2:e2:09:f1:de:ff:31:62:00:04:ac:
                    e2:a9:d6:d1:95:5d:4d:b5:cf:f9:23:5e:0d:86:af:
                    22:7e:cc:47:66:5f:f6:b4:57:98:8e:6b:94:24:1d:
                    c9:74:59:82:69:4d:0a:84:08:1a:0d:5b:d8:31:b8:
                    da:87:e4:26:48:23:b6:b4:6e:71:94:41:01:14:b7:
                    9d:88:07:f2:79:a1:17:bd:38:5a:2f:5b:e2:ca:ad:
                    6a:0f:2d:a0:dd:c9:e6:c9:7b:45:1a:a7:8c:47:17:
                    6b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:52:FF:55:CD:A3:E1:E8:97:71:CB:87:69:FA:A4:94:B3:D3:41:D4
            X509v3 Authority Key Identifier:
                keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a3a2f33322d3332203d3e203338373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d68::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:b1:d9:04:49:b5:89:7d:34:ef:66:4f:0c:00:00:35:a9:83:
         ce:3f:4a:88:3b:2c:13:42:3b:bf:42:ef:37:d8:1b:62:8e:7d:
         ec:b5:cb:88:2b:de:d2:9f:b8:c6:6c:61:48:c2:24:bc:cd:13:
         e1:40:a1:a5:ea:80:25:cb:e5:7e:2e:6b:90:fb:41:28:5b:4e:
         ed:f6:55:1e:2b:51:79:b9:ec:aa:a8:27:fe:35:d6:17:c8:48:
         66:84:ea:3b:59:12:6c:5a:3b:db:a2:f1:bc:37:58:e7:44:10:
         88:91:a2:cf:db:4b:b4:73:fc:65:d8:9e:7c:37:73:eb:c8:9d:
         73:70:b7:69:8c:89:e6:d8:41:d7:3c:c0:50:9d:be:84:c1:ce:
         1a:8c:2c:83:af:1f:30:d9:85:a6:6b:6d:87:da:22:b1:66:0f:
         9c:0a:dc:98:7f:24:d8:3e:27:cd:eb:b9:f8:30:fe:45:81:5b:
         fe:1a:3d:65:b5:39:ce:38:70:43:ac:de:b4:2a:ef:d0:85:3a:
         ed:3e:63:1c:1a:16:75:d3:d0:49:a5:80:46:7f:2a:66:b6:8a:
         af:0e:92:df:5a:39:ea:e4:35:12:f2:16:6b:a2:08:1d:f3:3d:
         5f:52:68:e1:f1:9a:83:93:3b:d7:66:26:73:8c:d0:eb:6e:7b:
         a7:dd:6e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:58 2026 by rpki-client