Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa
File:                     323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (raw, json)
Hash identifier:          ILoy/+ibUDKAFOxVMLinSZB9MoToaiC2+Ky+vT/tKdU=
Subject key identifier:   F4:B9:38:55:7F:B0:52:EE:86:27:69:5A:DA:FD:15:E3:DD:5C:E2:55
Certificate issuer:       /CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B
Certificate serial:       5E223FC944D07C55EC1EA6FE032AB389BF1AB20D
Authority key identifier: 33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa
Signing time:             Sun 03 May 2026 03:01:39 +0000
ROA not before:           Sun 03 May 2026 02:56:39 +0000
ROA not after:            Sun 02 May 2027 03:01:39 +0000
asID:                     141070
IP address blocks:        2001:df4:df80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl
                          rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:22:3f:c9:44:d0:7c:55:ec:1e:a6:fe:03:2a:b3:89:bf:1a:b2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330A616F2A63EBF0BB32E25EC313E1C92CE7476B
        Validity
            Not Before: May  3 02:56:39 2026 GMT
            Not After : May  2 03:01:39 2027 GMT
        Subject: CN=F4B938557FB052EE8627695ADAFD15E3DD5CE255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:62:d0:4f:12:8f:cf:c3:d2:b0:77:26:b7:
                    f6:a8:ee:e6:c1:42:8f:59:42:0f:e4:55:bb:2f:dc:
                    92:f0:ab:ba:4b:9e:54:6d:ce:a5:b2:e5:74:5f:65:
                    45:87:ec:25:86:48:69:b4:a6:f7:9c:12:54:d7:10:
                    f6:50:b3:25:17:60:32:c4:c3:2f:72:dd:1c:0f:2e:
                    72:26:19:a1:5f:5d:c5:ad:19:05:ad:b6:9e:dc:44:
                    1d:4b:1e:db:ca:a6:1f:b6:5e:96:6d:00:3b:82:fc:
                    84:10:80:04:40:bf:5e:8d:a2:96:53:61:f5:8e:02:
                    e0:50:d9:dd:bb:31:7a:ea:8f:f0:b1:a7:a8:a7:d3:
                    21:4a:3a:90:51:ed:f2:9a:88:81:19:73:0c:8e:d6:
                    4a:14:61:76:da:c1:4a:5d:70:2c:63:6f:79:9f:11:
                    5e:cf:b8:4e:50:c0:b2:d0:48:ed:1d:4c:c9:e2:38:
                    40:71:e8:aa:35:2d:0e:80:54:2b:b9:ae:00:6b:2b:
                    7d:2f:1b:2b:d3:37:62:dd:8d:d3:2a:ca:00:70:db:
                    87:83:b8:4a:b0:ec:82:21:df:3c:af:fa:b6:12:b9:
                    47:ee:63:9a:be:8a:a6:2a:d2:b6:41:0d:8a:0a:2f:
                    df:fc:74:76:d2:2c:4f:38:9e:01:42:41:45:4d:f0:
                    a6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B9:38:55:7F:B0:52:EE:86:27:69:5A:DA:FD:15:E3:DD:5C:E2:55
            X509v3 Authority Key Identifier:
                keyid:33:0A:61:6F:2A:63:EB:F0:BB:32:E2:5E:C3:13:E1:C9:2C:E7:47:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/330A616F2A63EBF0BB32E25EC313E1C92CE7476B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:df80::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:74:27:44:43:a9:c0:35:79:78:47:8a:09:3e:bf:f3:86:cd:
         b4:43:e6:ab:71:58:3c:56:f0:67:26:25:02:c0:56:00:94:a6:
         4c:f3:ab:82:ff:b5:c9:a1:8c:59:28:fa:fe:3a:21:0d:cd:da:
         da:35:ca:b2:52:8a:77:1f:50:07:ce:70:46:be:7a:61:e5:20:
         9b:49:0e:57:60:16:d7:01:a4:f9:d4:03:ca:3f:ca:ec:00:db:
         56:59:e4:ea:24:f9:ca:56:6a:bc:9f:3c:cb:71:17:99:2a:81:
         e0:9d:20:dd:17:71:6f:26:3b:8e:66:d6:a3:03:5c:47:99:58:
         67:2c:75:75:b1:ee:b4:a5:b3:50:d9:7d:50:e1:65:1c:26:c2:
         71:b7:13:62:d3:bf:de:53:98:54:c9:f8:00:c1:6d:d2:9a:d9:
         e8:45:64:38:7e:57:6e:98:d1:28:10:3b:91:4a:2e:07:71:2e:
         47:bd:be:33:b2:ce:b2:fc:fd:b4:36:ed:02:89:6e:2f:14:ad:
         21:8c:1c:ca:7c:e7:88:93:02:a5:bf:eb:c2:e6:5c:d1:5d:ca:
         e1:a1:10:46:7a:48:33:9a:05:0f:5c:94:a6:2c:9d:5e:06:b2:
         8a:86:15:a5:9f:96:09:f3:59:3b:6c:9d:fd:f3:95:7a:cf:d6:
         34:73:e0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:05 2026 by rpki-client