Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa
File:                     323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (raw, json)
Hash identifier:          Bl6WywSHBT/Yd5Hz0Bvr9cz9M/uy/fHxxr3Xf/52km0=
Subject key identifier:   4B:6C:5E:D7:9A:23:3E:39:86:AE:D4:EB:10:99:77:56:6A:00:C4:27
Certificate issuer:       /CN=B313E8A9E464C3F7DE16EFE45069343A952B1AAA
Certificate serial:       3A911974EBB91CEC97314416794D055206313B7B
Authority key identifier: B3:13:E8:A9:E4:64:C3:F7:DE:16:EF:E4:50:69:34:3A:95:2B:1A:AA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa
Signing time:             Sun 03 May 2026 03:01:55 +0000
ROA not before:           Sun 03 May 2026 02:56:55 +0000
ROA not after:            Sun 02 May 2027 03:01:55 +0000
asID:                     138086
IP address blocks:        2001:df6:af00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl
                          rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:91:19:74:eb:b9:1c:ec:97:31:44:16:79:4d:05:52:06:31:3b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B313E8A9E464C3F7DE16EFE45069343A952B1AAA
        Validity
            Not Before: May  3 02:56:55 2026 GMT
            Not After : May  2 03:01:55 2027 GMT
        Subject: CN=4B6C5ED79A233E3986AED4EB109977566A00C427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:50:8c:d7:4e:4a:9f:a4:73:6e:e1:15:2e:
                    db:3b:33:47:63:49:2d:67:c9:38:ef:4a:0e:9f:05:
                    06:36:00:ff:85:90:43:f5:3a:fc:bb:e9:9c:19:5e:
                    a9:a1:dd:17:02:64:b5:65:4d:70:6c:51:02:47:66:
                    00:91:21:87:c0:74:b5:e5:eb:48:4f:0b:de:78:76:
                    35:a9:b2:a5:e4:36:7d:d5:04:a2:fb:dd:e9:1f:6b:
                    55:29:b6:a8:f7:f6:3d:9a:c5:03:d2:64:47:3a:b1:
                    99:f5:8f:d4:34:b3:e1:db:2b:08:65:e0:29:ea:9b:
                    25:2e:df:d0:63:26:b1:dd:0c:c2:f6:a3:cc:8a:24:
                    f2:c1:41:64:7d:df:ff:e0:35:70:73:8d:c3:d7:b4:
                    8f:9f:08:56:f6:c0:0b:f8:38:98:05:30:2a:f8:c5:
                    7d:7f:53:74:a7:68:dd:ba:f9:a6:c6:71:a2:f3:e7:
                    53:22:c2:b6:6c:08:55:5e:56:3e:af:2b:2f:d0:f0:
                    20:0a:9a:d7:7e:3c:61:1d:ea:fa:ce:89:e6:4b:96:
                    d7:64:bb:09:2f:f4:cb:cb:15:a6:8a:4c:38:86:5a:
                    b4:5a:3e:07:ed:b4:e6:8f:3b:a4:b2:ed:84:3b:5f:
                    10:31:48:50:a5:0d:ff:2a:66:20:32:11:53:f7:3b:
                    d9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6C:5E:D7:9A:23:3E:39:86:AE:D4:EB:10:99:77:56:6A:00:C4:27
            X509v3 Authority Key Identifier:
                keyid:B3:13:E8:A9:E4:64:C3:F7:DE:16:EF:E4:50:69:34:3A:95:2B:1A:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:af00::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:b9:fb:18:a5:6a:39:9e:ba:f2:f8:4f:c6:1b:03:ee:09:45:
         b7:60:d0:ea:70:6f:2a:1e:39:3d:8a:e4:e0:24:b1:65:14:f1:
         30:60:cd:b3:bc:6c:50:48:71:df:33:4c:48:35:91:19:95:ea:
         c8:8a:07:73:ee:e9:83:66:c2:e9:11:cb:af:28:bb:50:46:19:
         0f:dd:0c:08:d7:34:c7:ae:40:64:3b:db:4a:e8:fc:fa:5b:74:
         68:0b:2c:84:56:a2:e4:fd:cd:00:44:52:f3:ef:2b:41:03:c6:
         d4:61:1d:22:69:25:6f:21:29:ea:72:6c:07:0d:85:f2:31:ce:
         31:cd:a9:65:ff:14:16:f7:c8:d1:0f:50:27:f4:13:99:d5:30:
         6d:17:3d:ad:28:e8:87:71:1f:94:eb:05:c1:15:c8:46:dd:dd:
         29:5e:af:c5:42:11:cc:f9:79:3b:1a:5f:f1:3a:6a:20:3c:9a:
         b4:c8:1f:79:9d:3a:3e:0e:07:69:d3:d1:6b:50:78:c7:be:d0:
         f3:6d:95:04:30:ea:4c:bd:0b:a6:1d:e7:ba:67:48:e9:b9:f2:
         ed:b1:c9:bc:3c:56:a8:43:d0:36:19:ac:f2:43:48:70:0b:c3:
         d5:f0:c3:e5:80:49:2c:39:04:d9:cb:69:e7:ce:30:13:d0:11:
         bf:03:c8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:21 2026 by rpki-client