Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa
File:                     323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (raw, json)
Hash identifier:          xUUMr5UQK8a0ejdjAN7lpyb+LyL+cS2jPdq1m4lezwg=
Subject key identifier:   EE:2A:8D:BE:77:68:5F:88:C5:EC:74:4D:A9:08:C5:EC:7E:E5:93:F7
Certificate issuer:       /CN=7CB53701F9A5E6CBB24596105D30044B647BBC84
Certificate serial:       6ED93B496F2F48340A6DDC1EFD3E3488C1527F98
Authority key identifier: 7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa
Signing time:             Sun 03 May 2026 03:05:48 +0000
ROA not before:           Sun 03 May 2026 03:00:48 +0000
ROA not after:            Sun 02 May 2027 03:05:48 +0000
asID:                     140444
IP address blocks:        2001:df4:2f80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl
                          rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d9:3b:49:6f:2f:48:34:0a:6d:dc:1e:fd:3e:34:88:c1:52:7f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB53701F9A5E6CBB24596105D30044B647BBC84
        Validity
            Not Before: May  3 03:00:48 2026 GMT
            Not After : May  2 03:05:48 2027 GMT
        Subject: CN=EE2A8DBE77685F88C5EC744DA908C5EC7EE593F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fa:69:e3:85:d8:f5:18:c5:2f:a4:91:c2:89:
                    8a:87:38:0a:74:d3:85:d1:e6:30:7b:51:cb:c0:29:
                    34:7b:bb:22:76:5b:52:b6:34:20:7d:1e:68:88:13:
                    d6:62:16:df:92:47:4f:5a:44:62:c8:d6:27:5b:97:
                    2d:c4:6e:cb:98:f5:75:20:36:3f:41:fe:f0:61:0e:
                    d9:59:be:c6:da:a7:a6:50:46:b2:60:3e:92:b0:12:
                    ff:f1:1f:d4:06:95:94:d9:b1:08:59:ef:92:dd:69:
                    63:fd:c6:a0:c2:7d:6f:11:33:54:96:40:bd:3c:62:
                    44:5e:86:a7:e1:bb:b2:d6:15:9c:b2:f0:74:24:8a:
                    cc:e2:77:d5:fe:3c:10:51:11:13:c8:0f:41:49:29:
                    b7:38:97:a0:be:b0:6d:2d:a7:45:e4:87:65:b7:2c:
                    f3:08:1e:45:2c:ca:8e:e0:9b:b1:94:b8:36:f4:56:
                    f7:ef:56:4c:b2:ea:f8:96:b6:9b:6c:ff:a1:a7:02:
                    b1:ff:6c:66:04:de:d0:13:b3:19:5b:46:51:ad:39:
                    7e:3a:e8:22:89:7f:b6:09:c2:be:4e:4f:d6:3b:f3:
                    4a:97:a8:36:4f:f8:f3:bd:53:c2:fa:28:b7:85:8b:
                    d7:a4:9f:d2:d5:34:d6:54:ad:3b:d4:17:6a:66:99:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2A:8D:BE:77:68:5F:88:C5:EC:74:4D:A9:08:C5:EC:7E:E5:93:F7
            X509v3 Authority Key Identifier:
                keyid:7C:B5:37:01:F9:A5:E6:CB:B2:45:96:10:5D:30:04:4B:64:7B:BC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/7CB53701F9A5E6CBB24596105D30044B647BBC84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7CB53701F9A5E6CBB24596105D30044B647BBC84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:2f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:a5:c2:ee:f3:4f:91:9d:54:dc:77:eb:e9:46:42:3b:5a:50:
         57:18:3b:b3:e4:80:02:3c:69:9c:01:65:f3:11:70:6b:15:db:
         d3:3f:4f:ea:4e:eb:ee:81:f5:6b:0d:83:50:7c:57:34:01:07:
         6a:f4:0e:a6:2b:65:d6:59:dc:f5:44:2d:8c:f6:b1:12:d8:3c:
         e4:42:52:5a:a6:5a:c0:26:0a:3c:74:8a:87:f9:aa:31:f9:df:
         3d:8f:37:41:2d:50:fd:6e:cb:f4:2d:29:22:a3:c7:92:29:46:
         02:7b:af:c6:2d:95:51:6d:38:62:45:82:74:75:e8:a9:a5:60:
         9d:8a:65:e4:e0:08:3e:c8:51:bc:e4:89:b7:ce:40:84:ee:4c:
         40:b4:1f:f3:b2:6a:80:53:b6:48:91:df:58:13:48:92:1c:49:
         c2:ff:73:42:09:fe:e3:db:1a:ad:98:88:0b:b4:35:42:1d:25:
         e5:66:d2:b0:29:e0:a5:f8:2b:9c:04:aa:d0:c6:5f:d0:73:1b:
         2d:81:72:31:51:d8:11:19:cf:a4:83:3e:d8:93:90:24:18:6a:
         f8:e7:b2:92:6b:23:fb:72:96:af:50:32:36:5e:73:dd:30:52:
         5b:f5:32:75:b4:3c:9f:f3:fb:95:82:75:f1:7b:1c:66:7f:8a:
         1d:93:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:08 2026 by rpki-client