Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa
File:                     323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (raw, json)
Hash identifier:          e02MKBQgYP+gWaNmouD7MtCYu0SRQ4Bho5dsgVkksxY=
Subject key identifier:   94:84:43:F9:28:2F:92:BC:CA:62:75:3E:9B:30:B9:26:0B:24:85:B2
Certificate issuer:       /CN=790B62849B574740604A7D3662FBB56A4DB8F510
Certificate serial:       51D093EF1E48FBDBE032ABCCD155CC0CDD56FE7A
Authority key identifier: 79:0B:62:84:9B:57:47:40:60:4A:7D:36:62:FB:B5:6A:4D:B8:F5:10
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa
Signing time:             Sun 03 May 2026 03:06:50 +0000
ROA not before:           Sun 03 May 2026 03:01:50 +0000
ROA not after:            Sun 02 May 2027 03:06:50 +0000
asID:                     151569
IP address blocks:        2001:df3:2c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.crl
                          rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d0:93:ef:1e:48:fb:db:e0:32:ab:cc:d1:55:cc:0c:dd:56:fe:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790B62849B574740604A7D3662FBB56A4DB8F510
        Validity
            Not Before: May  3 03:01:50 2026 GMT
            Not After : May  2 03:06:50 2027 GMT
        Subject: CN=948443F9282F92BCCA62753E9B30B9260B2485B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:9b:08:5b:4a:d4:d5:b6:78:40:c0:86:32:
                    3e:ca:08:ae:5a:85:73:ad:0c:6a:19:48:38:62:c9:
                    04:8a:88:67:d7:f4:65:2d:d8:4c:74:bd:01:97:e6:
                    1c:18:d1:69:92:07:45:c7:79:ec:e7:17:47:f5:d6:
                    a2:37:dd:0d:f0:7f:01:ff:1d:01:35:03:05:9d:5d:
                    69:62:8d:4b:54:7d:b7:f7:14:00:3e:95:d0:7a:93:
                    d0:af:eb:e8:cb:52:61:c4:7d:19:01:5e:21:d9:64:
                    d1:20:0a:33:65:11:5d:24:53:d5:ea:25:90:9b:e0:
                    b2:fe:77:46:bd:82:19:63:50:a5:fa:8b:46:69:2d:
                    c3:f7:22:c6:2b:e1:05:35:cd:3f:30:03:2c:87:d8:
                    e3:0c:e3:07:ff:a8:5d:a7:67:aa:e9:ac:08:20:e4:
                    a9:5f:89:fd:1c:94:ed:10:77:56:b4:b7:77:4e:3d:
                    05:cd:fb:10:f2:c0:85:4e:1a:09:a2:80:ac:be:a2:
                    32:f4:4c:46:d9:b2:07:d7:36:3e:7a:4f:cb:07:25:
                    e9:16:34:0c:f4:c6:66:1d:e6:89:50:90:cf:6e:59:
                    c4:ee:48:2e:23:b3:64:19:92:10:28:94:32:80:8e:
                    30:1e:98:79:91:85:d3:29:1c:d1:ec:81:42:ae:a6:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:84:43:F9:28:2F:92:BC:CA:62:75:3E:9B:30:B9:26:0B:24:85:B2
            X509v3 Authority Key Identifier:
                keyid:79:0B:62:84:9B:57:47:40:60:4A:7D:36:62:FB:B5:6A:4D:B8:F5:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:12:e5:59:e4:94:7c:29:48:80:1e:4c:80:1d:b2:43:31:48:
         1e:a8:4a:6d:9a:38:a5:c8:0a:cf:85:6c:a0:43:87:b8:fd:a2:
         75:e7:fc:2a:c0:9d:59:1e:36:5d:5e:bf:7c:f9:48:2f:8c:45:
         09:59:30:f2:92:d8:1d:7f:30:2f:17:7d:d3:6e:98:2e:a3:7c:
         c9:bc:62:68:d9:c1:d1:59:2d:c2:b4:a9:a2:ec:5c:43:1a:54:
         8f:ff:eb:7e:71:50:eb:64:8f:08:0f:5b:9a:90:d6:26:fc:10:
         76:15:16:54:06:09:e4:1e:ee:05:26:1e:9b:d6:21:a5:88:51:
         30:ac:d0:6b:a8:bf:f1:00:39:93:1b:f0:7e:24:ea:10:12:f6:
         5f:dc:4c:1f:57:96:bd:0e:8d:fe:af:92:c6:6b:29:48:02:17:
         19:60:1e:bb:d3:9d:4e:ad:3c:75:0a:b0:19:21:f0:04:e1:49:
         98:dc:14:18:54:c3:d8:3c:37:fe:94:f2:4e:fa:b2:90:c4:73:
         29:a3:65:a6:eb:47:2d:c8:5e:73:35:bc:de:b7:5c:d0:b3:a6:
         99:c5:0e:b3:17:a2:d7:f9:1d:91:63:76:54:02:ef:98:db:ce:
         24:b2:cd:ad:ad:eb:6d:9a:1c:49:0f:f2:01:32:de:c3:3a:be:
         da:ce:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:36 2026 by rpki-client