Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/323430313a626538303a3a2f33322d3332203d3e20313333373939.roa
File:                     323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (raw, json)
Hash identifier:          uc3T78iK/wf6j9+1tnEW4aWS+yqOE0CV6VcOc5FTA4g=
Subject key identifier:   F5:5D:E2:29:A6:51:3D:A9:E7:CA:94:D4:5D:19:E9:63:78:37:A6:37
Certificate issuer:       /CN=51F28FDA0EA4620C617F32218CB294E10169884C
Certificate serial:       415CC42F061C13572940D722442E614789DA3A8A
Authority key identifier: 51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/323430313a626538303a3a2f33322d3332203d3e20313333373939.roa
Signing time:             Sun 03 May 2026 03:07:00 +0000
ROA not before:           Sun 03 May 2026 03:02:00 +0000
ROA not after:            Sun 02 May 2027 03:07:00 +0000
asID:                     133799
IP address blocks:        2401:be80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl
                          rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5c:c4:2f:06:1c:13:57:29:40:d7:22:44:2e:61:47:89:da:3a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F28FDA0EA4620C617F32218CB294E10169884C
        Validity
            Not Before: May  3 03:02:00 2026 GMT
            Not After : May  2 03:07:00 2027 GMT
        Subject: CN=F55DE229A6513DA9E7CA94D45D19E9637837A637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:c2:9d:75:e5:22:b2:f2:f6:f4:43:7a:83:
                    9d:23:0c:45:f8:99:fc:c7:6a:48:48:5c:57:d9:26:
                    7e:d3:76:3a:28:56:48:a6:c1:5a:44:6b:53:d7:ef:
                    95:01:c5:f2:16:19:fc:94:4f:12:da:0f:d2:f2:39:
                    a3:2a:61:26:ba:12:0d:92:e8:cf:57:9a:ce:6d:a6:
                    01:c8:39:13:01:2e:e0:46:e1:72:7d:3a:e8:76:12:
                    b5:3f:46:8c:e4:2e:52:ba:ee:96:a9:c8:8b:ac:71:
                    45:81:76:a2:ba:f6:b9:76:98:4a:0c:4e:ac:6d:32:
                    07:38:fb:ff:80:e9:9b:da:5e:63:b1:8f:a3:c2:72:
                    1d:1a:4c:88:fd:03:3c:43:ed:f5:43:d3:3c:f5:84:
                    3b:97:32:9c:6d:f4:c7:c7:e5:f6:d0:c3:d6:8b:40:
                    a2:85:f1:35:b5:49:56:8e:32:b4:36:77:15:4e:39:
                    c6:9d:f6:22:1f:a0:b8:cf:00:49:9e:01:eb:ea:66:
                    0a:46:e0:db:c4:c7:f5:7c:99:a2:97:e2:81:47:50:
                    28:69:4d:45:2b:e3:02:ee:fa:3c:6b:96:93:d7:39:
                    6a:9e:78:46:1c:a0:8a:da:89:40:94:59:43:ad:61:
                    09:c0:19:32:25:ff:33:01:7b:f4:ea:15:19:2e:b9:
                    6d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5D:E2:29:A6:51:3D:A9:E7:CA:94:D4:5D:19:E9:63:78:37:A6:37
            X509v3 Authority Key Identifier:
                keyid:51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/323430313a626538303a3a2f33322d3332203d3e20313333373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:be80::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:4c:78:b3:eb:da:0b:c2:1c:60:2b:5a:e0:e0:81:31:b4:46:
         1a:53:a5:12:d2:51:44:1d:cd:74:a7:42:a1:eb:2f:43:85:8e:
         68:eb:87:d4:6e:90:cc:4c:f8:d3:b3:b3:a0:d4:6e:86:e9:6f:
         ce:64:08:3f:5c:9d:d5:5f:21:99:a5:eb:39:55:e6:12:be:23:
         c7:59:62:8b:7e:cb:2d:21:65:06:00:0b:62:1e:cf:55:b3:04:
         5d:3b:17:f3:fb:9b:40:7f:36:82:12:5a:8a:27:f4:7d:3a:6a:
         9a:c8:22:91:b3:df:62:29:c0:2c:d8:6c:ab:92:24:e1:d1:c7:
         e6:96:ea:e5:e3:c8:43:fe:d8:ea:b6:ce:34:7d:90:f0:62:4f:
         b9:f6:62:bf:a2:e9:88:81:d2:c4:0e:30:3a:67:a8:47:aa:09:
         66:34:54:f6:17:6f:30:26:19:01:ef:09:ca:27:ab:0f:71:08:
         ef:58:55:ff:25:db:8e:5e:71:38:ca:f6:1a:b6:da:f6:a4:da:
         53:7f:55:73:49:8e:76:21:4b:80:1b:d7:6a:ca:2a:09:6c:59:
         bb:ce:6f:1c:23:4f:ce:26:d4:80:38:51:de:37:ea:25:be:b8:
         2a:36:f1:85:6c:00:f3:be:c2:6b:08:63:17:68:f1:6b:b8:4d:
         a1:db:d4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:03:00 2026 by rpki-client