Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa
File:                     323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa (raw, json)
Hash identifier:          SaxfvfB1C+pa8JqacbPuSe8u4XyvvbZQ+27IK/agWXM=
Subject key identifier:   9D:FB:E0:08:25:30:84:28:5C:7A:06:ED:F2:0F:D9:E1:70:77:A9:D2
Certificate issuer:       /CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2
Certificate serial:       4F8668959880A8D897AC93E30166B8530A866AFC
Authority key identifier: 04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa
Signing time:             Sun 03 May 2026 03:09:25 +0000
ROA not before:           Sun 03 May 2026 03:04:25 +0000
ROA not after:            Sun 02 May 2027 03:09:25 +0000
asID:                     55683
IP address blocks:        2001:df6:cc00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl
                          rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:86:68:95:98:80:a8:d8:97:ac:93:e3:01:66:b8:53:0a:86:6a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2
        Validity
            Not Before: May  3 03:04:25 2026 GMT
            Not After : May  2 03:09:25 2027 GMT
        Subject: CN=9DFBE008253084285C7A06EDF20FD9E17077A9D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4e:d1:16:62:80:4d:6a:2b:bb:3a:fd:3f:be:
                    9c:a1:66:50:40:1c:b6:3c:47:14:86:3b:9f:5e:5b:
                    bd:28:b9:60:f3:d2:dc:9f:22:7e:94:6f:8f:b7:b0:
                    dc:c3:8f:97:4a:27:10:cc:65:65:ef:ec:f9:30:fb:
                    d0:f7:3f:b2:99:14:4d:ff:96:08:36:7c:b1:00:cc:
                    25:67:64:fa:b3:a8:8a:5c:4a:b3:92:d2:3c:b0:42:
                    ba:6e:e5:e4:31:5f:16:8d:9b:c5:71:e5:ef:a7:78:
                    f4:e9:94:c4:0e:42:98:c6:a2:9c:b1:f8:d7:31:e9:
                    70:c8:cf:a6:3e:93:a5:ba:2b:4f:e9:c1:cf:8c:7f:
                    7b:75:5b:bc:59:68:44:7d:ab:25:ae:0c:71:5a:28:
                    50:a6:25:64:6a:c7:0c:34:8d:b5:6e:f9:a1:16:56:
                    61:a0:18:2d:86:b1:30:1e:06:f5:8b:f4:99:e3:f7:
                    c8:01:37:3e:9b:e9:83:8b:5f:d2:97:00:45:b0:a3:
                    e3:dc:4d:8a:ff:a7:8c:09:d7:23:a2:15:91:4b:a1:
                    fd:e5:e4:2d:af:a3:24:37:cc:39:14:43:8a:c1:4c:
                    2c:e6:cd:21:ee:08:b2:cf:e2:9e:43:c9:d4:72:95:
                    ef:eb:96:7a:46:6e:86:ed:b3:a4:e3:da:9a:cd:de:
                    ed:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FB:E0:08:25:30:84:28:5C:7A:06:ED:F2:0F:D9:E1:70:77:A9:D2
            X509v3 Authority Key Identifier:
                keyid:04:6A:4B:8C:47:8B:38:CB:7E:FB:9F:06:A5:AD:9C:74:86:4E:9F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/046A4B8C478B38CB7EFB9F06A5AD9C74864E9FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/323030313a6466363a636330303a3a2f34382d3438203d3e203535363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:cc00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:66:7d:55:20:88:66:d2:51:46:8c:63:fc:c3:d0:2d:92:b4:
         8d:58:52:e7:a5:e9:b2:81:a3:34:77:10:ae:6c:8c:f2:41:d0:
         01:2d:d8:25:7c:3f:ad:51:21:8a:ca:e1:33:52:96:9a:74:51:
         22:a7:5f:4f:c2:be:f2:76:f2:9b:61:97:a2:9a:34:4b:34:80:
         10:8c:12:94:00:a6:23:72:65:53:9f:a0:25:4c:c5:52:56:5a:
         04:cf:e4:eb:5c:64:6b:09:f1:17:3e:31:26:09:ad:7b:39:75:
         8f:d8:ee:a6:f6:d1:51:f2:f7:a6:b5:f3:2e:4e:81:29:45:4b:
         fa:66:8e:0b:11:b3:c5:96:b6:65:c8:26:87:d2:a8:cb:29:30:
         81:27:9b:9f:17:04:92:44:40:ae:d9:2f:de:db:72:22:ea:e6:
         98:36:d6:02:85:d0:bb:95:d9:71:ed:79:fe:83:23:66:92:ce:
         64:41:ca:61:5b:d0:14:58:aa:d3:21:cf:8e:be:88:14:bf:79:
         73:9a:1a:a0:f3:f4:c1:3c:76:aa:34:e5:e0:f0:4d:c7:92:df:
         16:eb:6e:50:7f:de:3c:c6:fb:03:a6:eb:cd:33:82:62:63:33:
         09:aa:85:f1:ea:5c:7d:10:4c:36:e5:8d:fb:37:93:81:e9:86:
         cb:ae:60:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:37 2026 by rpki-client