Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa
File:                     323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (raw, json)
Hash identifier:          2PZRw81bQ6C6T+rhPpeS2pJwxgW1qGxBfnel2RNaMVk=
Subject key identifier:   6C:5B:77:E5:E8:FB:9D:FE:3F:2A:A2:80:D5:BE:F4:43:FC:54:0F:72
Certificate issuer:       /CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1
Certificate serial:       24CC4F04772B5E090AA90A2384B5053639BC4B
Authority key identifier: C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa
Signing time:             Sun 03 May 2026 03:09:52 +0000
ROA not before:           Sun 03 May 2026 03:04:52 +0000
ROA not after:            Sun 02 May 2027 03:09:52 +0000
asID:                     139378
IP address blocks:        2001:df1:5680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl
                          rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cc:4f:04:77:2b:5e:09:0a:a9:0a:23:84:b5:05:36:39:bc:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1
        Validity
            Not Before: May  3 03:04:52 2026 GMT
            Not After : May  2 03:09:52 2027 GMT
        Subject: CN=6C5B77E5E8FB9DFE3F2AA280D5BEF443FC540F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:09:be:81:d2:68:c5:30:79:0d:81:46:be:
                    eb:d8:50:64:0f:55:8b:63:d2:bc:7f:35:26:a8:3f:
                    32:9f:d3:a9:ab:14:5d:68:33:b0:4d:1c:c1:c2:2e:
                    e6:5f:fb:24:d9:e4:e5:5c:0f:0a:b1:be:71:25:b4:
                    4b:13:fd:b4:11:9c:d7:35:6e:60:7a:b7:55:9e:54:
                    35:e9:c9:56:26:21:cb:cf:a4:52:a4:81:f5:61:af:
                    09:c5:c6:54:1c:86:1f:be:02:cd:17:32:d0:04:b4:
                    5b:37:3a:ce:1e:bc:cb:9f:b6:35:e5:03:e9:43:d9:
                    d1:35:9a:d1:f3:39:b6:ce:54:59:cc:ef:3a:63:aa:
                    6c:dc:4c:d9:89:72:ad:e6:a8:69:81:51:5b:a4:55:
                    e0:5d:ba:96:b0:26:15:3e:05:6b:fe:51:11:2d:c9:
                    4d:97:05:16:20:d1:fc:61:fd:cd:e5:72:f7:f8:3d:
                    8b:58:23:11:fb:99:b9:c3:1c:03:a5:b3:97:86:3b:
                    a6:86:25:64:5c:64:69:43:64:6e:8c:6f:86:c2:92:
                    ac:75:8d:af:05:90:7d:3e:79:d3:56:b6:5c:f5:63:
                    6a:94:00:db:73:75:d8:5d:c2:9a:ab:25:b0:26:7b:
                    b8:c0:29:c7:a2:2c:93:b0:05:e9:db:ad:a9:dc:b4:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5B:77:E5:E8:FB:9D:FE:3F:2A:A2:80:D5:BE:F4:43:FC:54:0F:72
            X509v3 Authority Key Identifier:
                keyid:C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:5680::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:c4:36:8c:c2:ed:60:ce:06:f9:9c:a2:88:7e:43:ef:4d:14:
         55:42:88:cc:3a:3f:f3:f7:c1:29:25:cb:63:eb:87:55:3c:79:
         77:fb:fa:76:f2:58:16:4d:11:9f:26:7d:c0:2e:b8:f2:f2:7e:
         f1:42:6b:23:a0:ff:fe:26:71:aa:de:da:2e:08:e0:95:ee:c0:
         3e:94:c1:29:b0:c6:81:6c:d7:76:95:d4:de:7e:42:ca:93:4e:
         56:38:01:24:f2:a7:9b:45:0c:e4:b7:22:a9:96:77:dd:03:a9:
         48:26:21:77:10:72:7c:ea:f9:ec:fe:34:8d:c0:39:21:06:65:
         a1:ce:28:49:ed:81:b3:2e:0d:dd:fe:e5:a0:95:b6:56:3c:ae:
         e7:34:dc:76:d1:2f:e8:73:b7:3e:0d:93:75:a1:fa:6f:c7:97:
         02:be:a6:65:49:d8:b1:bd:88:cd:de:16:11:79:1b:f0:8c:ef:
         07:6c:90:59:a2:81:31:22:44:1c:60:ca:75:9e:0a:63:a2:25:
         61:c9:53:60:ff:b8:19:06:15:57:f6:bb:24:93:47:13:64:47:
         43:9d:dc:4b:11:7c:60:26:8e:a2:a9:f5:c0:6b:73:f5:bf:c7:
         a1:09:d6:14:1b:42:0c:93:50:65:9b:4d:8a:88:9b:8a:eb:fd:
         47:e9:e6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:01:32 2026 by rpki-client