Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa
File:                     323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (raw, json)
Hash identifier:          oMj1Nm7h+Y4mu9LBu3K/xKLS+Wp19Y5meMISqDSZ+JY=
Subject key identifier:   3C:3D:46:8F:A5:F8:76:91:45:37:A1:97:C2:A4:62:B2:77:5F:92:5C
Certificate issuer:       /CN=01572889DF1075E65143A4EF4BC1D8C749046C13
Certificate serial:       0674DE930D97876422FE8022F7F1B1E007DC1063
Authority key identifier: 01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa
Signing time:             Sun 03 May 2026 03:11:47 +0000
ROA not before:           Sun 03 May 2026 03:06:47 +0000
ROA not after:            Sun 02 May 2027 03:11:47 +0000
asID:                     139457
IP address blocks:        2001:df2:4b80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl
                          rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:74:de:93:0d:97:87:64:22:fe:80:22:f7:f1:b1:e0:07:dc:10:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01572889DF1075E65143A4EF4BC1D8C749046C13
        Validity
            Not Before: May  3 03:06:47 2026 GMT
            Not After : May  2 03:11:47 2027 GMT
        Subject: CN=3C3D468FA5F876914537A197C2A462B2775F925C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:59:67:dd:4e:31:c4:48:dc:ad:89:85:94:
                    8b:3c:40:9b:ba:6e:15:53:5d:86:03:6e:78:3b:e1:
                    57:41:11:cc:d0:37:06:38:8f:ed:31:4c:1f:b6:f7:
                    41:0e:25:dd:43:94:8f:de:f9:a8:e3:8c:19:53:05:
                    5a:cd:e4:5f:36:8d:79:b9:f5:71:be:87:09:0a:24:
                    87:a4:c7:47:90:3e:fa:c3:80:12:0e:3f:2d:4e:61:
                    cc:62:e6:d3:1a:e0:e9:df:aa:38:ce:b5:95:87:5f:
                    26:5d:97:ce:d4:1f:31:9a:9e:17:21:94:df:ae:5e:
                    90:de:46:d1:99:c2:9d:30:55:5b:57:43:a3:44:84:
                    f2:92:4c:a5:83:f0:a6:8d:4f:83:8a:0f:da:22:62:
                    bc:0c:e6:c0:02:52:22:78:5f:f6:a2:22:dd:f2:31:
                    b0:f7:68:02:78:3d:24:dd:8b:9d:52:2f:55:2e:42:
                    7c:d5:d3:9e:95:90:68:77:20:44:19:1c:50:50:cd:
                    84:fa:7e:c3:ae:fc:39:cc:78:d9:84:3e:cc:51:cf:
                    8b:a8:d8:0b:c4:f3:38:ee:07:38:32:dc:cb:90:12:
                    a7:aa:96:a7:46:a1:32:70:83:70:34:d1:2e:31:b7:
                    d7:21:d6:11:f2:f9:c2:9e:44:ef:4f:55:67:fb:ae:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3D:46:8F:A5:F8:76:91:45:37:A1:97:C2:A4:62:B2:77:5F:92:5C
            X509v3 Authority Key Identifier:
                keyid:01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:4b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:9b:60:2f:1c:21:5b:72:34:0c:48:30:20:3f:59:39:34:
         bf:90:f4:4f:cf:6b:2f:aa:8d:21:d2:a6:c1:ec:a4:2a:d3:0a:
         17:a7:60:3b:90:2b:a9:a4:cb:a8:a9:c6:fb:07:8b:26:b7:d7:
         04:3d:cb:38:b4:a4:e3:f2:21:9c:b4:6d:2f:b2:bb:91:b4:bb:
         6c:e1:0b:d6:a3:af:43:da:da:07:a8:ae:fc:20:a7:20:a9:68:
         fa:b7:90:ce:69:c6:19:ef:e6:1a:23:3d:49:97:20:a6:30:62:
         eb:f1:b7:32:3f:4b:b3:00:3a:d7:3e:bc:75:e6:19:af:fe:fa:
         4d:87:cd:92:bd:79:b5:e1:71:22:e6:3d:f3:a8:12:f6:aa:23:
         a9:6f:96:0d:eb:d7:d2:55:3b:97:37:05:ed:77:ab:81:57:0b:
         51:09:7e:61:28:90:8b:1f:31:fa:9f:83:96:96:86:70:b3:52:
         ec:49:69:de:44:33:0a:dc:e5:7c:6a:0a:02:3c:a0:dc:1d:b7:
         26:35:48:dd:e1:fc:3c:52:a8:a1:08:b4:6e:c1:9d:8c:60:1d:
         57:82:c5:28:78:ae:62:f0:c7:47:80:58:a2:86:71:14:8c:8e:
         2b:c6:b2:1b:8e:35:02:56:e8:3f:76:01:9e:bc:f4:59:f1:d2:
         25:89:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:20 2026 by rpki-client