Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa
File:                     323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (raw, json)
Hash identifier:          hHvYrx/Q2c2wL+t/Mvndx8RZ1B96+Yi4bVgwQw+Eax8=
Subject key identifier:   3C:80:80:29:1A:A3:84:F3:0E:EE:6E:4A:C9:C7:56:2D:2D:40:0D:B5
Certificate issuer:       /CN=657097DED993749F454B2CB2980019AC9335E3AD
Certificate serial:       51789FECEA1608980CF923EC1D68E7F66CD87981
Authority key identifier: 65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa
Signing time:             Sun 03 May 2026 03:16:02 +0000
ROA not before:           Sun 03 May 2026 03:11:02 +0000
ROA not after:            Sun 02 May 2027 03:16:02 +0000
asID:                     64302
IP address blocks:        2001:df6:5a00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl
                          rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:78:9f:ec:ea:16:08:98:0c:f9:23:ec:1d:68:e7:f6:6c:d8:79:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657097DED993749F454B2CB2980019AC9335E3AD
        Validity
            Not Before: May  3 03:11:02 2026 GMT
            Not After : May  2 03:16:02 2027 GMT
        Subject: CN=3C8080291AA384F30EEE6E4AC9C7562D2D400DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:46:6f:65:5f:a9:26:e4:c3:32:11:c9:7c:
                    8b:00:56:a0:b0:ec:91:d7:25:2d:c7:f5:d6:1c:b3:
                    4d:1d:9f:c9:be:eb:02:3f:01:84:41:10:85:83:c7:
                    b9:2e:26:92:6e:0e:1b:d2:da:de:54:15:d7:2b:6f:
                    82:a4:34:e3:1f:fa:2f:df:24:07:fa:e8:c4:df:34:
                    ab:8f:d3:14:ac:c3:58:70:2e:3e:3c:a3:5a:d1:97:
                    fb:61:40:b5:de:31:2e:4e:7f:d5:bb:c3:f5:7c:38:
                    2a:fe:30:50:ab:fb:af:80:83:47:94:0d:c6:90:13:
                    49:23:d5:55:80:a0:b7:b1:47:7f:81:90:dc:48:89:
                    72:f1:a7:82:73:43:51:b7:4b:9e:08:12:d7:5d:2e:
                    d8:9c:98:86:c4:0f:af:fb:d8:bd:9a:46:49:43:8c:
                    84:65:0b:05:d3:ce:fa:2f:61:1e:7d:a4:e4:ca:e0:
                    ff:c7:ac:11:f3:5c:51:ea:ce:c3:68:8f:bf:8c:d3:
                    98:ae:76:f6:50:c5:44:6c:1a:5f:98:8a:74:6f:f9:
                    e2:5e:e5:2f:74:a5:f8:1b:fe:66:a8:11:30:a5:cb:
                    f8:2f:1f:a7:b8:5b:fc:70:68:c4:c7:d8:0a:55:fd:
                    3f:9a:1e:52:8a:a1:57:51:47:ba:f2:e6:64:91:94:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:80:80:29:1A:A3:84:F3:0E:EE:6E:4A:C9:C7:56:2D:2D:40:0D:B5
            X509v3 Authority Key Identifier:
                keyid:65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:e9:10:81:0f:40:30:b9:4a:74:63:a6:67:e9:95:a6:3a:17:
         f5:8b:9a:90:29:bb:07:30:0e:d8:db:6b:e4:99:86:85:70:71:
         5e:ac:63:8a:da:33:31:da:3e:9a:5d:b8:1e:63:2f:98:6a:fe:
         6f:ab:aa:fc:97:e2:09:61:46:c8:97:e1:48:36:ec:87:94:64:
         af:f1:ce:c0:b4:e8:96:f7:a5:26:0a:cd:44:19:39:0b:8e:76:
         75:8c:b5:10:a2:97:4f:c0:ec:5d:14:e4:78:9b:c5:d9:45:45:
         80:84:f6:6e:56:32:e0:cf:6d:df:46:31:95:66:84:5f:ff:eb:
         17:95:16:d1:ed:38:8f:f6:51:5b:6a:8d:a6:22:a4:4f:2f:62:
         a7:41:26:7d:83:cf:05:1e:dc:90:00:90:34:c9:ba:7b:3d:1e:
         35:9b:5a:b3:f4:33:d1:73:b2:97:b5:dd:e8:7b:97:f5:8f:44:
         cc:c0:3d:3d:f3:d6:62:eb:ae:ba:d8:8b:0a:41:d8:3e:b7:2c:
         72:5d:aa:62:1f:4a:3c:5b:68:39:f5:de:94:3b:a8:73:27:5f:
         87:50:07:69:9a:37:71:76:24:0d:fc:6c:ae:3b:08:5d:72:46:
         82:d7:85:49:29:1f:f2:ba:a2:3e:a0:a7:18:1f:cf:83:59:38:
         eb:7e:11:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:30:53 2026 by rpki-client