Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa
File:                     323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa (raw, json)
Hash identifier:          7Q8defqC6lAAWUb6PKdQi9tsdNCBLmxvHmRQL+VpZWA=
Subject key identifier:   75:B2:87:86:DD:58:44:84:21:1B:F4:09:4F:D8:2A:EF:02:54:BE:2F
Certificate issuer:       /CN=5C51364B5C5C5CCC9BF024780ED2318ACE469B78
Certificate serial:       3BED825F1DCF89152E40A54C9D889DF0D4589D39
Authority key identifier: 5C:51:36:4B:5C:5C:5C:CC:9B:F0:24:78:0E:D2:31:8A:CE:46:9B:78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa
Signing time:             Sun 03 May 2026 03:18:38 +0000
ROA not before:           Sun 03 May 2026 03:13:38 +0000
ROA not after:            Sun 02 May 2027 03:18:38 +0000
asID:                     58404
IP address blocks:        2001:df6:ac00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl
                          rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ed:82:5f:1d:cf:89:15:2e:40:a5:4c:9d:88:9d:f0:d4:58:9d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C51364B5C5C5CCC9BF024780ED2318ACE469B78
        Validity
            Not Before: May  3 03:13:38 2026 GMT
            Not After : May  2 03:18:38 2027 GMT
        Subject: CN=75B28786DD584484211BF4094FD82AEF0254BE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:46:e7:f2:39:50:8d:07:1d:a4:bb:b6:2a:
                    70:12:55:b6:97:7d:08:f6:50:2d:9c:c7:3f:70:5c:
                    84:e1:0d:90:8e:2c:6c:16:3e:05:da:8c:8d:45:57:
                    b2:7a:3c:e0:7c:34:e7:d8:ef:eb:e7:cc:c4:90:7b:
                    12:be:96:35:2e:db:f6:47:9f:af:1d:44:d5:f7:7a:
                    ba:22:a6:c5:fa:0e:18:0d:76:8b:86:95:64:00:87:
                    e6:11:14:a7:b8:fb:76:89:a2:ed:71:02:8f:c3:20:
                    c3:e9:21:8e:50:db:27:d3:b8:d2:db:5a:21:40:f7:
                    32:15:cf:a3:69:85:c9:bd:9e:ac:ce:0e:07:bf:f0:
                    84:a8:09:d3:31:dc:f1:d3:8b:f3:71:f9:28:ea:59:
                    c9:c3:94:b9:01:b8:54:96:f2:b2:85:f8:80:6b:37:
                    69:31:18:e3:a6:46:ad:dd:55:aa:d4:4a:e9:16:f4:
                    fc:c2:bf:bf:6c:53:93:83:20:c5:52:9d:34:af:66:
                    fd:79:21:6f:32:0f:47:22:06:54:a2:3b:1a:0d:76:
                    21:0f:9f:32:e3:ee:26:54:70:8f:c7:14:56:d6:22:
                    cb:3d:c7:02:42:e0:d3:7d:98:91:d5:c3:80:9e:e4:
                    bb:48:11:9b:29:4a:fa:54:84:35:53:d2:39:f5:24:
                    c0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B2:87:86:DD:58:44:84:21:1B:F4:09:4F:D8:2A:EF:02:54:BE:2F
            X509v3 Authority Key Identifier:
                keyid:5C:51:36:4B:5C:5C:5C:CC:9B:F0:24:78:0E:D2:31:8A:CE:46:9B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:ac00::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:63:07:2f:d0:65:ce:98:77:ba:f3:a6:8f:12:03:e8:a5:a7:
         fc:1d:ba:fc:3e:8a:b3:5a:d0:a8:40:06:d5:d9:e7:b1:29:64:
         f9:1a:5f:41:5c:01:f5:28:75:69:23:20:58:5c:7f:59:50:f4:
         d7:07:7e:77:c2:a0:bf:e7:b5:73:e9:45:1d:60:7d:13:16:10:
         f8:5e:a8:ce:ab:54:c9:34:07:cd:00:2e:77:16:03:2b:c9:ed:
         70:8d:a5:47:b1:9b:82:83:b6:e3:91:d1:7b:7b:f3:7b:ac:f2:
         a6:7a:b8:a9:68:f6:40:82:de:85:19:75:3a:6b:df:df:32:80:
         a7:df:4c:7b:cd:33:a7:f6:55:d7:a1:8c:ba:cf:2c:6c:32:21:
         7c:f1:87:e9:ed:fc:03:ac:56:59:07:07:d8:a3:b4:90:4c:d5:
         c6:f0:6d:d2:c7:f4:04:6f:11:39:c7:67:16:e0:40:d0:fd:90:
         77:39:1b:7e:ff:59:c8:ff:da:f6:0a:cc:7d:05:c3:61:29:6c:
         34:cf:98:63:d6:1c:6b:20:e9:21:ee:21:57:7c:37:69:75:3d:
         b2:e3:4b:38:5f:9a:68:e4:6b:f8:6c:aa:78:7e:2a:7b:09:80:
         40:93:42:73:09:0b:ef:6b:f6:aa:d9:13:e6:bb:c7:35:ae:f4:
         c6:07:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:34 2026 by rpki-client