Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa
File:                     323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (raw, json)
Hash identifier:          wD0JopqzbNO0LV3/fAHMD/SLip1rejuAXcmbuFwf6Mg=
Subject key identifier:   51:09:5C:43:8F:FE:D9:41:28:FD:B5:B4:D1:4F:79:CA:1F:5D:4F:DC
Certificate issuer:       /CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1
Certificate serial:       211121EE9E65436CCCC7EE17B378BF1C8A5C831A
Authority key identifier: 7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa
Signing time:             Tue 24 Feb 2026 10:02:36 +0000
ROA not before:           Tue 24 Feb 2026 09:57:36 +0000
ROA not after:            Tue 23 Feb 2027 10:02:36 +0000
asID:                     142386
IP address blocks:        2001:df1:98c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl
                          rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 07:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:11:21:ee:9e:65:43:6c:cc:c7:ee:17:b3:78:bf:1c:8a:5c:83:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1
        Validity
            Not Before: Feb 24 09:57:36 2026 GMT
            Not After : Feb 23 10:02:36 2027 GMT
        Subject: CN=51095C438FFED94128FDB5B4D14F79CA1F5D4FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:dd:43:b6:a4:b6:6b:88:7b:ee:15:6b:3d:
                    a2:cf:f1:b0:83:3b:aa:d1:9c:bf:86:c9:3d:89:cf:
                    54:f0:71:1a:54:16:88:71:1d:0e:41:a0:cd:96:97:
                    60:08:f0:91:ab:a7:3e:8f:8c:dc:fc:5b:d2:97:6d:
                    19:5a:71:3b:0e:ae:6b:eb:dd:d7:47:1e:85:59:be:
                    25:35:e9:b0:4d:fe:3a:22:df:89:5e:2d:d6:3a:fb:
                    37:64:19:04:7b:ea:16:81:b2:36:9d:23:47:f1:0f:
                    99:77:45:4f:6f:52:68:3b:bf:15:e6:9d:32:9b:57:
                    50:ab:41:1c:26:db:01:5f:be:3c:14:b2:13:ce:2c:
                    d3:ff:af:8c:07:89:25:46:9d:5f:d2:80:e4:93:d0:
                    96:da:a8:ec:62:f9:fc:b6:e4:75:a9:02:6e:2b:19:
                    20:2d:56:a5:78:2e:42:13:c0:cc:46:ab:b9:bf:b5:
                    2f:3e:d6:5c:63:ab:12:0f:39:66:c2:11:f2:ce:1d:
                    92:3f:06:27:f4:4c:10:d2:fe:ce:16:6d:dd:dc:73:
                    27:9d:12:d6:ac:7b:c1:1b:7f:e0:f9:6e:fc:74:72:
                    2d:eb:54:7b:f3:a0:c2:ba:3b:a2:31:14:89:6e:5a:
                    06:9d:87:5f:5e:87:50:c7:dc:bf:2b:d9:1b:9a:5c:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:09:5C:43:8F:FE:D9:41:28:FD:B5:B4:D1:4F:79:CA:1F:5D:4F:DC
            X509v3 Authority Key Identifier:
                keyid:7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:98c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:c8:30:52:c4:a2:fa:da:96:cf:33:29:5f:28:74:42:c8:5e:
         a2:07:de:4c:0d:79:32:29:a5:57:ca:d6:2d:3a:2a:05:9c:a5:
         ad:ce:86:1d:60:17:e1:30:96:d0:6a:1a:17:43:91:92:fa:27:
         5e:5e:21:1e:5b:ec:0d:28:43:c2:e5:5f:da:ae:cd:9f:cc:d5:
         79:3d:4e:e4:88:d8:32:ef:4c:ee:8d:58:43:fd:61:1e:d3:11:
         6a:49:91:27:53:53:f9:09:cf:24:1e:6a:a1:14:80:7c:b8:64:
         54:b3:83:12:d3:70:cb:fc:16:88:72:9c:3b:f5:b4:fe:cc:b9:
         8a:f5:f1:80:ee:34:96:dc:47:e7:db:fd:5f:c4:ce:f1:f5:96:
         16:23:cf:ee:b2:77:61:69:cb:65:fe:d3:63:b9:22:18:af:67:
         c8:67:d4:b1:07:57:22:a3:e3:a6:5f:d5:b7:a0:a2:1b:01:13:
         ce:d0:a2:3d:8a:9f:e6:08:a5:de:38:57:f1:79:b7:7e:b0:be:
         c4:25:03:2c:78:0f:8f:c5:ff:8a:72:06:27:63:e4:93:f5:6a:
         eb:b8:36:50:28:ad:1e:0e:8a:c6:c7:8d:63:bc:b5:8e:22:20:
         36:65:ec:36:f5:11:42:6a:18:96:fe:d8:b6:67:b5:a7:ba:08:
         1f:c0:14:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:53:52 2026 by rpki-client