Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34382d3438203d3e203233363739.roa
File:                     323430313a323930303a3130363a3a2f34382d3438203d3e203233363739.roa (raw, json)
Hash identifier:          dWsl0JiLG4GfBA/avasRR8LKwSzdwLCYDE9Sg2x+5ws=
Subject key identifier:   26:F1:35:74:FF:C8:FC:0C:00:43:4D:BD:E9:DE:89:AA:F9:21:07:6B
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       582B930D0200B1F36C5B2B204B2DF6DFCB274E03
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34382d3438203d3e203233363739.roa
Signing time:             Fri 27 Feb 2026 12:00:02 +0000
ROA not before:           Fri 27 Feb 2026 11:55:02 +0000
ROA not after:            Fri 26 Feb 2027 12:00:02 +0000
asID:                     23679
IP address blocks:        2401:2900:106::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 20:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2b:93:0d:02:00:b1:f3:6c:5b:2b:20:4b:2d:f6:df:cb:27:4e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Feb 27 11:55:02 2026 GMT
            Not After : Feb 26 12:00:02 2027 GMT
        Subject: CN=26F13574FFC8FC0C00434DBDE9DE89AAF921076B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:18:8a:ae:f1:29:b2:c3:e6:66:06:6f:87:
                    25:15:64:d0:e8:37:77:4c:f1:80:db:64:ef:3e:d4:
                    de:e1:f4:dd:ae:c5:c4:a5:0f:cf:22:0c:ed:83:a0:
                    36:99:5f:9d:7e:b6:71:3d:e5:8a:49:1d:3c:dd:af:
                    a2:87:af:7f:a3:eb:ae:d9:b8:ff:0b:04:7d:f5:bd:
                    f8:7d:f3:f2:7c:bc:12:e1:67:9f:79:28:3f:9f:39:
                    2a:1b:b5:83:a5:86:82:b8:6a:7c:9e:fc:6d:66:d2:
                    7b:48:47:80:07:2e:66:4e:17:35:ad:30:89:28:8a:
                    a9:e9:f6:5f:e9:c8:8a:66:9a:f0:2d:06:f0:26:fb:
                    21:89:03:42:9f:ab:2f:0f:fb:34:11:8a:9c:c8:40:
                    32:b2:64:d4:68:90:86:66:03:2c:c8:12:85:59:18:
                    16:77:1d:86:c8:b9:7b:c1:56:20:86:e7:9d:d1:32:
                    63:af:02:a8:25:05:fe:14:f4:a4:02:c3:14:bd:bf:
                    35:52:4d:aa:1f:7d:64:f2:d6:93:a6:27:9b:54:72:
                    5e:37:d9:2d:75:c5:36:48:3e:b2:5e:3e:f2:09:f2:
                    96:07:c4:12:d5:67:bb:78:58:9b:c9:bf:97:08:97:
                    8b:ab:89:ac:fe:6b:ae:a3:be:73:3c:f1:6b:61:db:
                    d7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F1:35:74:FF:C8:FC:0C:00:43:4D:BD:E9:DE:89:AA:F9:21:07:6B
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34382d3438203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2900:106::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:64:9c:16:ab:39:4d:8a:2c:e0:7f:e9:a7:92:06:53:dd:35:
         ff:0d:a2:0b:60:41:d9:b9:d7:b6:46:f8:7b:b0:38:b5:fd:7b:
         66:f6:8a:45:6e:d8:08:e9:b7:fd:8f:6e:19:0e:4e:25:48:da:
         4b:ae:74:95:35:b5:63:1e:33:f1:49:e4:38:ad:af:eb:2e:ef:
         5b:49:6e:45:c6:e5:e6:da:c6:3b:b0:09:3a:df:71:98:87:28:
         00:d5:42:bd:cc:39:36:f4:8a:3e:05:68:d5:72:d8:aa:97:41:
         4e:6d:cc:87:59:5d:20:1a:9e:e8:1c:ca:46:09:e9:a0:9e:ea:
         1f:49:51:1c:58:82:d4:b3:49:fb:95:7a:9e:a6:e1:ac:60:bc:
         a4:ba:90:54:5d:72:3d:b1:20:98:b2:ad:e0:e3:9d:f3:ef:b6:
         37:90:65:1e:43:4a:a7:0c:1f:3e:e6:e6:f5:19:32:35:8f:33:
         9a:c7:57:f3:4e:34:24:72:3a:7c:65:ab:27:9f:58:49:06:9c:
         ea:dc:f3:74:6f:78:fe:27:0f:3d:b1:b8:fc:65:c6:54:6b:8b:
         8a:97:70:79:7d:32:28:d7:1c:0f:66:0f:46:4d:9a:20:39:94:
         a8:c7:6c:14:5e:f4:25:00:e4:45:53:0f:34:d8:82:45:7e:c2:
         03:b1:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:57:46 2026 by rpki-client