Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa
File:                     323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa (raw, json)
Hash identifier:          KkIhRaLs3sWTl521rsd4vYL4F4GrP12Jx5XSNhBN/i4=
Subject key identifier:   8A:9F:85:9B:F7:63:0F:0E:BC:81:36:3E:6C:47:41:B1:4D:B4:67:5A
Certificate issuer:       /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
Certificate serial:       58921A0C64F6F115CCF36E5AD76F0F797964932F
Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa
Signing time:             Fri 20 Feb 2026 04:09:19 +0000
ROA not before:           Fri 20 Feb 2026 04:04:19 +0000
ROA not after:            Fri 19 Feb 2027 04:09:19 +0000
asID:                     131112
IP address blocks:        2001:df0:7440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl
                          rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 12:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:92:1a:0c:64:f6:f1:15:cc:f3:6e:5a:d7:6f:0f:79:79:64:93:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
        Validity
            Not Before: Feb 20 04:04:19 2026 GMT
            Not After : Feb 19 04:09:19 2027 GMT
        Subject: CN=8A9F859BF7630F0EBC81363E6C4741B14DB4675A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:48:4a:0d:5f:7c:14:da:10:c1:2c:f3:31:
                    22:9c:aa:2c:e7:9a:6b:b7:9d:f7:b1:91:48:71:07:
                    c3:fe:80:49:87:b5:bd:d1:60:4e:ef:7f:91:fa:d3:
                    4d:43:f0:ad:f4:e9:85:d9:c1:2d:e1:a0:80:b0:0b:
                    19:66:89:c3:bd:7a:c6:5a:f0:2a:15:16:15:65:e3:
                    d9:ef:a9:ad:76:80:dd:c0:ef:d1:03:17:ee:05:c2:
                    58:ff:a7:e6:bd:c7:8a:77:4a:ce:1c:bc:87:9a:b0:
                    d9:8d:a5:e1:02:8e:5f:bb:ca:4b:49:a6:fa:42:10:
                    7e:d0:09:b5:8f:11:4f:d6:5d:ff:1e:59:03:28:10:
                    91:41:20:c4:eb:45:11:fd:d0:7e:e0:ae:8b:1b:76:
                    17:f4:33:51:c0:cc:1d:fe:2c:4e:6a:52:bf:25:91:
                    34:ed:0b:fd:fc:97:2f:67:75:56:3c:29:2a:7b:74:
                    38:59:e9:6c:00:7b:52:3e:2e:bf:68:96:04:39:eb:
                    10:e0:11:29:68:38:e0:8b:e7:d5:fa:81:a4:89:6f:
                    2f:85:4e:f1:0c:0f:28:cf:11:2a:a4:51:16:a3:c1:
                    39:19:45:89:6e:ed:3a:09:65:1d:ef:e7:02:13:9f:
                    e3:84:5d:31:f4:13:4b:2f:5a:3b:89:4b:2c:3d:af:
                    8a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9F:85:9B:F7:63:0F:0E:BC:81:36:3E:6C:47:41:B1:4D:B4:67:5A
            X509v3 Authority Key Identifier:
                keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:7440::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:e2:1f:91:7a:8e:81:58:ae:f0:7c:51:fe:07:c6:cb:2f:a4:
         e4:7a:a1:6e:41:9d:ac:52:1e:26:9d:77:7d:7d:cb:7a:7b:55:
         6b:a7:99:4e:1f:7f:c1:dc:37:43:37:83:29:e4:90:2d:74:e3:
         29:cc:37:e8:9f:0c:d1:45:08:9b:8b:52:fa:5d:53:c0:8a:1f:
         72:3d:da:27:e3:d9:6f:54:f9:dd:5a:65:f3:78:68:f1:65:77:
         12:94:78:6f:71:e9:34:7c:aa:be:c2:24:6b:42:31:52:82:7d:
         44:44:c6:34:1e:9e:1f:b7:48:0f:5c:82:ae:48:3f:ff:16:09:
         14:2d:fb:4d:a9:a6:78:57:f0:83:26:a3:69:21:32:60:e1:2c:
         41:86:40:d4:34:c7:c8:fa:77:db:55:97:e0:06:f9:fa:20:cd:
         8c:d0:6e:9c:c9:5e:f4:a6:e0:4e:41:e7:b2:36:c0:ae:9d:67:
         3f:0c:b9:f4:24:e6:d4:59:60:94:0c:da:69:e4:da:8e:32:b9:
         57:1f:25:a7:da:a6:b8:72:5c:6f:ba:3a:05:2c:8b:9a:8a:16:
         10:93:b7:4d:7b:14:15:82:61:f9:3d:dc:0d:5c:1c:cc:90:4d:
         cc:7b:69:6b:c7:e3:dd:85:c4:c8:b2:94:8a:73:32:47:d6:f9:
         b7:cc:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:02 2026 by rpki-client