Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/323430363a363263303a3a2f33322d3332203d3e20313431303734.roa
File:                     323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (raw, json)
Hash identifier:          5WZW84f5HKjOAxkfssvW8CwqxpjYyS1AvzYSlCFenJ8=
Subject key identifier:   B0:80:28:13:1B:6C:AC:28:DA:4C:42:3C:CA:FC:48:17:D3:58:9D:95
Certificate issuer:       /CN=DE4325727D17555F6DABCC72788E361C741D47CF
Certificate serial:       4FF968E856207F63212F3FE41DC1258F1C6CA925
Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/323430363a363263303a3a2f33322d3332203d3e20313431303734.roa
Signing time:             Thu 05 Feb 2026 07:01:12 +0000
ROA not before:           Thu 05 Feb 2026 06:56:12 +0000
ROA not after:            Thu 04 Feb 2027 07:01:12 +0000
asID:                     141074
IP address blocks:        2406:62c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl
                          rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f9:68:e8:56:20:7f:63:21:2f:3f:e4:1d:c1:25:8f:1c:6c:a9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF
        Validity
            Not Before: Feb  5 06:56:12 2026 GMT
            Not After : Feb  4 07:01:12 2027 GMT
        Subject: CN=B08028131B6CAC28DA4C423CCAFC4817D3589D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c4:71:48:fc:ec:37:6e:6b:c9:1a:6e:82:97:
                    66:37:27:4d:ae:b0:23:a3:ff:2f:b1:ea:4f:d5:2e:
                    c6:d6:18:bd:1b:df:72:75:19:5a:bd:a3:54:56:e2:
                    36:a0:2b:71:a2:38:6e:e7:21:a8:35:79:25:d9:63:
                    ae:1b:f9:85:3e:c4:0f:d5:d7:f3:96:56:79:e3:de:
                    e3:fd:6f:76:04:9d:de:85:34:bf:9b:0b:85:3d:26:
                    e3:94:97:6e:ee:ce:36:13:1b:70:db:d7:33:02:c9:
                    c6:4f:c5:ad:ee:cd:ab:ca:8f:85:7d:a9:09:10:35:
                    d4:69:62:de:70:21:c3:d1:91:77:a5:17:a5:90:d4:
                    ec:d6:4f:2d:e6:2a:14:80:9a:bb:bd:2b:38:5f:ab:
                    3a:c5:71:4e:01:b1:d2:b1:b4:87:3d:24:97:0d:a2:
                    fd:f7:b2:32:57:07:c2:bd:40:25:aa:e4:b4:60:57:
                    14:5a:2d:ab:be:66:7b:f9:67:d0:38:61:a8:c4:e0:
                    ce:a9:1c:64:9a:e1:b0:61:14:c3:8f:af:9a:03:14:
                    58:fe:f0:b1:35:5d:84:85:0d:02:df:24:24:cf:a4:
                    64:d6:22:85:e4:af:4f:72:b3:67:64:54:7b:c4:e0:
                    57:71:da:ae:e5:f6:f5:e5:02:3d:4b:2f:29:49:ac:
                    50:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:80:28:13:1B:6C:AC:28:DA:4C:42:3C:CA:FC:48:17:D3:58:9D:95
            X509v3 Authority Key Identifier:
                keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/323430363a363263303a3a2f33322d3332203d3e20313431303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:62c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:33:60:c8:93:26:51:a5:f8:e3:33:2b:ac:aa:fe:3a:19:
         87:bd:47:61:30:99:34:30:58:5c:7d:f2:50:9c:30:b8:9a:a3:
         7e:9b:0e:77:bf:8f:ee:06:22:8d:cb:2f:c5:28:1b:5d:12:54:
         a1:22:38:fe:fb:93:f9:b8:46:bc:7a:0b:c0:5b:71:67:48:5f:
         b5:28:89:19:d4:92:73:85:3c:e8:54:3d:b5:be:02:ae:f7:25:
         a6:57:70:3c:20:11:99:7a:25:51:3d:12:57:54:e8:74:c0:20:
         2b:a6:b6:4f:7c:31:cd:a7:8b:03:65:cb:de:45:3f:a7:e4:7b:
         aa:34:47:05:d1:e2:53:b1:eb:8c:c0:0f:02:a8:6a:3f:ea:6c:
         40:de:66:42:77:4e:76:56:a7:6b:96:e8:3d:89:d2:b2:55:67:
         0b:fc:20:63:9d:74:20:62:55:1c:41:be:3e:15:4b:b0:1b:7a:
         d6:77:96:b5:83:c7:e7:43:bb:83:b4:5f:99:16:d3:b9:39:be:
         d3:8a:f9:13:99:9f:f1:c4:28:88:c6:38:2e:3f:7b:6c:43:44:
         44:e8:8a:a1:7d:ab:62:72:1f:9c:e3:99:a1:e9:d5:6c:26:5d:
         98:2a:d6:7c:e7:ec:d0:4e:3e:6c:52:61:25:2a:53:03:7a:e9:
         01:de:d1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:31:21 2026 by rpki-client