Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa
File:                     323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (raw, json)
Hash identifier:          xlxWynyg4hfKziS2fdPWIlDySNvIWbbHvXpQyS625Nc=
Subject key identifier:   7F:2A:BC:84:26:22:87:29:C1:4E:34:7B:E4:20:E9:A4:F9:B0:92:62
Certificate issuer:       /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F
Certificate serial:       34AAADF21F078DFF3038C0E0A39612201A1080AA
Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa
Signing time:             Fri 20 Feb 2026 08:00:00 +0000
ROA not before:           Fri 20 Feb 2026 07:55:00 +0000
ROA not after:            Fri 19 Feb 2027 08:00:00 +0000
asID:                     150982
IP address blocks:        2001:df2:5d40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl
                          rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:aa:ad:f2:1f:07:8d:ff:30:38:c0:e0:a3:96:12:20:1a:10:80:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F
        Validity
            Not Before: Feb 20 07:55:00 2026 GMT
            Not After : Feb 19 08:00:00 2027 GMT
        Subject: CN=7F2ABC8426228729C14E347BE420E9A4F9B09262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:af:cd:2a:57:29:15:0d:9c:1c:03:7c:6c:
                    80:8b:a1:9a:15:c8:b1:60:6d:e6:d7:57:a5:b2:18:
                    d3:7c:3c:51:d0:48:e5:94:f1:7d:d0:26:8f:2b:bd:
                    eb:72:ad:e7:74:47:ae:39:c8:8b:21:4d:df:9f:b8:
                    6e:cb:03:3c:b6:45:8e:89:b7:58:99:bf:37:ab:d3:
                    90:c7:ef:7a:56:d6:f7:8c:55:68:17:41:6b:72:eb:
                    9a:f7:10:9a:60:a5:72:63:f3:3c:3b:e9:cb:e9:80:
                    de:8f:eb:4f:b7:77:48:8a:42:e6:01:52:01:6c:2c:
                    d6:32:3e:d2:ae:90:c0:a4:32:56:df:93:d5:97:9f:
                    39:3a:2e:c5:95:a2:be:a8:2b:27:46:2a:72:76:a0:
                    ea:d7:69:6b:71:21:47:86:a0:c3:cb:51:54:87:55:
                    13:fa:1c:78:ac:35:b3:66:0a:3e:f9:68:21:81:9a:
                    fc:a7:2b:c5:97:3c:26:62:52:b7:2c:8a:c7:f7:39:
                    c1:f8:b0:a6:13:68:f3:8c:47:ec:3f:f3:8d:6c:a8:
                    6c:63:e6:16:05:e3:29:05:00:66:fa:9b:d6:ae:18:
                    93:bb:6a:a8:76:3c:cd:7a:75:a9:e1:09:08:77:6a:
                    c3:29:cb:39:87:a6:95:6e:46:59:4c:21:ee:be:4a:
                    eb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2A:BC:84:26:22:87:29:C1:4E:34:7B:E4:20:E9:A4:F9:B0:92:62
            X509v3 Authority Key Identifier:
                keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:5d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:e1:ba:69:01:ce:4b:0b:ea:63:ac:42:f9:52:bd:72:8a:d9:
         a1:61:d7:5d:e7:f9:24:65:fe:0b:4c:56:fd:3e:b9:67:c5:0e:
         b0:d1:0e:aa:51:45:93:31:3b:4c:b9:08:93:aa:4e:cb:1f:e9:
         bd:26:35:ad:4b:c3:9f:6f:f9:0c:f8:f3:53:15:21:73:33:6f:
         67:6e:f8:b9:1d:68:c6:93:b0:f1:22:97:76:48:74:8a:f0:1e:
         9c:39:1d:05:f4:eb:e8:be:55:9d:8d:78:6f:45:98:e3:9a:4a:
         5e:ca:7c:80:f4:ca:6f:40:95:eb:de:5a:0d:16:d6:96:c6:d3:
         5d:b7:f3:71:a1:1a:af:5b:44:18:27:7c:63:b8:7b:2d:54:2f:
         8f:da:7f:da:80:92:53:f9:2b:89:b9:5b:86:ba:9d:b1:75:82:
         d6:c5:d4:1e:68:2b:54:e5:52:a1:5a:10:86:ae:44:68:4f:53:
         05:96:d1:90:3d:4c:4a:e6:d9:ed:32:29:7f:8d:47:53:60:aa:
         13:04:2c:2c:26:a4:7e:40:cc:44:58:e2:ef:8a:46:8d:4d:84:
         34:58:f2:73:0e:a8:54:d8:ef:92:a6:3e:1c:e0:09:33:70:8b:
         c9:02:26:ea:73:50:a0:54:70:88:6a:dc:27:ef:3b:57:af:c8:
         84:12:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:16:27 2026 by rpki-client