Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa
File:                     323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa (raw, json)
Hash identifier:          6vBqY8AYNH35xXLwcOm0sU3NOzFnX23xmkRxg0L8bmk=
Subject key identifier:   92:F3:C0:E8:20:9A:70:D4:7F:93:1E:21:8C:81:16:CE:12:3B:3D:23
Certificate issuer:       /CN=990382439FFA8C086A4458B338B52CCD0D54CFA8
Certificate serial:       4726F55EDBBD7C00AF28720B4017756DA09F66D3
Authority key identifier: 99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa
Signing time:             Mon 23 Feb 2026 04:22:35 +0000
ROA not before:           Mon 23 Feb 2026 04:17:35 +0000
ROA not after:            Mon 22 Feb 2027 04:22:35 +0000
asID:                     142639
IP address blocks:        2001:df6:a440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.crl
                          rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 05:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:26:f5:5e:db:bd:7c:00:af:28:72:0b:40:17:75:6d:a0:9f:66:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990382439FFA8C086A4458B338B52CCD0D54CFA8
        Validity
            Not Before: Feb 23 04:17:35 2026 GMT
            Not After : Feb 22 04:22:35 2027 GMT
        Subject: CN=92F3C0E8209A70D47F931E218C8116CE123B3D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:34:85:d3:40:61:be:36:55:32:f6:47:2b:
                    61:e8:ce:30:a9:60:5a:a8:a9:4e:4b:4f:d0:a0:41:
                    c6:3f:dc:ed:38:95:25:84:f6:5f:a4:1f:20:9b:cf:
                    67:6e:12:f8:16:28:86:f7:7f:6f:2c:20:9b:58:59:
                    99:1d:4d:41:11:33:09:ea:88:dd:78:7b:95:d7:57:
                    95:e8:52:af:b9:16:fe:34:66:6a:38:23:14:80:b3:
                    a9:3d:05:fe:89:61:6e:18:04:b2:c6:bf:24:8f:8c:
                    d3:76:cc:be:6d:e3:74:b8:34:11:ba:ca:a7:32:6c:
                    76:76:17:15:f1:fd:4d:6b:56:75:a9:93:fc:f3:b5:
                    91:63:3d:a3:8d:75:50:8c:9c:02:ed:f2:6d:71:8e:
                    bf:51:11:f2:57:6f:85:c2:b6:7d:39:e6:03:08:66:
                    82:41:bd:99:9a:08:e7:8c:ae:16:77:3f:f0:7c:88:
                    a6:6b:ce:40:30:8a:b3:bb:d9:df:e6:7d:e2:8f:3d:
                    70:a2:32:4f:db:33:11:d9:62:0d:9f:43:86:b4:16:
                    4e:e8:34:2e:e2:09:a2:b0:5f:a6:dc:21:6c:8d:bc:
                    d8:16:70:da:4d:b5:9c:9e:45:44:ff:de:e7:eb:69:
                    4a:b1:a6:38:d3:6c:e2:7b:c6:47:68:5a:33:4d:be:
                    43:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F3:C0:E8:20:9A:70:D4:7F:93:1E:21:8C:81:16:CE:12:3B:3D:23
            X509v3 Authority Key Identifier:
                keyid:99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:a440::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:c8:cb:70:db:ac:8f:99:f2:e4:0f:d6:20:c2:ce:6b:33:c9:
         84:9e:d0:c1:5f:c3:90:0b:25:17:41:83:12:a5:a4:73:2d:58:
         99:d1:ad:28:91:a4:87:7f:49:c7:09:ff:1a:08:0b:ca:82:78:
         2c:d8:17:56:a6:cd:67:ac:82:e2:d2:bb:1e:f5:b8:b1:96:56:
         e5:c5:83:c0:d2:4b:e6:cd:7d:37:fc:5a:77:2b:65:b5:78:57:
         70:80:cd:c5:6c:df:58:27:b4:83:0e:86:e0:aa:96:35:1d:d4:
         38:d6:e1:8d:9e:f3:86:5c:3c:8a:7a:d2:5c:21:c8:95:4e:6a:
         c7:a4:e5:1d:74:53:a9:6f:e8:6f:63:53:20:88:c6:f3:96:c6:
         ce:5b:05:f6:2e:b8:cb:ac:58:e2:f2:45:02:ed:48:17:ec:d2:
         f2:bd:a2:82:ba:55:6e:fd:93:63:3e:ca:13:81:2a:4a:94:82:
         63:79:ac:6c:cc:68:e4:ec:91:01:25:34:ba:a3:b4:6d:f6:03:
         1e:04:88:46:25:90:98:31:c6:f2:ca:38:20:c1:a2:fd:b5:05:
         5e:b5:28:be:5f:ab:d4:42:a4:07:d0:bc:4b:af:29:fd:34:78:
         fb:32:f9:07:9d:a1:87:9b:c5:95:8f:f9:3a:5d:a9:9e:b9:4f:
         f0:07:0b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:19 2026 by rpki-client