Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
File:                     323430323a343834303a3a2f33322d3332203d3e20313337333239.roa (raw, json)
Hash identifier:          zufByR9+Lmly1YSvgIZUa3PW/RoGXsGP+KhBtPvRIbc=
Subject key identifier:   D6:D3:FA:37:96:9B:35:1E:E6:3E:A1:E6:62:C5:30:F7:0B:D9:2F:5F
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       3643895FDEB9D3B6D0EBEB656CFD68F41BABB221
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
Signing time:             Tue 10 Feb 2026 16:00:02 +0000
ROA not before:           Tue 10 Feb 2026 15:55:02 +0000
ROA not after:            Tue 09 Feb 2027 16:00:02 +0000
asID:                     137329
IP address blocks:        2402:4840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:43:89:5f:de:b9:d3:b6:d0:eb:eb:65:6c:fd:68:f4:1b:ab:b2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: Feb 10 15:55:02 2026 GMT
            Not After : Feb  9 16:00:02 2027 GMT
        Subject: CN=D6D3FA37969B351EE63EA1E662C530F70BD92F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:c8:c6:9c:87:0f:be:94:b8:12:da:d8:3b:
                    4c:84:46:37:91:89:43:a2:4a:35:a6:ab:03:44:69:
                    51:50:29:8d:27:be:45:b3:34:4f:29:b6:48:87:a3:
                    ea:a8:06:e0:ec:f9:9b:cc:c0:be:8b:a4:53:8a:a2:
                    8c:16:ca:e5:62:34:d6:c3:99:cc:62:97:ab:30:f1:
                    40:0e:05:95:b1:f4:34:5b:ac:73:cd:01:f0:80:bc:
                    a9:80:0b:43:67:aa:d1:df:65:56:a1:a0:c8:5d:e1:
                    03:ec:4d:b1:c7:30:b5:d1:cd:c1:21:ba:2f:aa:1e:
                    2e:9b:3f:35:f6:25:30:0c:f8:7c:d4:d8:b8:05:e7:
                    ed:02:b5:9b:8b:c4:e1:63:1b:a5:c6:fa:d0:02:db:
                    28:31:c9:c1:37:96:49:cf:30:3d:12:1e:bf:d8:72:
                    16:b8:ff:16:ec:08:6d:9b:11:5a:ec:8c:eb:a9:f5:
                    81:d8:2e:a3:bd:04:2a:ea:0e:45:fe:4e:74:1b:be:
                    49:71:7d:c8:0f:eb:7b:6c:11:3d:08:bc:83:0e:fa:
                    66:d0:3f:45:83:22:5a:9b:fc:53:f3:00:f1:5d:b0:
                    a2:d3:f7:7e:a3:98:91:f0:d9:68:78:58:d8:d0:62:
                    aa:8b:a5:04:48:a6:26:5f:a0:1b:0c:8c:8b:d9:d4:
                    a2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D3:FA:37:96:9B:35:1E:E6:3E:A1:E6:62:C5:30:F7:0B:D9:2F:5F
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4840::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:12:8e:54:ef:c4:31:17:59:84:38:f1:3b:dc:4c:62:cf:3e:
         5f:d0:d9:82:d3:37:06:ba:8f:62:ab:ce:12:98:09:4d:0b:60:
         94:08:cb:3e:1f:33:3b:27:73:9a:da:70:7e:c0:7d:bf:d7:a4:
         05:13:a9:c6:e7:32:22:20:22:39:58:ed:ec:f1:e0:b5:93:bc:
         1d:b8:71:25:71:37:4f:ea:3b:cc:47:56:3a:5c:c2:8f:cf:ba:
         0a:d4:bf:e8:fa:57:0d:cc:21:f9:b4:17:27:0c:ad:e1:81:8f:
         8b:de:22:e6:c0:1d:07:5d:5c:47:38:98:fb:b9:c3:95:c9:46:
         fa:de:20:62:a1:19:35:a6:c1:f1:f4:2c:12:d1:b5:32:57:3d:
         b6:c3:2b:a6:a5:f9:f1:d5:62:f2:82:68:58:8c:fe:a1:45:c8:
         cf:9f:ca:dd:96:78:42:1d:be:a7:65:39:5a:e1:54:27:9c:ea:
         2a:97:73:c1:5a:f1:35:cf:c6:e1:77:0a:fe:c4:ce:38:a2:05:
         bb:f1:e1:d3:2b:88:4c:0d:c2:a9:3e:f9:46:74:8f:f0:c1:cf:
         a2:a3:5b:aa:04:19:b4:02:24:09:32:54:8c:91:33:b1:41:33:
         30:e0:a9:62:08:27:76:01:42:57:4d:b5:82:23:1b:fe:91:5f:
         b2:30:28:b7
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUNkOJX96507bQ6+tlbP1o9BursiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRB
REMyMTIxRTAeFw0yNjAyMTAxNTU1MDJaFw0yNzAyMDkxNjAwMDJaMDMxMTAvBgNV
BAMTKEQ2RDNGQTM3OTY5QjM1MUVFNjNFQTFFNjYyQzUzMEY3MEJEOTJGNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wsjGnIcPvpS4EtrYO0yERjeR
iUOiSjWmqwNEaVFQKY0nvkWzNE8ptkiHo+qoBuDs+ZvMwL6LpFOKoowWyuViNNbD
mcxil6sw8UAOBZWx9DRbrHPNAfCAvKmAC0NnqtHfZVahoMhd4QPsTbHHMLXRzcEh
ui+qHi6bPzX2JTAM+HzU2LgF5+0CtZuLxOFjG6XG+tAC2ygxycE3lknPMD0SHr/Y
cha4/xbsCG2bEVrsjOup9YHYLqO9BCrqDkX+TnQbvklxfcgP63tsET0IvIMO+mbQ
P0WDIlqb/FPzAPFdsKLT936jmJHw2Wh4WNjQYqqLpQRIpiZfoBsMjIvZ1KJXAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQU1tP6N5abNR7mPqHmYsUw9wvZL18wHwYDVR0j
BBgwFoAUGQk/d2Gp4zfQNAVgR1C/1K3CEh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC8xOTA5M0Y3NzYx
QTlFMzM3RDAzNDA1NjA0NzUwQkZENEFEQzIxMjFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRBREMy
MTIxRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h
MmFkLWQxNzU0MzY1YTQ1ZC8wLzMyMzQzMDMyM2EzNDM4MzQzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzNzMzMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCSEAwDQYJKoZI
hvcNAQELBQADggEBADcSjlTvxDEXWYQ48TvcTGLPPl/Q2YLTNwa6j2KrzhKYCU0L
YJQIyz4fMzsnc5racH7Afb/XpAUTqcbnMiIgIjlY7ezx4LWTvB24cSVxN0/qO8xH
Vjpcwo/PugrUv+j6Vw3MIfm0FycMreGBj4veIubAHQddXEc4mPu5w5XJRvreIGKh
GTWmwfH0LBLRtTJXPbbDK6al+fHVYvKCaFiM/qFFyM+fyt2WeEIdvqdlOVrhVCec
6iqXc8Fa8TXPxuF3Cv7EzjiiBbvx4dMriEwNwqk++UZ0j/DBz6KjW6oEGbQCJAky
VIyRM7FBMzDgqWIIJ3YBQldNtYIjG/6RX7IwKLc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:07 2026 by rpki-client