Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa
File:                     323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (raw, json)
Hash identifier:          eOdt05IAfcrKKZUnC2uIX6d/C9w0dr4HU6UCs9176ek=
Subject key identifier:   4B:0D:E0:D6:70:5D:12:65:E2:FE:6E:7A:39:DF:28:8A:61:E3:F4:FD
Certificate issuer:       /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial:       51B70FB53E281D52D4F90B0CACEA27394AC3A3B5
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa
Signing time:             Sun 03 May 2026 02:21:04 +0000
ROA not before:           Sun 03 May 2026 02:16:04 +0000
ROA not after:            Sun 02 May 2027 02:21:04 +0000
asID:                     149953
IP address blocks:        2001:df1:1c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 19:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b7:0f:b5:3e:28:1d:52:d4:f9:0b:0c:ac:ea:27:39:4a:c3:a3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
        Validity
            Not Before: May  3 02:16:04 2026 GMT
            Not After : May  2 02:21:04 2027 GMT
        Subject: CN=4B0DE0D6705D1265E2FE6E7A39DF288A61E3F4FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:cc:86:da:26:3e:0d:47:7b:be:8f:53:6b:
                    62:f1:f9:de:9c:74:c6:77:42:5e:aa:71:09:cb:33:
                    7a:4c:e8:0f:e7:bb:03:bc:3e:46:e6:bc:cf:61:83:
                    9b:5a:43:1c:91:55:98:00:dd:ff:00:60:5a:de:7a:
                    b0:d5:c3:df:eb:e1:26:52:be:89:de:94:fa:ee:0e:
                    e4:64:e3:60:b1:c3:0e:1e:f0:a6:ca:ed:fd:6a:ae:
                    f2:ce:2b:17:08:6e:f9:42:ea:04:b7:01:95:17:2b:
                    64:90:11:fc:8a:0d:7a:d6:ac:14:b0:ca:86:cd:69:
                    76:53:d8:b6:c2:76:e7:48:0f:96:96:52:9d:7d:b0:
                    a6:3c:37:ef:25:5e:47:3b:3e:d6:42:df:29:3c:c4:
                    f2:ed:27:37:ca:ad:29:fc:7b:f1:0a:2b:bb:c2:2c:
                    f8:ea:69:81:ba:9b:fb:e7:58:a5:28:c0:22:c0:68:
                    24:38:f4:3f:cb:d1:4c:e8:8a:4e:46:4d:ee:0b:ee:
                    40:2f:aa:88:81:49:66:a0:5a:c3:77:50:6b:ea:fd:
                    fe:e4:de:ac:86:e0:85:ba:ed:e9:66:8d:70:0a:07:
                    5e:e9:68:e0:f2:ef:ac:30:8b:0e:7f:21:37:15:64:
                    8e:6e:0e:00:8c:f6:c4:4b:45:0d:ed:38:6d:0b:b8:
                    74:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0D:E0:D6:70:5D:12:65:E2:FE:6E:7A:39:DF:28:8A:61:E3:F4:FD
            X509v3 Authority Key Identifier:
                keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:1c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:ec:cc:e5:c2:30:31:6f:4b:4c:fd:6c:c6:ba:fe:71:55:f4:
         4f:5b:47:00:61:f8:f8:4d:25:12:ad:76:e0:a2:ad:3a:87:92:
         99:e6:e2:8f:44:99:d4:fc:29:56:07:da:49:f3:0a:28:96:52:
         3c:46:2e:9a:ba:cf:af:3f:c3:ca:2f:dd:ef:15:19:d3:f8:e5:
         37:31:d1:9a:e5:b9:80:4d:7d:00:be:a3:ec:21:61:1d:20:14:
         b4:c3:3b:24:be:11:e6:83:d2:4c:cd:20:31:06:15:99:ba:21:
         15:cb:95:40:63:1f:3d:a3:17:e6:76:5e:f9:fd:a6:25:56:eb:
         52:c0:c0:df:3c:a6:45:cf:ec:8a:a4:02:2b:c3:73:e4:49:78:
         a4:32:bb:43:70:55:b8:74:2b:39:0c:5d:3e:7d:c5:3a:6d:69:
         eb:7c:9a:59:34:ee:46:c7:72:68:2f:d7:68:26:91:c8:e7:77:
         18:3c:92:92:d2:a8:52:58:15:04:e1:32:fe:73:2d:01:91:6b:
         ed:c0:08:6b:ed:30:bc:db:ba:82:c0:f5:48:d7:53:b8:aa:a2:
         0c:dc:b4:42:60:77:50:0d:2a:69:80:9a:db:8d:f5:87:d5:e3:
         7b:36:b4:43:ac:84:58:3a:c8:bf:e2:a1:f6:4c:86:8a:7b:61:
         19:52:80:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:31 2026 by rpki-client