Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa
File:                     323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (raw, json)
Hash identifier:          2nlIoQG3hoyOGXVcA94jjH5wFjmakuKKKtaTFgTjeZw=
Subject key identifier:   AF:79:1F:AD:CB:E4:D8:D7:C5:D3:FF:6A:8B:D0:8B:D8:92:9A:B2:79
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       7316E6D5B5A881BA10EAA60B84C7AC2DB5CC4FA1
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa
Signing time:             Sun 03 May 2026 02:15:57 +0000
ROA not before:           Sun 03 May 2026 02:10:57 +0000
ROA not after:            Sun 02 May 2027 02:15:57 +0000
asID:                     38150
IP address blocks:        2402:f080:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:16:e6:d5:b5:a8:81:ba:10:ea:a6:0b:84:c7:ac:2d:b5:cc:4f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: May  3 02:10:57 2026 GMT
            Not After : May  2 02:15:57 2027 GMT
        Subject: CN=AF791FADCBE4D8D7C5D3FF6A8BD08BD8929AB279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:f4:b6:fa:12:6d:3e:36:36:d2:81:68:0b:
                    86:bf:ea:ea:47:7a:48:e4:64:67:07:e4:b8:ce:83:
                    68:e4:82:a9:2d:38:fd:3a:f3:86:59:f0:f2:44:4e:
                    c0:d0:80:d4:72:ac:cd:5d:b6:c9:a4:78:82:78:33:
                    03:77:0b:cb:fc:81:e7:51:84:a1:70:28:86:39:29:
                    ab:5a:c6:d9:0c:7b:40:d3:b3:5e:b9:91:46:e9:c4:
                    e5:93:9f:67:eb:d2:40:80:32:de:36:3e:ed:64:d5:
                    7e:ef:20:3e:a5:47:6a:54:34:ec:d3:c4:e2:98:41:
                    c2:ef:a8:50:da:58:d1:d5:dd:83:af:7c:50:ea:97:
                    dc:6b:8f:9e:e7:ee:20:63:92:31:c4:ae:67:62:c5:
                    c3:66:2b:f9:4b:a3:e4:0b:38:c2:c1:74:fd:57:cc:
                    41:a0:7a:01:3b:bf:5f:52:2d:66:62:46:5e:ed:9e:
                    d6:96:05:ec:bc:69:e4:76:9a:92:8b:5f:f5:f0:59:
                    12:92:5b:93:26:46:f7:82:3d:83:7e:8f:6a:5f:f7:
                    b1:6f:d2:24:d5:af:95:f8:6a:df:cf:07:b5:e7:07:
                    de:70:59:43:b5:b1:99:94:d4:c9:6b:eb:01:cd:15:
                    b8:6b:ed:09:bf:2d:c2:fb:9f:73:1c:2f:e6:95:f4:
                    67:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:79:1F:AD:CB:E4:D8:D7:C5:D3:FF:6A:8B:D0:8B:D8:92:9A:B2:79
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:f080:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:f9:84:63:73:9f:90:cb:10:4f:47:08:3d:02:19:c4:0d:02:
         d5:e1:51:a8:75:a4:63:76:d1:36:75:02:bf:1d:11:5c:dc:d5:
         b9:3f:dd:e3:04:98:b6:92:75:9d:30:0c:6d:14:8e:06:eb:55:
         6a:71:3f:94:99:5a:68:36:5b:b7:47:6b:b4:f1:89:46:d8:60:
         3a:12:1b:2a:70:a4:e3:7c:ca:43:dc:95:94:1a:09:06:15:84:
         75:2b:ba:8e:fe:1c:63:31:9d:9c:81:71:70:d3:c9:45:2f:76:
         38:e8:73:0d:05:22:84:34:64:c9:43:74:a9:f0:1d:8b:28:04:
         68:c5:1e:15:7a:c3:dc:ec:b4:61:8b:b5:4d:43:ab:36:d9:bf:
         8f:ce:8f:3f:10:13:d3:09:89:fa:ca:00:a0:53:05:e3:1e:e2:
         9a:ac:6e:5c:d0:64:dc:19:62:a0:b1:e3:1a:1c:cd:d5:45:b3:
         e3:b7:4d:4b:e6:81:77:25:90:7a:5d:13:2a:a0:71:9c:b8:18:
         6d:c9:cb:30:ce:3c:34:81:f5:ce:3b:83:19:83:78:86:08:7e:
         97:0f:ce:a3:53:db:b4:2a:ad:cf:bf:97:e1:b5:ae:51:3b:f0:
         7e:43:d2:a4:33:33:62:b6:72:0c:b4:12:d6:0b:b9:22:27:8a:
         4a:76:f7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:31 2026 by rpki-client