Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a3a2f34382d3438203d3e203338313530.roa
File:                     323430323a663038303a3a2f34382d3438203d3e203338313530.roa (raw, json)
Hash identifier:          +huyDf3yDQWqXY+1iyFRAvgOtc7xkYdLMWVDiq9SZeo=
Subject key identifier:   AF:1E:51:0B:2B:FB:62:DC:93:D7:8B:75:B4:6B:6C:6E:3D:AE:49:82
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       08A14727E1AC2DB3B2D22E2FEC199DDCB1049335
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a3a2f34382d3438203d3e203338313530.roa
Signing time:             Sun 03 May 2026 02:15:59 +0000
ROA not before:           Sun 03 May 2026 02:10:59 +0000
ROA not after:            Sun 02 May 2027 02:15:59 +0000
asID:                     38150
IP address blocks:        2402:f080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a1:47:27:e1:ac:2d:b3:b2:d2:2e:2f:ec:19:9d:dc:b1:04:93:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: May  3 02:10:59 2026 GMT
            Not After : May  2 02:15:59 2027 GMT
        Subject: CN=AF1E510B2BFB62DC93D78B75B46B6C6E3DAE4982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:9b:e7:94:c6:a9:f9:27:e1:24:ee:d8:f2:
                    b3:28:b1:c7:81:72:54:3f:95:0c:39:c6:18:0c:ef:
                    7a:7c:c3:86:0f:7d:fe:74:43:9c:34:10:57:9d:28:
                    9a:83:f1:18:5f:c8:b5:77:c6:66:8d:30:d3:cc:30:
                    70:d8:d3:d0:c5:7d:6e:0b:3e:c7:33:40:7d:9a:03:
                    3b:3b:19:91:93:f7:f2:b2:6c:42:a5:27:a4:7c:0e:
                    a0:07:bb:38:b7:8e:18:c0:a6:1b:81:6f:e6:72:49:
                    69:01:7f:7d:06:a8:08:2a:82:c8:3f:ef:15:ed:f5:
                    6b:10:90:fc:90:39:24:9f:cd:f5:e4:24:1c:ab:86:
                    f3:79:b6:43:26:7b:ea:5e:27:d2:5a:11:ad:ae:cc:
                    0d:7c:03:76:24:d8:04:8e:39:e2:7d:be:dc:68:e6:
                    a0:31:00:cc:f2:a4:4a:c2:58:0d:b4:95:9c:4e:e0:
                    71:ac:a6:11:2b:32:98:30:d1:c9:6d:f5:7f:a5:e7:
                    c5:3c:3d:3c:fc:f5:f1:13:60:0a:82:c3:c6:39:ec:
                    c9:2f:d9:ec:d0:be:77:e9:12:1f:32:6a:39:c3:91:
                    3a:a6:55:4f:18:57:46:ed:79:63:c9:3e:9a:67:a2:
                    74:f7:bd:e5:60:7d:8c:05:00:8f:37:c0:1d:1d:14:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1E:51:0B:2B:FB:62:DC:93:D7:8B:75:B4:6B:6C:6E:3D:AE:49:82
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a3a2f34382d3438203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:f080::/48

    Signature Algorithm: sha256WithRSAEncryption
         d7:0e:90:cb:9c:d2:be:b6:14:75:e8:41:bb:13:d5:38:fb:f3:
         d3:0d:e3:ff:e6:49:91:70:99:03:12:5a:6b:fb:11:f5:1a:50:
         f1:51:5a:0a:94:11:ac:d5:65:3d:45:11:7d:ca:87:b1:40:b0:
         d7:ca:2f:cb:43:c6:b6:44:bd:f3:8d:79:37:c4:31:10:b1:30:
         1b:49:8b:55:87:e9:f0:69:da:17:2d:9a:82:e1:ab:fa:0d:a9:
         15:11:43:80:65:45:e2:3f:91:ce:80:ed:9d:da:73:22:fc:b0:
         29:25:ac:06:1d:4c:1e:3e:b5:a8:c5:71:41:5f:60:b0:a4:93:
         16:25:27:03:68:6d:56:da:97:c9:a0:3e:11:4f:c7:81:ab:45:
         64:9e:4a:65:aa:58:73:ee:c7:a6:26:14:1b:6b:5e:bc:93:7c:
         bd:98:d3:be:07:08:76:c9:17:1b:8f:60:d9:44:8e:06:d9:68:
         ff:ca:4c:4f:4e:91:9d:36:6f:a8:71:d0:e3:cd:45:ca:43:1e:
         3d:51:e7:d7:dc:56:f9:91:cc:bb:bf:99:c4:e6:3c:95:38:80:
         8d:e1:86:f1:5c:5e:9c:ab:dd:7e:f1:e6:d8:21:1d:e3:5a:ea:
         99:f5:b8:8f:06:26:d3:8e:fd:b7:9f:3f:2b:2d:9d:80:1e:62:
         c3:d7:0c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:42 2026 by rpki-client