Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa
File:                     323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (raw, json)
Hash identifier:          sB0ILDPDQsVKp3KJ8VkdfBp6KlnEUdhc4ZcUygvqa+w=
Subject key identifier:   56:F0:E8:AD:C2:4F:FA:3F:72:B5:A8:6B:14:EB:C0:C8:B0:DC:B1:DB
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       5B6EED8DF1B96FAF17E1193B2DF87360B8F97EA5
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa
Signing time:             Sun 03 May 2026 02:16:02 +0000
ROA not before:           Sun 03 May 2026 02:11:02 +0000
ROA not after:            Sun 02 May 2027 02:16:02 +0000
asID:                     38150
IP address blocks:        2402:f080:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6e:ed:8d:f1:b9:6f:af:17:e1:19:3b:2d:f8:73:60:b8:f9:7e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: May  3 02:11:02 2026 GMT
            Not After : May  2 02:16:02 2027 GMT
        Subject: CN=56F0E8ADC24FFA3F72B5A86B14EBC0C8B0DCB1DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:cf:c5:e5:60:64:2d:39:82:3b:53:ef:87:
                    9d:15:e8:e7:84:b5:b9:5b:e9:83:bf:e8:4b:f9:6a:
                    61:c6:13:98:bd:9c:a8:fc:73:8f:09:95:0d:83:52:
                    32:86:f9:fd:72:27:de:ca:be:e6:5b:cb:08:d3:c4:
                    6c:c3:93:a0:ae:14:c8:56:f1:1c:ec:ff:f0:f2:03:
                    99:c4:39:1f:48:e2:88:81:0b:2e:16:3e:c3:73:ff:
                    d2:71:43:a0:8f:88:54:e5:d4:08:7a:8d:ef:e8:1f:
                    c3:29:95:09:43:9c:63:09:1e:a5:23:6d:f7:97:dc:
                    52:57:8d:c1:0b:bd:58:2d:c2:9c:03:9f:d4:d5:4f:
                    3e:6c:ad:a2:e5:f1:30:f6:e8:c8:5d:9b:16:85:ff:
                    f7:fc:69:a0:30:cd:06:3b:76:63:af:64:d8:2e:38:
                    37:71:a5:73:89:c0:13:c0:f0:e2:37:84:6e:d1:1c:
                    f5:97:c0:c1:d7:32:d1:fb:21:4f:c9:c3:e1:63:f9:
                    8a:98:5f:0d:b7:8e:42:69:52:92:c7:fc:b4:06:b0:
                    ab:ff:32:26:21:5c:cf:44:1d:9c:b5:2d:b2:fa:4c:
                    79:8e:8e:74:ed:fd:8c:d1:36:60:60:d3:e1:83:17:
                    9c:1d:4c:c7:fd:4b:ab:47:27:42:91:6c:7a:94:3f:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F0:E8:AD:C2:4F:FA:3F:72:B5:A8:6B:14:EB:C0:C8:B0:DC:B1:DB
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:f080:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:f3:2c:a7:c3:ab:86:ec:dd:9e:52:35:6c:b2:9c:49:6f:1e:
         de:f5:55:74:b4:47:c2:d1:53:d9:55:a9:c4:9f:e5:24:47:b8:
         50:6e:4d:43:f4:f1:76:31:ba:82:1f:46:1a:48:61:99:b1:ff:
         bd:a9:fd:88:4b:27:93:bd:42:bd:bb:ae:87:65:74:44:e3:8d:
         cd:48:a6:15:fa:09:c1:86:0c:e6:95:c2:a2:da:83:b1:c6:bd:
         d5:cb:98:63:1a:dd:b4:c5:2e:5e:db:f3:91:40:39:b9:2b:5b:
         7a:cf:95:f2:a8:ec:39:41:57:17:0a:fb:94:8a:63:37:dc:4c:
         a9:12:16:b1:51:1b:af:34:86:a6:da:9d:a4:22:f0:ab:95:e9:
         80:44:73:8f:0e:bd:01:8d:f5:29:2a:54:9a:f1:60:27:50:c2:
         c1:4c:f0:f0:60:75:09:b9:a0:9a:31:be:32:b4:ad:69:93:58:
         5d:66:d8:0a:3e:57:dd:3b:76:87:5d:b0:3f:a8:50:00:26:ad:
         4d:ff:3a:fb:d5:b8:ce:24:6a:11:19:67:27:53:61:0e:5a:20:
         11:29:be:18:59:d8:34:a2:c5:1b:3d:4b:a8:c5:79:17:b4:d5:
         eb:ba:c3:a0:9a:9b:15:73:cb:b9:34:3e:bf:7c:94:1e:5f:d0:
         03:19:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:29 2026 by rpki-client