Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa
File:                     323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (raw, json)
Hash identifier:          gPbto/7983SacM5tnXYlR5B4CYRQU3aEqwN9PIo4NB4=
Subject key identifier:   07:79:51:57:C4:5E:6B:BD:1D:AB:CC:74:9A:90:4E:23:35:45:C8:A1
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       01E247F7C0EFFCAFCA9080A47CD420D057047753
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa
Signing time:             Sun 03 May 2026 02:15:57 +0000
ROA not before:           Sun 03 May 2026 02:10:57 +0000
ROA not after:            Sun 02 May 2027 02:15:57 +0000
asID:                     38150
IP address blocks:        2402:f080:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e2:47:f7:c0:ef:fc:af:ca:90:80:a4:7c:d4:20:d0:57:04:77:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: May  3 02:10:57 2026 GMT
            Not After : May  2 02:15:57 2027 GMT
        Subject: CN=07795157C45E6BBD1DABCC749A904E233545C8A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:a2:af:10:aa:f0:c1:cd:74:a2:aa:ef:4f:
                    78:f3:4a:d2:24:24:3f:e8:67:56:0b:d2:36:0f:33:
                    08:d8:09:85:79:99:ec:ef:7e:5c:36:32:ee:75:9d:
                    82:db:3a:4b:f5:69:21:01:3a:a8:03:3b:54:2e:19:
                    34:02:8e:8d:fd:2b:1a:9f:cf:69:8f:dd:59:1b:d7:
                    42:48:60:eb:bd:64:99:8b:19:6a:c4:e2:0b:a5:0c:
                    34:ee:06:2d:c7:bd:e0:3b:ab:5c:60:cd:89:21:01:
                    40:3e:23:f7:04:3e:b0:73:57:d7:b4:ac:f0:be:70:
                    50:1c:91:d9:ef:41:19:52:10:85:38:96:9e:5a:25:
                    80:fe:a4:28:e6:07:c3:88:bd:4b:05:25:7d:28:00:
                    01:f3:eb:11:01:69:a4:47:85:21:70:9f:d8:b7:08:
                    6c:4c:41:f5:32:90:7d:90:eb:bd:72:65:cd:03:a0:
                    e1:ec:0c:6f:ba:89:f4:fd:52:24:61:c4:95:3a:93:
                    7f:73:ea:da:eb:e8:06:d4:bf:ce:73:1e:a6:24:85:
                    4f:07:17:9e:87:89:25:6d:36:bb:19:dc:ad:f5:f6:
                    c3:9e:f2:f9:a7:c3:1e:94:00:fd:7a:a5:84:ee:eb:
                    2c:18:ed:76:0d:6c:c2:2a:5a:2f:da:9c:e5:41:0b:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:79:51:57:C4:5E:6B:BD:1D:AB:CC:74:9A:90:4E:23:35:45:C8:A1
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:f080:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:56:90:4c:93:64:52:34:d5:39:e4:74:d7:6a:a6:2a:34:24:
         a1:64:fa:05:33:95:b1:22:8b:16:f7:48:a5:4f:09:9c:66:f3:
         e4:e0:0c:f0:09:57:ec:8c:dc:d5:4e:cb:23:29:2f:3c:4d:60:
         dc:12:e2:33:b9:4f:96:0c:4b:0e:10:37:62:a2:9d:60:d1:40:
         c0:50:84:80:f3:1c:56:3d:b1:13:30:9b:af:d6:ab:84:35:99:
         76:da:c3:7c:95:09:4c:0c:52:a7:b5:40:9b:76:b3:ee:3b:01:
         ad:03:a0:15:ac:d2:d2:7b:e9:b2:8e:99:b4:7a:2b:a7:5c:c0:
         1b:28:ce:1e:6e:9e:1d:5a:34:86:9f:d4:50:dc:be:ec:97:fb:
         d1:25:b2:e8:05:8a:c6:2a:6a:25:a5:30:95:b8:79:ac:d8:86:
         3d:13:01:1a:85:5b:80:54:6a:2f:80:28:f7:ef:63:45:e2:d9:
         b9:78:96:dc:0e:29:84:e5:4d:b6:7a:06:27:4a:c7:e3:dc:1e:
         b7:ce:12:36:3b:d0:ea:7a:a8:df:25:73:07:00:57:00:e3:c2:
         33:fe:25:4d:dd:5e:bd:1f:20:74:fb:10:44:cc:ac:89:cf:03:
         34:2e:9b:53:3e:87:36:40:d5:5f:e7:aa:7e:28:3f:7e:0a:90:
         89:ba:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:28:22 2026 by rpki-client