Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a343030303a3a2f33342d3334203d3e203633353031.roa
File:                     323430333a666338303a343030303a3a2f33342d3334203d3e203633353031.roa (raw, json)
Hash identifier:          lkviWWzlQVZg2Ip/lqyi5REYUdv3fmF1UPMRNAdfvA4=
Subject key identifier:   97:E3:D1:EF:FD:BD:2A:C2:33:D1:2E:F4:FD:EC:99:87:19:5F:33:5C
Certificate issuer:       /CN=92851265D2097C47E507D8C51B1077D0979AF464
Certificate serial:       6226D35A4DBD2EC101BF110238661F7FD9FBCFE9
Authority key identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a343030303a3a2f33342d3334203d3e203633353031.roa
Signing time:             Sun 03 May 2026 02:59:00 +0000
ROA not before:           Sun 03 May 2026 02:54:00 +0000
ROA not after:            Sun 02 May 2027 02:59:00 +0000
asID:                     63501
IP address blocks:        2403:fc80:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl
                          rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:26:d3:5a:4d:bd:2e:c1:01:bf:11:02:38:66:1f:7f:d9:fb:cf:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92851265D2097C47E507D8C51B1077D0979AF464
        Validity
            Not Before: May  3 02:54:00 2026 GMT
            Not After : May  2 02:59:00 2027 GMT
        Subject: CN=97E3D1EFFDBD2AC233D12EF4FDEC9987195F335C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:15:d1:87:59:bc:60:fb:15:6a:ba:69:b7:
                    cf:e3:fe:59:a9:1c:91:09:8e:ef:60:f7:4a:5c:67:
                    09:a2:12:d2:88:81:82:4c:ce:6c:5c:32:9d:ca:10:
                    df:c1:6f:62:02:5c:d5:fa:fb:3d:48:79:bb:40:7f:
                    8d:c3:1c:cb:0c:f6:cb:4a:e1:d7:83:7a:4a:25:ec:
                    72:05:1e:44:b4:9f:15:51:59:2d:c1:c0:6c:79:98:
                    85:10:46:db:86:5b:cb:54:6d:05:fa:07:f8:ff:57:
                    4f:7e:bd:7b:e5:ce:cb:d6:6f:f7:05:84:5f:f0:54:
                    75:bb:e8:cf:ec:67:41:b6:78:e5:71:22:7b:6a:0f:
                    e3:18:26:15:ae:c7:6e:84:67:1c:1f:e4:45:39:1f:
                    2c:e3:10:c6:f7:dc:e4:aa:bf:1d:f1:33:7b:97:07:
                    fe:74:ec:8e:1e:63:45:58:93:94:62:51:7e:7d:10:
                    ed:33:84:bf:99:87:96:5d:a1:85:1e:0e:07:c0:f3:
                    f6:83:0f:3b:11:f5:31:cb:84:d3:c4:83:80:dd:65:
                    e2:77:2a:72:f2:5d:ba:b7:8f:8f:c6:a1:74:3e:ce:
                    05:49:08:2c:ab:ff:f1:94:5d:b1:34:a1:56:db:13:
                    35:d5:b3:df:27:cf:b0:fa:88:5e:a4:49:7d:ae:f7:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E3:D1:EF:FD:BD:2A:C2:33:D1:2E:F4:FD:EC:99:87:19:5F:33:5C
            X509v3 Authority Key Identifier:
                keyid:92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a343030303a3a2f33342d3334203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         30:95:5c:14:92:3c:f5:ec:8d:b4:ce:72:63:7a:29:ff:41:29:
         d6:27:79:ac:1d:43:dd:9b:c0:47:7b:5f:e9:c5:9f:68:2f:2b:
         96:23:83:35:70:59:2a:d7:14:3c:47:0b:53:8b:23:38:5b:6d:
         a7:25:0c:8f:cc:af:af:86:f9:f0:6d:87:09:c7:ea:53:ce:db:
         e3:05:70:36:63:d6:ac:1c:3c:9b:12:fc:a7:22:9e:eb:81:8f:
         12:23:48:39:b3:1c:d1:06:e1:5c:30:34:b4:2e:7a:52:a4:ce:
         d9:03:4d:d5:7c:4d:e9:11:84:0f:2a:d4:b8:ec:ec:53:03:3c:
         5f:58:b8:ee:13:f0:26:4e:fb:6e:12:f6:f7:7b:06:76:00:99:
         ba:47:e4:58:c1:92:fb:97:fe:1a:a8:3e:85:04:68:4d:07:8c:
         4a:95:b6:ac:f2:81:1f:53:c0:d1:1c:d2:aa:3a:a7:dd:11:3b:
         a1:dd:fc:85:51:9b:4e:ff:93:9e:a1:82:a6:de:03:62:89:77:
         dc:49:1f:6f:7f:63:7c:29:0e:3d:56:4a:08:c6:86:7e:3f:5b:
         ec:2d:9c:b0:88:60:51:65:34:68:4f:b7:0c:90:0c:c0:17:1e:
         d5:67:b2:4c:53:cd:a6:85:bf:bf:42:7c:b6:af:a4:77:3b:75:
         a2:dd:ef:f0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYibTWk29LsEBvxECOGYff9n7z+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI4NTEyNjVEMjA5N0M0N0U1MDdEOEM1MUIxMDc3RDA5
NzlBRjQ2NDAeFw0yNjA1MDMwMjU0MDBaFw0yNzA1MDIwMjU5MDBaMDMxMTAvBgNV
BAMTKDk3RTNEMUVGRkRCRDJBQzIzM0QxMkVGNEZERUM5OTg3MTk1RjMzNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXhXRh1m8YPsVarppt8/j/lmp
HJEJju9g90pcZwmiEtKIgYJMzmxcMp3KEN/Bb2ICXNX6+z1IebtAf43DHMsM9stK
4deDekol7HIFHkS0nxVRWS3BwGx5mIUQRtuGW8tUbQX6B/j/V09+vXvlzsvWb/cF
hF/wVHW76M/sZ0G2eOVxIntqD+MYJhWux26EZxwf5EU5HyzjEMb33OSqvx3xM3uX
B/507I4eY0VYk5RiUX59EO0zhL+Zh5ZdoYUeDgfA8/aDDzsR9THLhNPEg4DdZeJ3
KnLyXbq3j4/GoXQ+zgVJCCyr//GUXbE0oVbbEzXVs98nz7D6iF6kSX2u96KdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUl+PR7/29KsIz0S70/eyZhxlfM1wwHwYDVR0j
BBgwFoAUkoUSZdIJfEflB9jFGxB30Jea9GQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWQ5MThiMTUtZTYzZS00YjM4LWEwNWMtNjUwZmI0OWYwNTk0LzAvOTI4NTEyNjVE
MjA5N0M0N0U1MDdEOEM1MUIxMDc3RDA5NzlBRjQ2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85Mjg1MTI2NUQyMDk3QzQ3RTUwN0Q4QzUxQjEwNzdEMDk3OUFG
NDY0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMyMzQzMDMzM2E2NjYzMzgzMDNhMzQzMDMwMzAz
YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzNjMzMzUzMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJAP8
gEAwDQYJKoZIhvcNAQELBQADggEBADCVXBSSPPXsjbTOcmN6Kf9BKdYneawdQ92b
wEd7X+nFn2gvK5YjgzVwWSrXFDxHC1OLIzhbbaclDI/Mr6+G+fBthwnH6lPO2+MF
cDZj1qwcPJsS/KcinuuBjxIjSDmzHNEG4VwwNLQuelKkztkDTdV8TekRhA8q1Ljs
7FMDPF9YuO4T8CZO+24S9vd7BnYAmbpH5FjBkvuX/hqoPoUEaE0HjEqVtqzygR9T
wNEc0qo6p90RO6Hd/IVRm07/k56hgqbeA2KJd9xJH29/Y3wpDj1WSgjGhn4/W+wt
nLCIYFFlNGhPtwyQDMAXHtVnskxTzaaFv79CfLavpHc7daLd7/A=
-----END CERTIFICATE-----
Generated at Wed May 13 07:45:20 2026 by rpki-client