Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33332d3333203d3e203633353031.roa
File:                     323430333a666338303a383030303a3a2f33332d3333203d3e203633353031.roa (raw, json)
Hash identifier:          JIfbv3OHacG6R+1g4gHR9cdYMCMZDKnTMmU8hqOoUAk=
Subject key identifier:   72:F4:68:4C:30:4B:93:14:0F:65:B2:68:CB:55:B1:14:15:53:3F:10
Certificate issuer:       /CN=92851265D2097C47E507D8C51B1077D0979AF464
Certificate serial:       152334C5A9529568481D5AA74E620430109C9C47
Authority key identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33332d3333203d3e203633353031.roa
Signing time:             Sun 03 May 2026 02:59:03 +0000
ROA not before:           Sun 03 May 2026 02:54:03 +0000
ROA not after:            Sun 02 May 2027 02:59:03 +0000
asID:                     63501
IP address blocks:        2403:fc80:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl
                          rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:23:34:c5:a9:52:95:68:48:1d:5a:a7:4e:62:04:30:10:9c:9c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92851265D2097C47E507D8C51B1077D0979AF464
        Validity
            Not Before: May  3 02:54:03 2026 GMT
            Not After : May  2 02:59:03 2027 GMT
        Subject: CN=72F4684C304B93140F65B268CB55B11415533F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:4a:ae:dd:81:58:ba:a3:a4:0e:e8:bc:cf:
                    2c:d9:e5:67:82:7a:58:54:ef:dc:fc:80:a3:00:4d:
                    d2:ea:61:77:0f:03:90:4e:09:f8:d6:fa:b5:06:b0:
                    36:12:b5:f5:38:ef:74:fc:73:b3:97:68:a2:42:7c:
                    d3:92:f9:19:86:15:46:27:a2:8d:3d:3e:c4:66:8f:
                    93:e2:bd:6d:d3:cb:c2:2f:79:59:22:e9:a9:88:97:
                    94:65:20:1c:85:5a:ac:e5:93:17:f9:c0:93:f0:25:
                    6c:9e:58:aa:31:d8:58:df:7c:55:48:22:48:d2:9e:
                    1c:50:7a:c3:0d:ad:37:1c:d2:a4:69:05:db:00:0c:
                    64:b6:6a:8a:94:82:7e:c1:06:f1:b7:5f:ef:5a:c0:
                    f3:37:b6:c9:5e:91:d8:2a:0b:40:38:87:86:11:fc:
                    ed:eb:58:e2:5a:39:b3:02:8a:be:a4:45:6f:15:55:
                    3c:46:50:ec:5c:e3:39:73:54:20:3c:e3:94:c3:de:
                    42:8f:65:74:a3:b8:91:46:6a:61:92:91:f8:f8:c5:
                    71:d4:50:31:b4:e5:e8:38:59:42:67:42:42:f1:8e:
                    8e:de:6b:fd:ac:05:fe:d5:74:74:a8:f2:2d:73:17:
                    c9:02:95:70:75:47:28:a5:cc:57:f1:c0:5f:2f:2c:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F4:68:4C:30:4B:93:14:0F:65:B2:68:CB:55:B1:14:15:53:3F:10
            X509v3 Authority Key Identifier:
                keyid:92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33332d3333203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:48:13:2c:aa:4f:9e:9d:28:76:e8:43:39:9a:07:ef:e4:da:
         b8:ee:3d:89:4d:98:46:17:ad:e0:2c:af:38:60:47:e3:a2:14:
         22:06:31:c1:6a:be:9a:48:4d:ce:6f:15:c1:1e:79:49:2f:bf:
         01:6f:a5:28:21:3c:01:da:a3:35:e4:71:eb:e0:d9:a5:4f:9d:
         f5:bf:87:e1:01:db:48:4d:2c:81:0f:d8:b0:42:dd:5c:6c:f0:
         2c:87:ec:a7:3a:f9:f3:37:c7:b5:f8:bf:f5:72:a6:a4:1b:3a:
         1a:3c:d4:8b:3c:7f:a2:6d:bf:18:66:27:cf:87:9d:9c:2f:52:
         fe:d2:b2:6f:2a:77:ca:20:58:4f:35:76:74:41:35:3b:aa:5a:
         97:9e:b7:33:3b:71:48:13:8c:59:72:bc:f4:2f:4f:c2:47:c4:
         a3:4a:30:a8:a9:a3:ef:c5:f4:f0:5b:f5:76:c4:e4:e9:fb:d1:
         37:c5:e2:65:0b:fb:45:6c:c9:e1:3c:d4:68:1b:63:dc:8b:ae:
         05:94:67:63:5c:41:e7:ba:3c:cc:2f:f8:88:e0:84:9e:31:93:
         f0:8d:67:32:40:c7:8f:4c:33:22:82:a5:2d:e3:d0:91:e2:9e:
         a9:86:b7:cb:75:07:5b:32:10:23:94:6e:fa:e1:95:91:31:27:
         86:08:02:ad
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFSM0xalSlWhIHVqnTmIEMBCcnEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI4NTEyNjVEMjA5N0M0N0U1MDdEOEM1MUIxMDc3RDA5
NzlBRjQ2NDAeFw0yNjA1MDMwMjU0MDNaFw0yNzA1MDIwMjU5MDNaMDMxMTAvBgNV
BAMTKDcyRjQ2ODRDMzA0QjkzMTQwRjY1QjI2OENCNTVCMTE0MTU1MzNGMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjEqu3YFYuqOkDui8zyzZ5WeC
elhU79z8gKMATdLqYXcPA5BOCfjW+rUGsDYStfU473T8c7OXaKJCfNOS+RmGFUYn
oo09PsRmj5PivW3Ty8IveVki6amIl5RlIByFWqzlkxf5wJPwJWyeWKox2FjffFVI
IkjSnhxQesMNrTcc0qRpBdsADGS2aoqUgn7BBvG3X+9awPM3tslekdgqC0A4h4YR
/O3rWOJaObMCir6kRW8VVTxGUOxc4zlzVCA845TD3kKPZXSjuJFGamGSkfj4xXHU
UDG05eg4WUJnQkLxjo7ea/2sBf7VdHSo8i1zF8kClXB1RyilzFfxwF8vLPAvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcvRoTDBLkxQPZbJoy1WxFBVTPxAwHwYDVR0j
BBgwFoAUkoUSZdIJfEflB9jFGxB30Jea9GQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWQ5MThiMTUtZTYzZS00YjM4LWEwNWMtNjUwZmI0OWYwNTk0LzAvOTI4NTEyNjVE
MjA5N0M0N0U1MDdEOEM1MUIxMDc3RDA5NzlBRjQ2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85Mjg1MTI2NUQyMDk3QzQ3RTUwN0Q4QzUxQjEwNzdEMDk3OUFG
NDY0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMyMzQzMDMzM2E2NjYzMzgzMDNhMzgzMDMwMzAz
YTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzNjMzMzUzMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJAP8
gIAwDQYJKoZIhvcNAQELBQADggEBAFlIEyyqT56dKHboQzmaB+/k2rjuPYlNmEYX
reAsrzhgR+OiFCIGMcFqvppITc5vFcEeeUkvvwFvpSghPAHaozXkcevg2aVPnfW/
h+EB20hNLIEP2LBC3Vxs8CyH7Kc6+fM3x7X4v/VypqQbOho81Is8f6JtvxhmJ8+H
nZwvUv7Ssm8qd8ogWE81dnRBNTuqWpeetzM7cUgTjFlyvPQvT8JHxKNKMKipo+/F
9PBb9XbE5On70TfF4mUL+0VsyeE81GgbY9yLrgWUZ2NcQee6PMwv+IjghJ4xk/CN
ZzJAx49MMyKCpS3j0JHinqmGt8t1B1syECOUbvrhlZExJ4YIAq0=
-----END CERTIFICATE-----
Generated at Wed May 13 10:10:35 2026 by rpki-client