Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a31303a3a2f34382d3438203d3e203338353030.roa
File:                     323430333a323730303a31303a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier:          wJqUbpJqRcvC6a+1M1yr620VdTNj0hNzOCN11rmmZKg=
Subject key identifier:   04:57:2B:62:CC:87:F0:1B:FB:DC:F6:FB:03:22:18:97:57:7B:8A:D7
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       098D7AF1DF7A449328123DE36E3B2D3A9C032C63
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a31303a3a2f34382d3438203d3e203338353030.roa
Signing time:             Sun 03 May 2026 03:00:06 +0000
ROA not before:           Sun 03 May 2026 02:55:06 +0000
ROA not after:            Sun 02 May 2027 03:00:06 +0000
asID:                     38500
IP address blocks:        2403:2700:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8d:7a:f1:df:7a:44:93:28:12:3d:e3:6e:3b:2d:3a:9c:03:2c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:55:06 2026 GMT
            Not After : May  2 03:00:06 2027 GMT
        Subject: CN=04572B62CC87F01BFBDCF6FB03221897577B8AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fc:cc:d5:21:89:ba:e3:be:b5:5e:0f:1d:a2:
                    58:b6:27:a0:76:0c:4e:8b:2b:4a:67:98:92:0f:9b:
                    76:d7:49:9f:59:52:18:7c:a7:c3:79:ce:c6:47:a7:
                    41:18:5d:a7:26:c5:c9:44:0c:5a:12:2a:5a:b2:03:
                    d9:e0:d5:a7:d7:bc:d5:d5:5d:43:af:ff:45:0a:bf:
                    da:c1:98:13:1a:b5:8d:1a:e4:a8:40:42:f5:9d:6e:
                    57:ed:6c:44:7b:81:aa:a1:b5:35:9b:a5:d2:8b:5c:
                    20:9c:50:ed:51:e7:37:07:b6:a6:f6:85:2c:7f:8a:
                    f1:db:63:cd:30:7a:39:ea:31:d9:5f:f7:1a:25:d6:
                    4d:93:c9:c4:00:97:cc:e9:3c:07:5e:ea:9e:45:39:
                    b0:1d:bd:d5:1e:1c:d2:0b:a5:33:b2:d1:d7:da:22:
                    34:70:03:d4:26:00:f7:29:35:bd:8f:5f:f1:c9:e5:
                    c4:93:4a:d5:3a:bb:0d:05:cc:e1:57:e2:48:8f:e0:
                    16:32:ad:be:e4:21:fc:73:7d:ff:de:f0:c1:7f:26:
                    4c:b3:d7:6b:28:19:bc:86:24:66:85:b4:2d:56:88:
                    18:71:a4:dc:ac:2c:7b:cf:7a:25:c1:fc:d7:6c:e3:
                    c5:f4:42:25:56:58:04:c6:22:f9:c1:f5:9e:ba:c0:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:57:2B:62:CC:87:F0:1B:FB:DC:F6:FB:03:22:18:97:57:7B:8A:D7
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a31303a3a2f34382d3438203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2700:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:fa:b2:12:62:0a:7e:f3:44:3f:b2:cb:c5:81:e2:d4:c8:ba:
         19:54:ac:9e:06:4d:c9:6e:8b:58:ac:39:fb:b1:fd:88:79:6d:
         51:f0:a0:7b:f2:f1:44:c3:31:68:c9:84:a2:0f:aa:34:6a:80:
         46:37:5f:3b:92:36:9b:4f:d1:f6:54:c0:56:2e:04:0f:47:8d:
         2a:60:7f:cf:07:a3:e9:40:dd:78:50:ad:8d:63:0c:30:0f:b9:
         b1:29:d9:e8:68:df:5e:fc:ba:3d:a0:81:fc:e7:70:56:7a:87:
         f7:30:11:71:4d:f2:c6:19:be:f7:f9:27:26:83:fb:f5:52:30:
         8e:6a:48:31:c6:dd:b0:66:10:c1:9e:8c:2e:16:57:21:52:aa:
         f2:3c:3e:ed:36:dc:e7:5d:a8:de:47:09:ec:77:0b:b1:5c:98:
         b1:79:ad:c4:06:4a:9f:f6:40:97:fe:da:ab:b0:07:74:a3:ff:
         3a:a2:f4:6e:61:0c:dc:b7:2f:f1:d1:34:99:01:1e:c9:01:92:
         61:3e:31:f2:43:59:f4:7d:59:d7:11:22:7a:56:df:f1:32:82:
         49:9a:3b:50:57:f6:74:04:0a:50:2a:ae:5a:04:70:c9:2c:e5:
         df:cb:b9:7e:f7:ac:17:cf:3d:48:0c:97:18:aa:bf:ff:c3:77:
         88:f1:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:41 2026 by rpki-client