Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030353a3a2f34382d3438203d3e203338353030.roa
File:                     323430333a323730303a343030353a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier:          xe7XGeYlMvzaLYar6CFxyyUDqTk1SIk45X7cI6XEXio=
Subject key identifier:   64:68:AA:40:90:B1:AB:2D:C1:55:C1:C4:DC:85:F1:A9:E0:93:AD:CB
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       5A148329472481A8D9A28C0FE17382039E0EBC2C
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030353a3a2f34382d3438203d3e203338353030.roa
Signing time:             Sun 03 May 2026 03:00:04 +0000
ROA not before:           Sun 03 May 2026 02:55:04 +0000
ROA not after:            Sun 02 May 2027 03:00:04 +0000
asID:                     38500
IP address blocks:        2403:2700:4005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:14:83:29:47:24:81:a8:d9:a2:8c:0f:e1:73:82:03:9e:0e:bc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:55:04 2026 GMT
            Not After : May  2 03:00:04 2027 GMT
        Subject: CN=6468AA4090B1AB2DC155C1C4DC85F1A9E093ADCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:a8:c5:ad:00:49:30:1d:82:54:dd:20:41:
                    8c:00:d4:bf:e5:3c:b5:2b:b7:eb:a0:d8:7f:9c:7b:
                    2a:96:c3:b0:b0:17:15:0e:ad:bd:27:5e:20:4e:6d:
                    41:47:b3:4d:2f:2a:f5:3c:7a:55:a9:cb:52:d7:80:
                    f5:94:24:dd:62:d6:b5:1b:c3:f9:56:c6:91:3a:b2:
                    48:ab:71:d1:a3:94:3a:fb:b9:78:3c:0a:6b:3d:e4:
                    ab:f3:4d:51:5d:c9:79:9b:61:0c:25:2c:66:97:ac:
                    0e:38:93:13:49:d9:04:78:f4:f5:76:cd:e0:7d:e2:
                    d8:f3:19:75:95:9d:94:58:df:5c:2b:cb:19:4a:21:
                    51:0c:86:f3:35:78:6a:1b:0a:e5:82:75:9a:bd:1a:
                    19:22:5b:41:80:51:ea:a0:bc:4b:d5:85:9b:22:04:
                    c4:b1:9e:8f:ca:92:a0:86:b9:b7:50:f7:58:b5:2c:
                    36:f6:ad:36:62:c6:ae:4d:ff:6c:aa:68:97:a4:ff:
                    ad:e4:af:5c:22:27:55:16:a8:66:f1:71:15:6a:32:
                    90:d2:23:13:5c:d4:8c:03:93:92:80:65:6a:32:6f:
                    1f:ed:a1:a4:8e:0a:c4:5a:24:b7:0a:8e:9b:5b:a2:
                    63:3a:f0:36:30:50:b5:ef:d4:31:fe:89:2c:13:d3:
                    74:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:68:AA:40:90:B1:AB:2D:C1:55:C1:C4:DC:85:F1:A9:E0:93:AD:CB
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030353a3a2f34382d3438203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2700:4005::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:12:d5:15:5f:b5:86:96:b2:ca:99:73:f2:f9:ba:c7:44:01:
         24:f0:38:08:da:53:e9:12:13:fa:1d:be:2c:3e:f7:f1:3e:1f:
         60:7b:df:dc:b3:4c:12:e4:a5:5b:03:3f:e0:cc:4e:25:e7:f8:
         23:90:08:3d:5e:7d:0c:01:96:5f:6e:a9:7c:be:20:a4:41:53:
         7e:4d:71:ad:ec:53:09:28:e2:94:f1:15:ee:89:6e:59:32:f0:
         76:26:c4:d1:7d:3a:8b:a6:23:1c:01:a9:75:8c:30:aa:b8:ba:
         4f:33:96:9d:55:a0:2f:21:81:67:a1:eb:f9:65:b1:80:93:6d:
         af:98:31:65:5a:f6:e4:00:25:e5:3a:24:a9:e4:6f:10:89:c7:
         af:1c:68:80:ce:71:83:4a:5e:89:07:5b:71:97:5b:6e:12:13:
         d2:14:9d:b0:1d:8a:d3:4b:3b:da:7a:36:ee:58:e4:72:48:17:
         ed:90:38:41:6a:1d:4c:85:7a:66:e8:f1:f7:64:d9:87:1c:9c:
         ff:37:30:a7:b4:50:23:28:81:cd:bc:b3:d0:a4:27:8b:0e:ae:
         58:0b:f3:8d:3b:98:6a:d4:0d:72:db:93:1c:87:e6:cf:58:1c:
         a6:2d:93:75:40:ee:11:4d:cf:e6:e1:24:96:c7:2c:16:d6:30:
         23:50:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:45 2026 by rpki-client