Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030393a3a2f34382d3438203d3e203338353030.roa
File:                     323430333a323730303a343030393a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier:          e6cQeG27wU4NNfU2NzFlh670ya/RH2WRPUjvC9Gn7E8=
Subject key identifier:   E1:05:A9:8E:7F:7F:B6:6F:81:8B:24:A1:43:A2:B2:0E:49:41:66:C4
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       4BCDFEAD5E18EFF936B00F8C8E9E61EE6E21BBA7
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030393a3a2f34382d3438203d3e203338353030.roa
Signing time:             Sun 03 May 2026 03:00:08 +0000
ROA not before:           Sun 03 May 2026 02:55:08 +0000
ROA not after:            Sun 02 May 2027 03:00:08 +0000
asID:                     38500
IP address blocks:        2403:2700:4009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cd:fe:ad:5e:18:ef:f9:36:b0:0f:8c:8e:9e:61:ee:6e:21:bb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:55:08 2026 GMT
            Not After : May  2 03:00:08 2027 GMT
        Subject: CN=E105A98E7F7FB66F818B24A143A2B20E494166C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:94:8c:e9:62:2e:c6:d8:1e:1e:15:b7:7b:
                    6d:c0:78:e6:21:29:23:fd:58:bd:a1:a1:9f:77:06:
                    72:ea:4b:4a:a5:16:52:b5:50:cd:6f:30:7f:8f:96:
                    11:2c:ed:04:23:4c:cf:72:eb:17:dc:ac:0c:fc:e9:
                    2c:4e:9a:59:c4:2b:11:1e:68:86:7f:6e:f2:ba:0d:
                    fd:4f:fa:79:72:4d:fb:40:4f:82:89:75:d7:b5:d8:
                    0e:5c:9c:77:71:dc:38:ab:50:c0:4c:c4:a7:f9:2f:
                    ff:a1:01:a4:dd:59:5e:60:04:dc:e0:2c:0b:2a:99:
                    68:c4:36:43:3e:2e:2c:0e:9e:da:50:d6:ff:c4:9a:
                    e1:72:fb:51:d1:85:02:80:e9:d1:71:d4:9e:76:b2:
                    ca:34:17:d3:16:ef:62:f0:86:a0:15:64:20:45:2b:
                    fc:b1:73:68:a5:e7:43:c9:1a:fb:e7:b6:5b:1b:3c:
                    37:12:9d:92:b8:31:3a:86:91:17:b4:11:03:f5:5c:
                    7c:49:4a:a8:98:2b:b9:00:15:0f:40:74:85:5d:8d:
                    6f:f1:9d:60:4b:cd:15:b6:2d:57:bc:59:63:5e:03:
                    4b:db:95:4d:9e:20:b7:92:86:a3:a5:bd:f2:00:ec:
                    39:13:18:ff:db:a7:33:27:61:64:ce:c2:8d:ce:e5:
                    94:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:05:A9:8E:7F:7F:B6:6F:81:8B:24:A1:43:A2:B2:0E:49:41:66:C4
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030393a3a2f34382d3438203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2700:4009::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:96:45:6d:82:c1:6d:88:c1:f3:4c:b5:a2:86:d8:53:54:f8:
         2e:68:59:2d:12:74:41:8c:02:f6:66:49:2e:63:8b:30:7a:54:
         1b:1a:47:fa:e1:3d:ee:74:70:0c:5e:c5:9b:66:78:43:6f:d9:
         e4:b5:18:30:9e:be:a6:f3:89:56:b8:2d:37:2b:00:f4:03:79:
         04:23:3f:8d:99:3a:ca:fa:f6:f7:56:a6:1d:ef:38:55:19:b7:
         2f:66:bc:1e:52:32:6e:b9:1c:31:f4:fb:d0:c4:8b:3f:48:e0:
         fb:0c:8c:18:c1:17:ad:e4:e7:f5:33:0c:82:a2:62:ed:66:87:
         08:f1:fc:49:56:73:ed:23:3b:5d:df:47:6e:d5:94:7e:b5:99:
         06:84:14:8c:54:42:aa:fd:37:77:da:49:f0:0f:61:72:88:dc:
         62:98:7d:6d:37:79:78:2e:12:8f:3e:6f:f3:2b:8e:5c:16:4a:
         f9:49:5b:63:d3:d9:d8:f8:d5:2f:ca:ac:91:67:38:93:ec:c6:
         66:6b:99:e4:55:55:7b:47:1c:98:ba:08:5c:de:df:f6:c3:d5:
         11:b5:ce:86:90:df:ba:7d:c0:3f:ac:2b:fd:cb:00:2f:9b:de:
         40:63:b3:f9:e5:0c:85:2b:7c:21:35:7a:3e:10:f3:e7:86:15:
         70:67:d8:7a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUS83+rV4Y7/k2sA+Mjp5h7m4hu6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF
QkZDOTI5MzAeFw0yNjA1MDMwMjU1MDhaFw0yNzA1MDIwMzAwMDhaMDMxMTAvBgNV
BAMTKEUxMDVBOThFN0Y3RkI2NkY4MThCMjRBMTQzQTJCMjBFNDk0MTY2QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTBZSM6WIuxtgeHhW3e23AeOYh
KSP9WL2hoZ93BnLqS0qlFlK1UM1vMH+PlhEs7QQjTM9y6xfcrAz86SxOmlnEKxEe
aIZ/bvK6Df1P+nlyTftAT4KJdde12A5cnHdx3DirUMBMxKf5L/+hAaTdWV5gBNzg
LAsqmWjENkM+LiwOntpQ1v/EmuFy+1HRhQKA6dFx1J52sso0F9MW72LwhqAVZCBF
K/yxc2il50PJGvvntlsbPDcSnZK4MTqGkRe0EQP1XHxJSqiYK7kAFQ9AdIVdjW/x
nWBLzRW2LVe8WWNeA0vblU2eILeShqOlvfIA7DkTGP/bpzMnYWTOwo3O5ZRbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU4QWpjn9/tm+BiyShQ6KyDklBZsQwHwYDVR0j
BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5
MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5
MjkzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05
ZTgwLTFmYTU3MjkyMDdmYy8wLzMyMzQzMDMzM2EzMjM3MzAzMDNhMzQzMDMwMzkz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAMn
AEAJMA0GCSqGSIb3DQEBCwUAA4IBAQCmlkVtgsFtiMHzTLWihthTVPguaFktEnRB
jAL2ZkkuY4swelQbGkf64T3udHAMXsWbZnhDb9nktRgwnr6m84lWuC03KwD0A3kE
Iz+NmTrK+vb3VqYd7zhVGbcvZrweUjJuuRwx9PvQxIs/SOD7DIwYwRet5Of1MwyC
omLtZocI8fxJVnPtIztd30du1ZR+tZkGhBSMVEKq/Td32knwD2FyiNximH1tN3l4
LhKPPm/zK45cFkr5SVtj09nY+NUvyqyRZziT7MZma5nkVVV7RxyYughc3t/2w9UR
tc6GkN+6fcA/rCv9ywAvm95AY7P55QyFK3whNXo+EPPnhhVwZ9h6
-----END CERTIFICATE-----
Generated at Wed May 13 08:00:08 2026 by rpki-client