Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a383a3a2f34382d3438203d3e203338353030.roa
File:                     323430333a323730303a383a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier:          b2SjOdVEFfjqaxfOQ2FX2FImPQewK7z43Xly6kVxoI0=
Subject key identifier:   44:D2:D9:47:53:99:0C:75:D1:0D:76:3B:6D:68:FB:29:E6:08:ED:E1
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       5F8D430CAFACE403A8E58B1F57ACDA7369BA865A
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a383a3a2f34382d3438203d3e203338353030.roa
Signing time:             Sun 03 May 2026 02:59:55 +0000
ROA not before:           Sun 03 May 2026 02:54:55 +0000
ROA not after:            Sun 02 May 2027 02:59:55 +0000
asID:                     38500
IP address blocks:        2403:2700:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8d:43:0c:af:ac:e4:03:a8:e5:8b:1f:57:ac:da:73:69:ba:86:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:54:55 2026 GMT
            Not After : May  2 02:59:55 2027 GMT
        Subject: CN=44D2D94753990C75D10D763B6D68FB29E608EDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d6:fa:f4:4a:a1:fc:90:cb:c3:c0:c5:57:39:
                    ed:a8:40:ef:c8:09:1a:7f:fc:69:e3:74:8f:79:34:
                    40:f7:a4:b6:11:3d:e3:17:73:99:ab:13:f9:17:18:
                    92:db:73:e8:72:bf:f5:7d:c9:cf:8e:08:d4:18:00:
                    e3:2f:4e:3a:c5:e3:25:6f:8c:8b:5e:01:bd:52:19:
                    48:63:fc:00:05:7c:d7:00:98:8f:49:02:31:86:97:
                    82:cd:0e:56:9b:28:23:2a:5c:e7:32:d9:15:36:b9:
                    03:15:57:f5:3b:33:0e:8f:cb:1b:cd:9b:81:77:68:
                    a6:24:d9:09:87:5f:0c:00:68:ec:5f:6f:f7:12:f5:
                    d9:dd:78:20:e6:b2:6d:9c:7b:80:6a:41:93:7b:c7:
                    ba:27:7d:b0:18:c3:92:2d:b6:cf:7f:16:c7:9f:f2:
                    e7:70:f1:c3:c6:4d:8e:ba:15:f5:28:f6:ce:97:13:
                    c3:0b:00:fb:18:86:17:e6:87:78:5c:b2:a5:3e:93:
                    91:55:a5:f3:5e:15:38:cc:61:ff:0b:26:ce:31:41:
                    f5:4a:13:0f:cf:e8:5f:43:46:8e:27:48:54:ce:88:
                    0a:65:63:17:cb:55:47:a8:86:8a:84:ce:2f:e6:10:
                    3a:3d:09:0c:06:17:dd:74:ff:9a:ee:0c:90:c8:29:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D2:D9:47:53:99:0C:75:D1:0D:76:3B:6D:68:FB:29:E6:08:ED:E1
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a383a3a2f34382d3438203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2700:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:7c:1e:a7:9a:87:75:54:1d:16:84:37:96:90:3e:54:60:39:
         b0:4e:d1:3c:86:16:a2:22:8f:99:09:fa:01:a0:44:3c:e6:d1:
         57:62:10:f2:fd:c2:dd:f8:45:bc:7e:ab:df:3e:ea:39:74:a7:
         72:d5:3f:d1:25:87:60:73:ba:53:4d:f7:23:a1:a8:80:dc:02:
         e0:8a:13:c6:6d:fd:cf:72:b1:92:51:19:1c:33:3c:82:83:1a:
         c7:d7:4a:1e:95:94:33:01:f2:7d:8c:07:7d:39:95:75:ef:2c:
         e7:b0:57:7c:e3:b3:0e:43:05:dd:f6:a4:97:b4:0e:47:ec:ac:
         a7:e8:b3:d3:cc:49:4c:4f:70:d7:57:0e:4c:e8:31:0f:8f:d8:
         f6:ea:11:78:94:5e:42:a8:44:50:34:d2:d3:ce:39:91:80:25:
         cb:c6:a5:9a:02:53:b9:a6:06:49:20:34:67:10:96:01:57:39:
         2e:64:17:ef:2a:2d:79:93:de:5f:79:c4:b7:7d:29:a0:24:f6:
         9b:6f:a1:66:9f:f3:f1:e9:00:2a:79:32:9a:78:d7:80:a9:19:
         ef:59:70:8b:8c:0f:fa:10:cc:0f:e4:db:7c:08:0d:83:43:cc:
         d3:bd:04:93:97:12:cd:f7:3a:0d:2e:a5:96:cd:08:59:ed:76:
         47:f7:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:06 2026 by rpki-client