Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a3a2f34382d3438203d3e203338353030.roa
File:                     323430333a323730303a3a2f34382d3438203d3e203338353030.roa (raw, json)
Hash identifier:          fxh7LqFHTBqbnJ7zPSx4WV5OJrr++HUKoaiRpSuWPhY=
Subject key identifier:   1E:72:08:3F:41:80:76:7A:A3:32:C3:15:0B:E6:2D:64:0A:35:81:70
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       7A169C7DF5028545C687EBCF4AD013B532C2EF92
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a3a2f34382d3438203d3e203338353030.roa
Signing time:             Sun 03 May 2026 02:59:52 +0000
ROA not before:           Sun 03 May 2026 02:54:52 +0000
ROA not after:            Sun 02 May 2027 02:59:52 +0000
asID:                     38500
IP address blocks:        2403:2700::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:16:9c:7d:f5:02:85:45:c6:87:eb:cf:4a:d0:13:b5:32:c2:ef:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:54:52 2026 GMT
            Not After : May  2 02:59:52 2027 GMT
        Subject: CN=1E72083F4180767AA332C3150BE62D640A358170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9a:52:47:5e:a1:22:d2:79:13:6d:fd:96:46:
                    71:f5:06:9d:2d:d7:67:6d:42:aa:a7:18:a2:bc:eb:
                    ef:51:a8:69:33:c5:e1:e4:82:5e:5e:ff:da:16:2b:
                    a6:32:8f:15:cb:91:7e:43:2a:f2:cd:40:33:c3:80:
                    06:02:e8:3d:9f:6b:0a:5e:2f:a1:b5:a0:7c:29:dd:
                    15:ff:2c:11:98:71:0d:10:a6:a2:5d:d9:ff:94:3b:
                    fd:94:51:80:83:12:72:2e:d8:94:a4:40:7b:09:aa:
                    42:2c:67:aa:44:d9:49:a8:a2:4c:b8:16:8c:a2:e3:
                    e9:f7:d2:19:fd:40:1f:91:da:14:f6:39:8c:fd:40:
                    ef:8b:77:91:5d:a5:76:6f:70:ab:ab:32:ea:f1:56:
                    10:c4:da:6e:58:20:ab:3d:2a:97:9a:01:2d:27:aa:
                    28:c1:7f:5f:82:ca:0f:7f:8c:8b:11:56:bb:e6:06:
                    ad:3b:4a:92:36:ed:00:f3:8f:c7:7a:83:05:a2:75:
                    81:32:bd:f2:fe:97:e3:2c:b3:ae:59:a0:30:e6:8f:
                    e3:61:69:c9:45:cc:a4:fb:43:ed:d0:98:54:2a:97:
                    b0:a0:cd:0e:f2:07:2b:75:39:ab:39:2d:8f:81:f3:
                    24:fc:c8:07:a8:14:96:69:f9:bd:af:a5:97:ed:e3:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:72:08:3F:41:80:76:7A:A3:32:C3:15:0B:E6:2D:64:0A:35:81:70
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a3a2f34382d3438203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2700::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:dd:cf:94:22:30:55:29:b1:00:3e:dd:d6:2e:73:3a:56:25:
         47:16:c1:dd:54:9b:5f:68:4e:eb:1a:72:3e:f1:be:74:54:09:
         d4:a4:9e:59:9e:be:d7:57:7d:76:34:3c:a1:ec:47:10:7b:15:
         2f:07:3d:25:92:97:3e:20:19:df:a6:09:e7:c5:81:98:7e:1b:
         fd:54:7b:63:5b:63:ba:62:1f:aa:81:45:42:21:46:4f:50:f0:
         fe:d8:f0:50:04:df:3b:9f:bd:a0:1e:2b:7e:30:7e:ef:90:80:
         02:cf:70:2a:ce:c0:90:bc:7d:1f:a8:8e:3e:cf:1c:b7:78:6c:
         4c:b3:3d:d5:df:2d:be:cc:2a:a3:fb:9b:1a:8a:9d:97:bd:ef:
         37:c2:95:72:0e:8a:90:e1:aa:fa:d9:bc:04:7c:b9:b4:07:4c:
         31:88:77:45:8e:5c:83:5c:89:b5:ca:c1:ab:82:38:f3:00:5f:
         8a:1d:d2:65:95:43:da:46:7c:1b:bf:0c:be:7a:87:b8:af:55:
         98:1c:78:45:66:b2:6d:2e:44:79:bb:b7:94:1b:97:38:f3:ac:
         59:2c:5d:dd:ea:08:d8:2e:8c:7a:f7:c0:3a:2f:ac:c3:df:86:
         1c:3b:c0:14:cc:c2:e7:14:92:ec:9e:1d:78:f1:dc:1f:52:7b:
         a3:b8:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:24 2026 by rpki-client