Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a3830303a3a2f33382d3338203d3e20313333373938.roa
File:                     323430323a353638303a3830303a3a2f33382d3338203d3e20313333373938.roa (raw, json)
Hash identifier:          QhACwlc6+Bo3uiQSvTIcSF/QnrRkQiD0/KRxxBiyWyY=
Subject key identifier:   8F:50:1E:21:BA:8F:EC:DA:2C:FE:1E:22:2B:A4:F7:91:39:5E:6E:AF
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       4A0A829760E1844266DCC34F61B6A67D4C88A2A1
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a3830303a3a2f33382d3338203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:14 +0000
ROA not before:           Sun 03 May 2026 02:59:14 +0000
ROA not after:            Sun 02 May 2027 03:04:14 +0000
asID:                     133798
IP address blocks:        2402:5680:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0a:82:97:60:e1:84:42:66:dc:c3:4f:61:b6:a6:7d:4c:88:a2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:14 2026 GMT
            Not After : May  2 03:04:14 2027 GMT
        Subject: CN=8F501E21BA8FECDA2CFE1E222BA4F791395E6EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:c1:99:1f:e8:9e:c8:b8:56:95:b3:50:4f:
                    c0:88:d2:ee:05:b4:70:40:46:a8:63:72:11:69:b6:
                    7a:d0:15:75:0b:a8:7c:bb:71:85:f3:2a:16:7d:c4:
                    ec:b7:1a:fd:d2:e3:f4:1a:e0:42:9a:8d:c5:23:ae:
                    16:a3:58:df:f0:e2:d7:c3:d5:93:f5:de:9d:13:db:
                    77:5a:f0:d9:ad:ab:ef:59:85:55:55:dd:85:25:02:
                    65:14:98:2c:c1:de:f9:56:01:0b:e2:01:cd:65:cf:
                    89:c4:a3:79:71:e4:d5:ec:6b:fc:66:07:f3:51:9c:
                    22:c3:a9:7a:c3:e6:38:66:6b:ac:6f:db:35:b2:23:
                    b4:fb:5f:4b:17:e7:37:ed:b8:69:89:8f:47:3a:93:
                    0e:94:70:24:81:0f:48:16:6d:48:40:6c:66:fb:77:
                    50:2b:05:64:c3:33:e7:68:96:c8:11:09:3e:d8:4b:
                    b9:a3:45:f3:9d:39:80:68:63:53:2f:81:31:b3:5c:
                    e4:b9:91:51:7b:c9:c0:36:12:ec:19:5a:8f:a7:79:
                    2a:8b:74:a4:f3:8e:4f:83:06:15:92:e4:b1:02:3e:
                    48:bd:61:28:8b:2d:18:df:b9:f7:92:8b:c0:7c:cc:
                    93:17:ae:18:6d:5b:52:2a:23:0b:83:ec:f4:61:6d:
                    fa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:50:1E:21:BA:8F:EC:DA:2C:FE:1E:22:2B:A4:F7:91:39:5E:6E:AF
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a3830303a3a2f33382d3338203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         2a:cc:7a:aa:7a:84:60:ba:48:76:bf:87:d7:53:62:88:c6:6c:
         c3:e3:cc:66:65:d9:d6:49:47:cb:60:cc:ce:b4:6c:9a:aa:87:
         65:74:bf:46:52:03:02:15:4e:c9:a2:78:db:cf:1d:3f:0c:15:
         54:65:77:95:5f:63:2c:c8:e0:f8:b6:75:a1:90:82:68:b6:22:
         2f:e9:af:1b:c4:9a:31:0e:32:9d:11:7b:b6:02:41:ab:2c:6c:
         83:9d:df:62:36:f4:ec:44:19:50:39:97:aa:78:70:84:13:44:
         6e:d7:3b:02:4d:81:19:21:40:09:3f:68:a5:0a:06:ed:e1:d2:
         75:62:10:0c:a9:5e:a2:17:4f:10:7e:95:86:e4:09:fa:f2:f4:
         d6:fc:47:fb:9a:10:48:ca:82:52:4c:f3:57:04:49:1d:b8:57:
         9a:06:a6:20:23:78:16:c9:fc:51:9d:3b:ff:71:7c:47:bc:d6:
         4d:43:e6:32:91:34:7a:d6:22:43:36:48:4e:18:36:7c:62:70:
         18:b8:4d:30:85:a8:ff:f4:e2:fc:2b:f7:44:79:81:0a:cb:18:
         73:20:5e:b3:05:20:2b:65:ac:9d:99:ad:82:79:4b:3c:04:75:
         b5:c3:f1:e7:00:51:27:dc:08:15:80:d5:c0:9d:e4:1f:e7:7f:
         64:e5:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:18 2026 by rpki-client