Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383730303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383730303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          xPRKAITMoljxCOO8PUXFRHc9r+Ya2LWvTaU+MIyiQFY=
Subject key identifier:   DA:5F:32:AE:D0:47:B5:E3:96:FB:CC:19:A5:B2:04:65:F1:CA:2B:0E
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       66BC13F09C41B9496D6410CE5B46A9A57D7AEBC6
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383730303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:23 +0000
ROA not before:           Sun 03 May 2026 02:59:23 +0000
ROA not after:            Sun 02 May 2027 03:04:23 +0000
asID:                     133798
IP address blocks:        2402:5680:8700::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bc:13:f0:9c:41:b9:49:6d:64:10:ce:5b:46:a9:a5:7d:7a:eb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:23 2026 GMT
            Not After : May  2 03:04:23 2027 GMT
        Subject: CN=DA5F32AED047B5E396FBCC19A5B20465F1CA2B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:2f:5e:e7:fb:68:67:85:a9:3d:a9:8f:60:
                    fe:99:bc:25:68:a5:23:58:a2:99:75:c2:d7:08:37:
                    d0:3f:a5:e0:bf:3b:cc:f0:b4:4f:a6:87:72:79:36:
                    b0:48:36:8e:2c:d3:e3:8e:df:14:f0:77:89:23:6a:
                    68:5f:15:a8:9a:38:56:99:8a:da:e1:38:d9:92:17:
                    9d:73:65:ad:99:ee:10:50:a5:1c:d3:5c:cc:ac:38:
                    f4:8f:00:90:43:03:09:7e:a9:ac:00:49:85:ad:95:
                    82:d2:42:fe:0b:ce:3a:eb:cb:40:ac:78:09:b0:1a:
                    35:ca:c0:ce:09:0d:86:4e:3e:29:5b:5f:76:17:bc:
                    11:6c:63:ec:f4:22:bc:a4:df:77:c9:5b:37:db:a8:
                    2f:fe:df:04:67:99:15:63:97:d3:19:f0:e9:d7:6d:
                    b1:97:4a:58:68:7c:2f:32:d6:9e:8a:42:02:b9:1b:
                    5c:af:df:bf:03:bb:91:30:90:f1:5e:37:c9:29:29:
                    76:f0:ee:14:15:38:72:85:b6:f4:b5:7d:ae:07:3f:
                    36:09:1f:dd:99:e7:2f:a2:7b:72:ad:8f:9c:03:1b:
                    ce:c0:c0:02:11:8f:2e:b9:28:e3:10:b5:dd:a9:5f:
                    4a:0e:24:44:26:0e:73:d0:4a:09:b2:02:0a:b5:0c:
                    7a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5F:32:AE:D0:47:B5:E3:96:FB:CC:19:A5:B2:04:65:F1:CA:2B:0E
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383730303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8700::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:e8:86:82:59:4b:6c:90:22:38:f3:77:4f:1f:41:22:c0:ab:
         46:c3:e8:11:ec:53:68:c8:ba:a8:34:82:45:4f:69:4f:b7:6b:
         b0:17:86:b3:ce:22:53:8c:96:6c:e4:cf:cd:a3:53:e9:ac:3a:
         bb:da:78:2f:e5:dc:a8:89:3e:82:04:85:70:15:60:00:2a:79:
         63:33:ba:c1:81:5a:5d:8e:bf:a2:41:b0:e1:3d:20:f2:c8:2f:
         40:be:be:9a:cf:80:1f:15:6d:a9:f9:54:6d:9b:96:ee:0e:84:
         a8:1e:79:73:4c:10:5e:ae:7f:f5:0e:7f:88:2f:5a:76:e1:11:
         fe:2d:7e:cb:f5:38:2d:c8:41:ea:0b:c4:5e:1a:62:e4:53:b0:
         74:a9:b5:09:eb:4e:75:05:6c:72:17:30:27:a5:bb:04:f0:6e:
         9f:32:ba:82:45:19:15:dc:31:f2:42:e4:8e:e5:b2:81:ed:91:
         60:1c:50:00:5e:01:ec:e9:ee:9b:4f:40:b7:2d:51:4f:55:01:
         1f:6d:6a:7c:c7:f1:38:25:2a:ab:db:17:ff:f2:23:76:53:76:
         d2:eb:28:e6:f5:d7:62:75:49:53:20:48:0d:10:dd:22:fa:52:
         35:a7:94:02:bd:4e:2b:e1:c4:f3:4b:a0:79:c3:09:54:e4:cf:
         05:77:c6:24
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUZrwT8JxBuUltZBDOW0appX1668YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2
MzIxQTVDMDAeFw0yNjA1MDMwMjU5MjNaFw0yNzA1MDIwMzA0MjNaMDMxMTAvBgNV
BAMTKERBNUYzMkFFRDA0N0I1RTM5NkZCQ0MxOUE1QjIwNDY1RjFDQTJCMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15S9e5/toZ4WpPamPYP6ZvCVo
pSNYopl1wtcIN9A/peC/O8zwtE+mh3J5NrBINo4s0+OO3xTwd4kjamhfFaiaOFaZ
itrhONmSF51zZa2Z7hBQpRzTXMysOPSPAJBDAwl+qawASYWtlYLSQv4Lzjrry0Cs
eAmwGjXKwM4JDYZOPilbX3YXvBFsY+z0Iryk33fJWzfbqC/+3wRnmRVjl9MZ8OnX
bbGXSlhofC8y1p6KQgK5G1yv378Du5EwkPFeN8kpKXbw7hQVOHKFtvS1fa4HPzYJ
H92Z5y+ie3Ktj5wDG87AwAIRjy65KOMQtd2pX0oOJEQmDnPQSgmyAgq1DHqZAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU2l8yrtBHteOW+8wZpbIEZfHKKw4wHwYDVR0j
BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB
RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB
NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzNzMwMzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAhwAwDQYJKoZIhvcNAQELBQADggEBAHvohoJZS2yQIjjzd08fQSLAq0bD6BHs
U2jIuqg0gkVPaU+3a7AXhrPOIlOMlmzkz82jU+msOrvaeC/l3KiJPoIEhXAVYAAq
eWMzusGBWl2Ov6JBsOE9IPLIL0C+vprPgB8Vban5VG2blu4OhKgeeXNMEF6uf/UO
f4gvWnbhEf4tfsv1OC3IQeoLxF4aYuRTsHSptQnrTnUFbHIXMCeluwTwbp8yuoJF
GRXcMfJC5I7lsoHtkWAcUABeAezp7ptPQLctUU9VAR9tanzH8TglKqvbF//yI3ZT
dtLrKOb112J1SVMgSA0Q3SL6UjWnlAK9TivhxPNLoHnDCVTkzwV3xiQ=
-----END CERTIFICATE-----
Generated at Wed May 13 13:43:04 2026 by rpki-client