Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383733303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383733303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          KggVsNZs4AOatysFggwL0mEgcn+YlFIZx1N5LY9/JXc=
Subject key identifier:   34:AA:B7:03:14:FA:92:30:E3:B9:ED:A5:37:F6:BC:18:6B:C8:2E:5A
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       26B93418E9E28D906F71FCCAB0D37D952D777463
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383733303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:32 +0000
ROA not before:           Sun 03 May 2026 02:59:32 +0000
ROA not after:            Sun 02 May 2027 03:04:32 +0000
asID:                     133798
IP address blocks:        2402:5680:8730::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b9:34:18:e9:e2:8d:90:6f:71:fc:ca:b0:d3:7d:95:2d:77:74:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:32 2026 GMT
            Not After : May  2 03:04:32 2027 GMT
        Subject: CN=34AAB70314FA9230E3B9EDA537F6BC186BC82E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:4a:7b:1b:ea:26:bb:5c:cc:2c:22:a2:50:
                    ac:44:56:ec:e8:a6:be:4d:c1:66:42:d5:44:73:22:
                    22:dc:5f:9b:d1:a1:5e:94:bd:23:69:f3:10:49:5e:
                    73:34:3a:35:1f:c6:6e:81:fc:c5:56:d9:05:8f:34:
                    5f:a4:f4:31:78:fe:6e:44:cd:68:48:7b:10:8f:c0:
                    20:02:72:0a:98:76:d4:b0:a1:eb:18:96:60:86:ae:
                    bf:9e:79:b1:71:88:5b:63:45:60:d0:c3:95:1e:6b:
                    76:86:d7:b9:08:14:4e:f7:c8:03:27:a6:e6:fd:29:
                    72:65:9b:4e:13:31:3c:ed:a7:23:02:d6:76:6a:f1:
                    31:6f:ab:18:c6:9d:b6:95:e5:8c:e6:d3:c0:6e:2c:
                    bc:08:f5:99:ec:72:f3:88:5e:29:78:1a:dc:63:80:
                    66:22:bb:2d:f3:39:b0:d6:8f:82:40:1a:18:6f:c5:
                    0a:07:b5:d4:25:15:27:a5:3e:97:18:19:92:40:77:
                    e0:60:b2:5c:9c:25:9a:37:f0:5f:78:71:fa:48:d2:
                    30:fc:fc:d0:de:99:3c:9a:12:24:73:91:6e:e3:71:
                    08:34:9c:bf:3c:c9:d6:5a:a4:72:b8:93:83:8d:b8:
                    88:4b:ba:6e:e0:ff:13:e0:c5:ec:c5:e4:72:fb:d2:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AA:B7:03:14:FA:92:30:E3:B9:ED:A5:37:F6:BC:18:6B:C8:2E:5A
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383733303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8730::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:f9:47:a6:8b:94:7d:6d:7d:54:e2:bc:05:32:1b:30:67:ef:
         b2:3b:ab:67:0c:6a:dc:76:50:24:44:be:a4:c0:27:12:08:68:
         40:52:ae:d8:33:8c:58:52:00:1f:31:e8:c3:57:b5:49:f7:6d:
         5e:d2:72:d5:f2:26:38:92:e7:b4:da:03:30:7a:d1:01:89:81:
         d6:49:cf:7c:a3:50:0b:f3:70:6c:e6:36:48:2c:18:59:91:14:
         83:74:24:e7:97:c2:f6:83:71:4b:7f:2e:09:06:da:b3:9c:12:
         c6:09:8a:3f:d0:6c:10:d9:bc:ec:bb:8e:19:26:fc:4e:e6:e9:
         43:1a:7d:f4:79:bf:b7:af:4e:a0:3f:a5:f9:d5:e6:ed:aa:f9:
         83:95:b5:e4:1b:12:38:3f:b8:59:f6:66:49:ee:2a:22:99:a6:
         1f:97:e4:0a:1a:f3:33:bf:3b:f2:3a:df:58:e6:31:1c:13:81:
         fa:fc:cb:e1:05:53:d8:80:3f:53:b9:27:06:00:4e:67:b9:c8:
         bf:8e:f1:13:2e:3e:c2:ca:4e:1f:b7:e0:6e:c7:e7:b1:dc:80:
         aa:76:70:f6:e7:17:f7:54:f4:ba:43:0d:46:fb:65:22:a3:b2:
         ca:49:d2:41:82:45:9a:58:90:88:ce:e0:f5:be:59:15:5c:e7:
         de:d1:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:21:44 2026 by rpki-client