Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383830303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383830303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          kylcOu1T82E1zxEiH26aF+CgZINTRNs5LalCU6NPdnM=
Subject key identifier:   FC:6C:E7:01:5B:04:B4:72:2F:AE:15:1D:A6:DA:02:36:FA:F3:7E:F9
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       616DED333DE34EC00EA1185C3E0AF24AAD6F96D2
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383830303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:11 +0000
ROA not before:           Sun 03 May 2026 02:59:11 +0000
ROA not after:            Sun 02 May 2027 03:04:11 +0000
asID:                     133798
IP address blocks:        2402:5680:8800::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6d:ed:33:3d:e3:4e:c0:0e:a1:18:5c:3e:0a:f2:4a:ad:6f:96:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:11 2026 GMT
            Not After : May  2 03:04:11 2027 GMT
        Subject: CN=FC6CE7015B04B4722FAE151DA6DA0236FAF37EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:b0:82:20:3c:30:4a:f6:2f:7e:88:f6:31:
                    d5:c8:54:2a:fd:36:8b:29:47:63:3c:0d:1c:bb:9e:
                    53:b6:6a:6d:4a:fe:6b:55:fa:f8:c8:88:9d:af:b8:
                    af:76:e1:f1:f6:92:9b:9a:c8:4b:3c:94:38:fa:04:
                    c5:4b:30:7c:8a:05:0d:74:46:f7:85:e7:c1:12:dd:
                    db:f9:7d:df:65:90:e4:4f:c8:99:aa:41:77:4b:89:
                    0f:f0:39:96:97:f9:1d:a7:2b:89:9e:3d:67:8d:e3:
                    d2:a0:13:76:bc:d7:8c:03:5c:6f:2b:23:b6:47:c3:
                    8c:2e:a0:23:2d:4c:ce:9a:ab:e2:bf:c9:2b:7c:6c:
                    86:a8:cc:24:70:9b:dc:04:53:74:c9:92:3b:ff:96:
                    54:e2:ac:31:7e:b2:71:4a:60:fa:74:0f:1b:e0:8b:
                    38:62:7b:2f:ef:68:91:62:7e:cf:56:31:1a:92:f4:
                    83:da:8e:a6:90:4f:f4:06:2a:8b:d5:b7:dd:d2:69:
                    58:9f:b1:b9:97:d1:11:c8:b5:76:28:33:96:72:3b:
                    3e:64:2b:a2:45:0f:4a:68:fe:8e:b7:73:82:03:f2:
                    05:39:01:3a:33:25:79:41:53:4a:49:ab:45:69:d0:
                    cf:ed:c0:f0:6e:bd:e0:8d:92:7f:ea:66:04:24:e0:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6C:E7:01:5B:04:B4:72:2F:AE:15:1D:A6:DA:02:36:FA:F3:7E:F9
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383830303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8800::/44

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:ca:c9:8e:67:79:58:80:a4:71:c0:64:30:a8:5a:b6:e5:
         b0:24:1e:c0:45:bf:6b:71:b5:a6:5b:6d:c8:2e:ac:59:28:9d:
         bb:55:cc:c5:9d:ad:2d:cf:2a:88:fb:97:a5:e4:74:53:0b:38:
         9a:07:55:73:95:be:5b:32:30:1e:55:89:2b:59:84:2e:37:b2:
         61:47:2a:ee:69:d3:70:53:07:28:08:9b:42:81:79:58:02:44:
         18:c9:98:24:1c:ef:db:02:b8:50:f5:5e:d8:f2:94:10:f4:73:
         bb:56:cf:81:df:18:38:b0:95:53:b8:e7:c6:4b:5d:8a:ab:cb:
         44:ad:cc:11:51:f4:84:bc:a4:36:22:9f:56:fc:a2:d1:b9:ac:
         0d:48:a1:36:ec:ee:40:8f:98:76:14:d8:22:d9:25:37:9e:e3:
         ac:5b:20:c6:be:98:fb:fc:81:d2:00:01:d6:b6:24:2d:de:df:
         a5:d1:fa:aa:cd:9b:d8:4f:eb:3b:f0:73:a2:44:03:89:e9:08:
         91:55:29:b8:f8:5f:f9:b2:6d:46:c0:c1:bc:81:18:5c:07:66:
         ad:59:e1:9d:95:d8:5f:c9:6f:39:54:70:48:2e:5f:06:cd:e0:
         bf:3a:e6:d0:0f:38:a0:0c:2d:b7:8d:9a:ef:32:d1:d6:9c:38:
         af:59:48:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:50 2026 by rpki-client