Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383835303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383835303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          zt4Lh/dQjJNdB8wELQBG5nETPf27enI+nATlH8BEX5A=
Subject key identifier:   2C:91:79:25:F5:FD:50:4F:A7:19:4D:33:6A:EC:1C:7C:89:9F:1E:3D
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       299BD3FCC05206681C4BAA8078466F6C778B7949
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383835303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:34 +0000
ROA not before:           Sun 03 May 2026 02:59:34 +0000
ROA not after:            Sun 02 May 2027 03:04:34 +0000
asID:                     133798
IP address blocks:        2402:5680:8850::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9b:d3:fc:c0:52:06:68:1c:4b:aa:80:78:46:6f:6c:77:8b:79:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:34 2026 GMT
            Not After : May  2 03:04:34 2027 GMT
        Subject: CN=2C917925F5FD504FA7194D336AEC1C7C899F1E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:6c:a6:1e:e2:af:53:5c:ad:3f:b0:69:13:
                    2a:f7:df:23:c6:67:2a:f1:53:10:b5:18:51:7b:b7:
                    e9:da:d4:fe:4c:de:60:15:7d:a7:78:6d:e9:f0:8c:
                    71:32:1a:e1:cc:eb:2e:a7:c7:bd:32:f6:08:4e:96:
                    09:fa:bc:2f:6f:ac:21:0c:8e:2e:1d:d2:02:a4:8c:
                    d8:99:a8:bd:34:8a:7e:91:5f:3d:ae:e5:b5:60:e9:
                    23:45:92:d3:a0:27:03:fc:cd:43:81:a9:8c:11:4c:
                    74:d2:94:03:c4:60:55:14:7f:5b:21:10:1b:6b:c6:
                    f5:38:6d:41:5f:12:23:bc:90:6f:7c:9f:86:88:d2:
                    60:37:4d:27:e5:1c:a7:c3:98:6a:09:15:f5:fd:52:
                    b6:34:43:4a:22:26:ee:92:37:f3:35:28:dd:16:f1:
                    85:68:ff:5e:64:cf:67:8f:87:9c:25:27:e5:ec:0e:
                    13:95:66:e3:6f:1f:e6:9d:82:21:2a:2f:c7:c7:0d:
                    e9:06:47:6f:05:09:da:1c:c3:0c:32:57:67:bc:4e:
                    55:e6:03:e5:9f:5f:58:17:45:37:ea:b5:31:e3:2e:
                    ae:03:45:37:0d:b3:f0:66:f0:b8:f4:b2:f0:c1:73:
                    c5:27:07:14:45:75:35:64:3d:f5:e7:6d:a2:74:06:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:91:79:25:F5:FD:50:4F:A7:19:4D:33:6A:EC:1C:7C:89:9F:1E:3D
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383835303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8850::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:15:10:5f:b0:20:15:87:14:c4:c4:cd:fb:53:c5:b1:d2:6e:
         7c:b5:87:2e:ba:48:a6:be:e5:0b:91:32:41:17:59:31:6e:d5:
         05:90:11:c1:0f:77:84:b7:37:c3:1d:72:32:d3:a4:fe:07:36:
         b3:84:58:04:ba:50:7f:95:cc:9b:ff:2d:32:37:19:19:b4:26:
         bc:02:89:0b:23:39:03:1c:1f:6d:52:bd:f2:88:b5:32:48:a2:
         e1:d4:63:33:ad:77:df:a3:96:7a:51:93:22:17:bc:38:74:47:
         ce:81:79:f2:17:d0:a3:3c:a6:f7:eb:bc:42:07:47:7d:68:0c:
         15:2b:1d:18:92:71:eb:f5:06:81:6c:50:17:a1:f7:47:a2:4b:
         cf:b7:f3:cc:d2:37:c2:df:96:5b:56:43:86:72:25:3b:79:27:
         d3:d9:0a:d9:56:43:c1:35:6c:c3:bf:2d:2a:40:65:95:ad:6d:
         4f:3e:1b:2f:bc:a0:8d:ef:9f:0e:7b:19:b6:98:cc:a2:b3:57:
         1c:fe:a4:ef:92:21:b0:9e:53:7e:dc:e3:57:1e:0c:0d:a6:33:
         7c:27:da:1c:ad:d1:ae:73:c1:8b:7a:d6:4a:3f:3d:58:79:67:
         e6:96:54:be:ed:0c:41:29:8e:57:63:97:d5:03:ae:f8:f1:4b:
         c6:ed:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:12:20 2026 by rpki-client