Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383861303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383861303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          yJSc5v6GPhlpNXdpMXghyI6MddogU1zDk+kR1RXADqk=
Subject key identifier:   F0:AE:52:E9:7B:BE:29:5F:1B:90:EF:B1:32:4F:12:6C:7E:04:57:0C
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       A3101D81FFB3C5AB2E98430742F269927F0984
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383861303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:24 +0000
ROA not before:           Sun 03 May 2026 02:59:24 +0000
ROA not after:            Sun 02 May 2027 03:04:24 +0000
asID:                     133798
IP address blocks:        2402:5680:88a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a3:10:1d:81:ff:b3:c5:ab:2e:98:43:07:42:f2:69:92:7f:09:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:24 2026 GMT
            Not After : May  2 03:04:24 2027 GMT
        Subject: CN=F0AE52E97BBE295F1B90EFB1324F126C7E04570C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:57:b5:7a:e8:2b:19:89:6f:04:01:74:d0:
                    f7:d4:b1:7a:a4:6a:ba:60:da:0e:74:a5:2b:06:af:
                    62:1c:15:90:4e:18:70:4c:da:64:15:28:43:f1:f9:
                    a7:94:37:30:96:52:a1:5e:79:b1:a0:7a:3d:67:ae:
                    f4:94:61:56:6b:8f:d8:78:70:74:80:55:82:93:51:
                    79:6f:3e:27:16:fb:ad:a3:32:52:08:f9:5b:9c:f2:
                    91:50:fd:ed:41:6e:ce:df:5e:9b:a1:62:86:e7:c1:
                    83:f4:dc:ae:de:d0:7d:ad:ab:94:68:fd:aa:9d:a6:
                    b5:ba:e2:5b:c8:77:19:3c:38:45:1b:ee:b8:7d:08:
                    d9:d6:f9:2f:da:9b:74:33:36:d2:84:6e:63:8b:a3:
                    6c:36:10:cb:3f:a0:b1:48:0c:c5:b2:59:92:2c:8f:
                    81:07:2e:a8:4c:1b:37:7f:ec:32:72:55:62:e3:aa:
                    2d:c9:f8:55:87:45:35:c0:b9:3e:f8:79:6c:a8:92:
                    8a:ee:74:d7:93:51:21:69:9a:27:5c:72:f8:bc:53:
                    6e:17:08:19:a9:3b:85:36:3e:55:d7:96:d2:27:f4:
                    4c:07:4c:8c:83:fc:c7:cf:f8:a8:f8:df:9c:2e:22:
                    3b:1a:07:4b:c4:e6:3a:f7:7b:e6:33:41:42:0d:1e:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AE:52:E9:7B:BE:29:5F:1B:90:EF:B1:32:4F:12:6C:7E:04:57:0C
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383861303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:88a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b9:a7:e1:86:5f:83:0a:a6:e2:c5:87:52:a3:1e:fb:1d:37:f7:
         c3:70:51:f0:d2:30:9b:51:49:4b:25:6a:c8:5f:2f:a8:78:46:
         ef:a5:0b:a8:4b:68:52:43:18:06:80:01:a2:4b:5c:78:95:15:
         4b:7a:71:58:85:8d:af:dd:87:43:e6:59:64:36:0d:6b:8c:93:
         70:61:19:b9:76:18:41:95:7a:ec:b8:9a:54:d8:a7:76:91:4f:
         b8:e1:3a:0f:15:61:bb:bf:9e:db:50:9b:bb:0f:4e:ad:00:07:
         d3:07:73:ef:5c:dc:52:0f:64:aa:7f:47:fa:dd:51:52:fc:91:
         4c:63:2a:56:3b:d5:e7:c9:56:13:cc:a9:16:6e:25:75:2b:e5:
         03:c9:bd:9c:92:b9:31:7b:c7:d3:ac:79:f1:03:fb:44:6b:95:
         75:bc:13:29:a8:f1:62:86:0e:82:c0:47:2f:ff:ed:3a:a1:11:
         f1:30:f1:08:73:df:63:11:7a:3e:8c:47:6b:1c:83:a8:7f:e6:
         0c:df:2d:3e:ec:e5:68:b9:77:84:a0:07:03:aa:d2:00:6c:0e:
         53:f0:17:3b:c8:4d:58:84:53:5c:1a:b5:74:95:22:30:78:be:
         24:40:63:68:29:8d:b8:ba:fc:cf:e8:66:1e:ca:e1:53:5d:07:
         45:8b:b0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:02 2026 by rpki-client