Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383865303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383865303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          hWyJAWhDphTgzz0xlnp+Cjv6D4Noz05C5XTwfRih/2M=
Subject key identifier:   3E:E8:9A:D1:CC:D4:39:B7:62:50:3F:A9:B5:2E:72:89:29:25:A0:EC
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       7B7F69A4FA4BA7F9CCEBB76F6BF6FE75E8CB60
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383865303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:27 +0000
ROA not before:           Sun 03 May 2026 02:59:27 +0000
ROA not after:            Sun 02 May 2027 03:04:27 +0000
asID:                     133798
IP address blocks:        2402:5680:88e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7f:69:a4:fa:4b:a7:f9:cc:eb:b7:6f:6b:f6:fe:75:e8:cb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:27 2026 GMT
            Not After : May  2 03:04:27 2027 GMT
        Subject: CN=3EE89AD1CCD439B762503FA9B52E72892925A0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:09:4c:cb:99:74:85:33:96:93:d8:b2:3a:
                    ed:98:52:f0:08:d9:87:40:a3:8b:2f:32:ad:a9:d1:
                    bd:9e:07:a8:bb:a0:03:6a:5c:c1:50:f3:0c:a8:05:
                    74:f9:49:d7:e3:26:4d:f7:51:a6:19:b6:58:8a:45:
                    45:1b:38:78:25:af:d2:88:76:eb:5d:60:ad:52:e1:
                    53:6c:8b:f6:65:34:ae:85:39:74:15:01:29:95:3e:
                    4c:5a:59:89:ca:12:a2:1c:ec:8f:f9:29:d5:b6:2a:
                    1b:61:b0:cb:dc:4e:52:ed:23:ec:9c:14:ab:05:07:
                    4c:cf:8f:dd:dc:27:49:54:25:a8:04:d3:83:fe:e7:
                    55:29:86:01:ea:38:00:66:1c:14:4f:32:42:74:e8:
                    db:8e:0a:d8:48:70:68:b5:2f:b0:eb:36:80:03:b4:
                    5c:49:53:43:df:9a:95:88:35:f2:c0:f3:b4:f1:c0:
                    e9:f2:b4:e5:5e:0e:ed:27:46:ec:66:9e:c3:cf:7a:
                    88:47:82:18:d5:62:b1:2c:cd:21:7c:af:62:77:50:
                    3b:43:59:6c:1b:3f:9e:06:50:89:61:0a:a1:68:1b:
                    62:10:ae:2d:66:69:a0:79:9b:39:a8:05:6e:5d:27:
                    43:74:3b:33:cb:68:44:6e:17:9a:8a:19:5c:e9:88:
                    2b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E8:9A:D1:CC:D4:39:B7:62:50:3F:A9:B5:2E:72:89:29:25:A0:EC
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383865303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:88e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:5b:e7:ee:22:cc:6c:c5:fa:60:72:21:62:54:58:e5:9c:16:
         34:28:d3:3d:88:7f:b1:b6:ef:b8:6d:f5:d5:85:b0:be:81:6e:
         dd:ac:99:cc:3c:ac:91:81:e5:f8:01:e5:6f:7c:65:ff:e6:f6:
         99:ab:3a:8b:f6:11:db:2a:d9:fd:d3:9f:56:90:cb:80:63:af:
         aa:b8:e0:06:ec:fa:48:a7:6f:4c:bb:ab:97:b1:eb:8b:05:2d:
         a5:53:70:f8:1e:da:c0:31:b7:c6:47:22:3e:90:5d:3b:bf:b8:
         84:1b:a4:ec:11:e1:89:3f:77:94:2a:8e:7a:5b:67:af:b6:8f:
         86:37:84:59:2a:cf:67:79:df:12:13:3c:c0:19:c2:cd:51:0a:
         9e:9f:f3:e6:00:32:95:b2:36:70:cc:f3:72:d3:05:8c:24:ae:
         24:2d:7a:6b:18:6f:9d:12:b7:4a:34:9a:71:4b:86:74:04:31:
         1c:cf:1e:98:80:98:fb:68:80:bb:d4:b1:2a:e3:72:1f:4a:a7:
         0a:08:07:2f:e3:9a:6c:f7:08:50:7e:1d:46:85:a1:6f:99:82:
         0c:bd:a3:51:c4:5a:29:71:6b:cc:89:df:0e:74:0b:d4:4b:7c:
         7a:f9:a0:cc:2c:5f:99:6a:50:32:20:04:c3:14:a7:0d:67:98:
         f3:6a:af:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:02 2026 by rpki-client