Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383934303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383934303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          +uHzGtrOKZZUtl/Rsa4jgb0Z45Ju9lpo4YZfrFhpGmY=
Subject key identifier:   3E:30:39:76:56:7F:BF:21:71:B2:F0:30:C4:74:F2:AC:3F:92:C7:C1
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       3C5D2B4A60973029239B3BAA5996206187C6B871
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383934303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:12 +0000
ROA not before:           Sun 03 May 2026 02:59:12 +0000
ROA not after:            Sun 02 May 2027 03:04:12 +0000
asID:                     133798
IP address blocks:        2402:5680:8940::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5d:2b:4a:60:97:30:29:23:9b:3b:aa:59:96:20:61:87:c6:b8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:12 2026 GMT
            Not After : May  2 03:04:12 2027 GMT
        Subject: CN=3E303976567FBF2171B2F030C474F2AC3F92C7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:4e:30:8b:72:a5:5e:e6:bc:9b:30:69:fd:
                    31:5d:41:db:18:a0:d5:b8:5d:ba:6c:7d:bc:2c:a0:
                    28:c5:0d:40:fe:86:fb:f2:e0:8d:e0:6b:ed:2b:c6:
                    ad:1b:5d:9f:c8:a4:7d:44:9d:a7:62:35:cc:6a:c7:
                    d6:b3:a7:f9:60:60:7a:1b:3e:d3:90:bd:2b:52:f4:
                    a9:51:08:49:d5:77:19:6a:e7:33:93:5b:a5:e7:53:
                    7e:64:fd:49:1c:fc:c6:49:22:de:64:49:ff:7f:23:
                    39:60:a2:a2:e4:5e:8e:95:3c:53:b5:41:aa:20:6e:
                    99:98:36:f6:17:38:b5:06:5a:fa:4d:5d:be:01:a4:
                    b4:47:ac:53:00:84:db:e0:f6:44:8b:4f:04:55:02:
                    57:cf:36:c9:9f:75:ed:c2:8b:04:1b:fc:e2:30:a7:
                    a0:c9:04:ed:2e:54:53:cd:71:34:31:03:a6:1e:7d:
                    09:89:47:c1:4e:47:44:55:c9:b3:21:4f:28:12:ab:
                    a9:1e:6b:5a:d1:0f:ef:8b:2e:fb:e8:fb:88:c0:c5:
                    b5:49:2a:56:5a:39:e8:23:b6:34:4a:6e:7f:91:b1:
                    99:e0:2e:8a:a4:c8:c6:05:4d:1d:2e:ee:ed:d3:d6:
                    b9:e3:74:47:d1:b6:ec:99:26:67:75:52:71:7e:43:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:30:39:76:56:7F:BF:21:71:B2:F0:30:C4:74:F2:AC:3F:92:C7:C1
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383934303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8940::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:1b:46:f8:d8:d3:5e:66:69:0b:b0:91:5b:c8:d9:bc:e1:32:
         50:c2:1b:7d:92:fd:8c:13:8a:fe:94:9f:1c:1d:e1:8b:0f:56:
         ce:fc:bb:02:50:54:a3:87:ad:c2:51:b0:0c:53:59:cb:90:bc:
         00:ea:8e:bc:f0:2c:e0:a3:c4:77:3d:ed:e2:7f:d1:dd:e2:29:
         df:70:02:e6:32:45:a4:36:4c:9f:e1:39:4a:49:ae:ee:37:9f:
         6b:40:fd:b8:3a:ee:d7:6d:c3:1c:b0:bf:71:7e:3e:89:fe:b0:
         c2:70:6f:70:bf:f9:84:47:35:02:30:1a:bb:be:3e:35:48:bc:
         14:be:72:c3:b3:6f:be:0e:a4:ba:4a:22:92:a1:81:38:05:6c:
         ec:1d:0c:86:12:69:90:f4:a9:a0:5a:ae:f9:f7:f3:8e:93:65:
         f4:84:54:a9:db:67:0c:f9:04:0e:8f:1b:29:db:ec:a4:36:a8:
         ea:f7:4f:20:cb:19:62:c2:7f:0d:3b:0e:f8:d5:f3:8f:1f:56:
         75:bf:c4:0a:59:73:a7:ae:91:ed:20:25:5a:40:f7:d0:b5:3f:
         5a:82:28:82:8e:11:2c:bf:68:98:24:7e:c2:d6:82:12:2d:6d:
         1f:76:33:6f:6b:ce:10:08:63:13:2a:3e:94:6f:d7:0b:10:c9:
         55:ff:39:0f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUPF0rSmCXMCkjmzuqWZYgYYfGuHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2
MzIxQTVDMDAeFw0yNjA1MDMwMjU5MTJaFw0yNzA1MDIwMzA0MTJaMDMxMTAvBgNV
BAMTKDNFMzAzOTc2NTY3RkJGMjE3MUIyRjAzMEM0NzRGMkFDM0Y5MkM3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uE4wi3KlXua8mzBp/TFdQdsY
oNW4XbpsfbwsoCjFDUD+hvvy4I3ga+0rxq0bXZ/IpH1EnadiNcxqx9azp/lgYHob
PtOQvStS9KlRCEnVdxlq5zOTW6XnU35k/Ukc/MZJIt5kSf9/IzlgoqLkXo6VPFO1
QaogbpmYNvYXOLUGWvpNXb4BpLRHrFMAhNvg9kSLTwRVAlfPNsmfde3CiwQb/OIw
p6DJBO0uVFPNcTQxA6YefQmJR8FOR0RVybMhTygSq6kea1rRD++LLvvo+4jAxbVJ
KlZaOegjtjRKbn+RsZngLoqkyMYFTR0u7u3T1rnjdEfRtuyZJmd1UnF+Q32NAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUPjA5dlZ/vyFxsvAwxHTyrD+Sx8EwHwYDVR0j
BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB
RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB
NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzOTM0MzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAiUAwDQYJKoZIhvcNAQELBQADggEBAAIbRvjY015maQuwkVvI2bzhMlDCG32S
/YwTiv6Unxwd4YsPVs78uwJQVKOHrcJRsAxTWcuQvADqjrzwLOCjxHc97eJ/0d3i
Kd9wAuYyRaQ2TJ/hOUpJru43n2tA/bg67tdtwxywv3F+Pon+sMJwb3C/+YRHNQIw
Gru+PjVIvBS+csOzb74OpLpKIpKhgTgFbOwdDIYSaZD0qaBarvn3846TZfSEVKnb
Zwz5BA6PGynb7KQ2qOr3TyDLGWLCfw07DvjV848fVnW/xApZc6euke0gJVpA99C1
P1qCKIKOESy/aJgkfsLWghItbR92M29rzhAIYxMqPpRv1wsQyVX/OQ8=
-----END CERTIFICATE-----
Generated at Wed May 13 13:04:33 2026 by rpki-client