Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383935303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383935303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          3R6/M/92byIAX99sJN+YdyO2Zv7i/qBQaNvXNaZJO2M=
Subject key identifier:   32:58:D4:46:40:F0:99:99:58:35:4E:91:4E:0B:B0:60:F5:64:A4:41
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       1E112C47F77532B5A75738A1A3164010CF02415A
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383935303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:21 +0000
ROA not before:           Sun 03 May 2026 02:59:21 +0000
ROA not after:            Sun 02 May 2027 03:04:21 +0000
asID:                     133798
IP address blocks:        2402:5680:8950::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:11:2c:47:f7:75:32:b5:a7:57:38:a1:a3:16:40:10:cf:02:41:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:21 2026 GMT
            Not After : May  2 03:04:21 2027 GMT
        Subject: CN=3258D44640F0999958354E914E0BB060F564A441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ff:cf:1c:b3:93:a4:dc:5d:60:f4:8b:d2:42:
                    7a:20:9c:63:cb:2f:60:43:5b:2b:47:d8:11:af:f3:
                    5e:99:0b:ae:84:e7:f2:e2:b4:e4:d0:4e:c2:5b:22:
                    ee:14:23:9b:b0:2e:9f:24:98:e2:be:6e:8e:91:85:
                    e2:8c:c6:3d:63:ad:b7:16:71:3d:84:18:86:68:f1:
                    85:25:4e:a7:f9:df:91:60:e5:1d:46:2a:29:71:f0:
                    92:fb:36:a7:89:1c:9f:61:86:b4:65:15:9d:be:3f:
                    1e:fe:ef:97:ce:e6:f0:8e:4c:c0:81:70:5d:8a:7d:
                    ed:d5:2b:75:f0:8c:ab:3f:83:9d:50:1c:84:4d:6a:
                    d9:52:91:0b:f0:a3:b4:d0:e0:ac:96:e1:d1:53:b4:
                    b6:49:58:ff:e5:7c:28:e6:34:9a:a7:ec:96:91:78:
                    e8:73:66:ca:d0:9a:ac:9e:7c:68:08:e6:d0:23:d3:
                    be:8c:67:aa:4a:f9:bb:56:ef:50:38:5d:e2:c2:d8:
                    71:9b:8a:dc:15:9e:15:d5:ac:88:eb:b4:5d:97:17:
                    8a:77:4a:89:be:5b:6e:6c:1f:1a:77:fa:e1:ac:93:
                    89:62:20:25:86:e7:7b:2d:13:c8:ea:d7:89:a0:63:
                    81:f5:b7:cb:2c:8b:03:3d:6c:63:bc:91:f0:60:39:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:58:D4:46:40:F0:99:99:58:35:4E:91:4E:0B:B0:60:F5:64:A4:41
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383935303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8950::/44

    Signature Algorithm: sha256WithRSAEncryption
         47:f6:0d:fe:4e:2e:1f:71:b3:fe:21:1e:40:7a:3c:67:10:bd:
         6c:e0:80:8b:d2:a6:68:12:cf:c0:58:f1:e8:b7:34:31:a9:6e:
         ab:e8:0e:2b:e1:11:1a:cd:7f:00:f0:3a:08:15:4c:57:f8:de:
         d8:70:5f:11:73:b5:83:99:19:80:53:32:51:60:6b:72:8f:89:
         03:77:ec:c0:6d:3b:80:e0:d2:e4:8d:be:1d:ff:23:8c:22:b3:
         f3:83:5f:f2:dc:3b:91:48:7f:06:98:43:cc:54:77:f5:8e:a6:
         cb:89:7c:be:86:b0:ee:4f:b5:0d:db:8e:b4:22:05:a1:e1:67:
         85:37:a9:47:2e:14:af:3e:4a:0f:bf:a9:cb:f3:66:f7:e2:b6:
         5d:3a:9f:9f:a9:8b:75:73:db:79:82:53:d5:60:7a:db:ce:f8:
         de:c7:55:58:9b:96:02:e2:a4:21:41:07:d6:17:01:b7:89:31:
         c3:27:81:30:8b:9e:78:4d:0d:fc:d9:02:a0:34:2a:79:ca:ce:
         b6:63:3b:6e:43:4e:3c:61:30:ef:83:f0:32:73:20:56:5f:55:
         a8:b5:47:4c:3a:b5:ae:f0:c1:b7:f3:e9:ad:e8:dd:96:ec:b5:
         b6:95:66:55:1d:6d:ce:66:d8:fd:11:4a:eb:e8:2f:dc:7a:40:
         7a:1a:21:19
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUHhEsR/d1MrWnVzihoxZAEM8CQVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2
MzIxQTVDMDAeFw0yNjA1MDMwMjU5MjFaFw0yNzA1MDIwMzA0MjFaMDMxMTAvBgNV
BAMTKDMyNThENDQ2NDBGMDk5OTk1ODM1NEU5MTRFMEJCMDYwRjU2NEE0NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz/88cs5Ok3F1g9IvSQnognGPL
L2BDWytH2BGv816ZC66E5/LitOTQTsJbIu4UI5uwLp8kmOK+bo6RheKMxj1jrbcW
cT2EGIZo8YUlTqf535Fg5R1GKilx8JL7NqeJHJ9hhrRlFZ2+Px7+75fO5vCOTMCB
cF2Kfe3VK3XwjKs/g51QHIRNatlSkQvwo7TQ4KyW4dFTtLZJWP/lfCjmNJqn7JaR
eOhzZsrQmqyefGgI5tAj076MZ6pK+btW71A4XeLC2HGbitwVnhXVrIjrtF2XF4p3
Som+W25sHxp3+uGsk4liICWG53stE8jq14mgY4H1t8ssiwM9bGO8kfBgOXKVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUMljURkDwmZlYNU6RTguwYPVkpEEwHwYDVR0j
BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB
RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB
NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzOTM1MzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAiVAwDQYJKoZIhvcNAQELBQADggEBAEf2Df5OLh9xs/4hHkB6PGcQvWzggIvS
pmgSz8BY8ei3NDGpbqvoDivhERrNfwDwOggVTFf43thwXxFztYOZGYBTMlFga3KP
iQN37MBtO4Dg0uSNvh3/I4wis/ODX/LcO5FIfwaYQ8xUd/WOpsuJfL6GsO5PtQ3b
jrQiBaHhZ4U3qUcuFK8+Sg+/qcvzZvfitl06n5+pi3Vz23mCU9VgetvO+N7HVVib
lgLipCFBB9YXAbeJMcMngTCLnnhNDfzZAqA0KnnKzrZjO25DTjxhMO+D8DJzIFZf
Vai1R0w6ta7wwbfz6a3o3ZbstbaVZlUdbc5m2P0RSuvoL9x6QHoaIRk=
-----END CERTIFICATE-----
Generated at Wed May 13 14:08:27 2026 by rpki-client