Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383936303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383936303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          tcsKt7pm4qFQvPpT77FDfb5e+Yd/bWfmOZypdCA5SZs=
Subject key identifier:   05:ED:41:7B:C2:FE:42:86:DC:48:68:FB:45:D6:65:2C:80:74:B6:9C
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       4E985176DF772FA71566812577EB6879E0834712
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383936303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:30 +0000
ROA not before:           Sun 03 May 2026 02:59:30 +0000
ROA not after:            Sun 02 May 2027 03:04:30 +0000
asID:                     133798
IP address blocks:        2402:5680:8960::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:98:51:76:df:77:2f:a7:15:66:81:25:77:eb:68:79:e0:83:47:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:30 2026 GMT
            Not After : May  2 03:04:30 2027 GMT
        Subject: CN=05ED417BC2FE4286DC4868FB45D6652C8074B69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:75:6d:b7:75:f8:83:e5:2a:e1:10:76:e1:
                    04:a4:f7:52:06:db:83:e0:a2:1e:c2:51:92:02:a7:
                    d7:e6:70:1b:d2:82:83:2d:ac:f2:7e:2c:90:02:0e:
                    db:f3:57:bd:f3:2f:4a:9d:ee:4d:01:af:c2:44:b0:
                    49:d2:58:e5:f9:54:3a:ad:6f:a8:8e:e2:9b:a3:1d:
                    2e:91:4d:2f:d0:52:e1:34:9e:05:84:e9:38:7f:30:
                    1c:3b:2c:f1:bd:dd:eb:7c:8e:13:99:57:cc:14:55:
                    aa:a4:6b:35:da:99:10:21:43:29:0f:d5:38:25:32:
                    d2:de:36:ef:fe:44:66:b1:15:38:7d:a0:32:d5:14:
                    da:c7:35:e4:8d:e9:e4:09:74:70:8c:7f:60:49:ec:
                    fb:a3:4b:3e:31:dc:c0:d4:02:c8:b6:7d:6c:c5:86:
                    d0:21:18:cd:94:6f:0c:37:07:e3:be:07:19:f9:6e:
                    55:a5:87:15:58:56:eb:25:70:e4:ac:ee:8b:b5:8d:
                    ce:bd:f6:c2:01:79:a2:b5:8f:cb:59:e3:af:fd:b1:
                    0d:e8:b0:ac:e3:7f:0d:ff:a0:bc:86:61:01:21:74:
                    81:74:58:57:f5:99:e8:49:74:e9:0d:e4:3b:49:1f:
                    2c:a5:39:1a:74:8e:28:a6:68:ef:a2:5d:d6:94:c9:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:ED:41:7B:C2:FE:42:86:DC:48:68:FB:45:D6:65:2C:80:74:B6:9C
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383936303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8960::/44

    Signature Algorithm: sha256WithRSAEncryption
         71:4b:45:c9:65:07:1f:cc:7e:29:cf:e1:2d:3a:2a:57:9f:60:
         f9:76:08:5a:9d:17:ff:fd:e2:42:4c:f1:46:9d:5b:4d:8b:0f:
         eb:b2:f0:86:55:ec:d8:16:16:02:65:d3:fa:bd:a4:23:2e:ec:
         7d:89:4b:a3:5c:ab:72:11:10:8b:92:a8:a4:78:11:2f:91:76:
         a5:72:2f:ac:4c:74:6b:2d:68:3f:d2:94:6b:da:74:42:f0:2d:
         5d:af:d9:f5:2f:79:01:b6:ef:f7:e0:6c:7e:ab:15:e2:aa:23:
         f6:b1:3b:d1:30:31:e3:df:89:8d:c4:e4:f6:13:64:ae:38:c4:
         dd:e0:07:72:ea:5d:b7:ef:e0:4d:94:0f:f8:50:d2:bf:b5:87:
         80:40:2f:e5:bc:57:4e:f4:d1:a1:71:6d:92:e1:0f:72:e6:e1:
         32:bf:6c:b7:12:50:3b:29:48:12:43:d5:22:40:32:15:b0:80:
         ba:95:76:50:5e:4a:24:d2:31:2f:94:dc:33:e8:0b:86:48:af:
         01:fa:9d:48:fb:d7:bb:11:3a:94:3b:59:60:e4:9d:4d:5c:88:
         e1:5f:f2:b2:81:72:4e:3e:e9:d5:14:4f:94:50:9c:3c:6d:e2:
         d2:72:be:54:aa:34:4a:fb:4e:b0:23:3a:a6:05:1e:c7:c0:b3:
         c0:f5:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:28 2026 by rpki-client