Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383938303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383938303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          Msif3q7nr92JIlB+002P5oMZDJNfARHTAQ7qq017tMA=
Subject key identifier:   9B:8B:10:AC:83:1B:C9:46:82:99:23:99:F0:82:27:B7:B8:D2:C5:EE
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       2534915726F4E1FCEA72010514EA3E32846ABA00
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383938303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:25 +0000
ROA not before:           Sun 03 May 2026 02:59:25 +0000
ROA not after:            Sun 02 May 2027 03:04:25 +0000
asID:                     133798
IP address blocks:        2402:5680:8980::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:34:91:57:26:f4:e1:fc:ea:72:01:05:14:ea:3e:32:84:6a:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:25 2026 GMT
            Not After : May  2 03:04:25 2027 GMT
        Subject: CN=9B8B10AC831BC94682992399F08227B7B8D2C5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:59:e2:64:45:b9:2e:e4:5d:e6:1f:eb:cc:
                    e3:c8:25:88:54:1e:8f:04:3d:44:f7:fa:67:ab:58:
                    fc:0e:14:96:ab:e1:e2:39:43:ed:71:86:4f:57:b9:
                    32:15:80:ea:db:35:a2:1d:aa:bd:5b:0d:67:0e:42:
                    42:d3:18:68:0e:ec:ec:8f:3e:c2:43:61:84:75:5b:
                    31:20:8b:90:97:35:1a:a7:e4:38:0e:ad:c5:fd:f6:
                    a7:4f:03:52:73:19:76:46:a6:94:e6:49:39:e8:2e:
                    ff:d3:96:93:a4:14:76:fb:23:d2:aa:67:35:5e:50:
                    75:db:b8:61:b8:62:6d:98:d3:18:11:f2:86:82:02:
                    77:b7:5a:26:c6:2a:23:83:59:12:65:1a:51:ad:90:
                    0b:72:40:dd:9e:de:7f:5e:97:d2:61:2f:60:c2:3b:
                    dd:8d:d0:2c:30:79:ef:7c:a1:54:6c:f0:be:a0:13:
                    8e:f7:bc:32:ca:0f:c3:52:70:23:a5:85:34:7f:7a:
                    a8:99:87:9d:8d:e5:2a:fc:87:6b:a7:09:94:91:a0:
                    31:c5:b7:7b:92:50:36:ac:e6:a0:14:09:57:d6:cb:
                    71:ba:c9:3b:e3:10:b2:53:94:fb:a6:cd:e1:7a:88:
                    80:78:7e:0f:d1:20:fd:1f:b9:64:de:02:c1:09:78:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8B:10:AC:83:1B:C9:46:82:99:23:99:F0:82:27:B7:B8:D2:C5:EE
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383938303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8980::/44

    Signature Algorithm: sha256WithRSAEncryption
         a7:49:d0:d2:ff:92:4b:6e:79:52:ba:a6:7d:dd:75:a7:65:cb:
         ea:da:0a:7e:be:ac:04:20:62:94:54:d2:02:e0:60:bc:31:28:
         1f:d8:8d:ad:af:40:22:9d:5c:a8:02:65:fa:72:2d:e7:f1:6c:
         c9:2b:da:94:31:29:e8:75:ee:40:41:55:b3:4b:4d:d6:fb:51:
         1f:de:11:7c:23:cb:0d:f2:c9:62:11:31:a8:ba:58:28:f6:2e:
         e5:27:e7:42:44:66:86:a8:b0:2a:5a:ad:85:de:d6:69:74:49:
         26:b8:dd:cb:c9:ba:3f:f5:03:ab:14:97:ab:32:1f:2a:1e:64:
         f4:d9:2e:29:8c:70:f7:d8:6a:5f:3d:17:8e:6a:8f:66:1c:b6:
         43:d9:d5:f2:f6:6d:3f:68:31:5b:4f:f0:40:29:f8:cb:c7:d9:
         f7:1d:d6:4e:b8:d6:1e:49:21:6f:af:68:41:7e:45:b5:5b:ad:
         07:1d:b5:12:05:0b:73:b0:42:92:c8:7e:ed:3a:09:3d:59:26:
         6c:6a:4b:c1:33:6f:85:a9:e1:a1:08:91:37:ef:07:45:22:b1:
         3d:29:74:67:ff:a5:89:67:7b:19:c9:95:90:50:b8:d0:13:c0:
         31:9f:67:a7:c5:62:40:c8:e6:99:0b:00:d6:c2:b2:a2:6f:08:
         83:7f:1e:58
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUJTSRVyb04fzqcgEFFOo+MoRqugAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2
MzIxQTVDMDAeFw0yNjA1MDMwMjU5MjVaFw0yNzA1MDIwMzA0MjVaMDMxMTAvBgNV
BAMTKDlCOEIxMEFDODMxQkM5NDY4Mjk5MjM5OUYwODIyN0I3QjhEMkM1RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZzlniZEW5LuRd5h/rzOPIJYhU
Ho8EPUT3+merWPwOFJar4eI5Q+1xhk9XuTIVgOrbNaIdqr1bDWcOQkLTGGgO7OyP
PsJDYYR1WzEgi5CXNRqn5DgOrcX99qdPA1JzGXZGppTmSTnoLv/TlpOkFHb7I9Kq
ZzVeUHXbuGG4Ym2Y0xgR8oaCAne3WibGKiODWRJlGlGtkAtyQN2e3n9el9JhL2DC
O92N0Cwwee98oVRs8L6gE473vDLKD8NScCOlhTR/eqiZh52N5Sr8h2unCZSRoDHF
t3uSUDas5qAUCVfWy3G6yTvjELJTlPumzeF6iIB4fg/RIP0fuWTeAsEJeFdhAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUm4sQrIMbyUaCmSOZ8IInt7jSxe4wHwYDVR0j
BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB
RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB
NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzOTM4MzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAiYAwDQYJKoZIhvcNAQELBQADggEBAKdJ0NL/kktueVK6pn3ddadly+raCn6+
rAQgYpRU0gLgYLwxKB/Yja2vQCKdXKgCZfpyLefxbMkr2pQxKeh17kBBVbNLTdb7
UR/eEXwjyw3yyWIRMai6WCj2LuUn50JEZoaosCparYXe1ml0SSa43cvJuj/1A6sU
l6syHyoeZPTZLimMcPfYal89F45qj2YctkPZ1fL2bT9oMVtP8EAp+MvH2fcd1k64
1h5JIW+vaEF+RbVbrQcdtRIFC3OwQpLIfu06CT1ZJmxqS8Ezb4Wp4aEIkTfvB0Ui
sT0pdGf/pYlnexnJlZBQuNATwDGfZ6fFYkDI5pkLANbCsqJvCIN/Hlg=
-----END CERTIFICATE-----
Generated at Wed May 13 12:28:33 2026 by rpki-client