Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383962303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383962303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          dm34H54Ctr2gq0ISqGMVuu7yDnIoI/dX0qILizgWh2E=
Subject key identifier:   6B:9E:DA:52:E6:B1:1D:79:B1:F1:9E:37:7C:6C:4A:31:CE:2E:0E:93
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       795D8ADF75A64EB8930E16736E3217FBBFE3E6F5
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383962303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:25 +0000
ROA not before:           Sun 03 May 2026 02:59:25 +0000
ROA not after:            Sun 02 May 2027 03:04:25 +0000
asID:                     133798
IP address blocks:        2402:5680:89b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5d:8a:df:75:a6:4e:b8:93:0e:16:73:6e:32:17:fb:bf:e3:e6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:25 2026 GMT
            Not After : May  2 03:04:25 2027 GMT
        Subject: CN=6B9EDA52E6B11D79B1F19E377C6C4A31CE2E0E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:ea:5b:bf:a7:65:2e:08:76:a2:12:0f:ae:
                    cf:e3:2f:e5:99:4d:48:9a:da:7b:da:e8:9b:9f:44:
                    0e:df:a8:95:22:81:5c:39:8d:c5:b7:28:ae:de:73:
                    f0:d3:1c:4a:04:dd:a3:86:34:6a:dd:3b:31:da:07:
                    80:25:3d:cb:8a:af:27:4a:3e:64:49:29:70:e1:4c:
                    25:8e:45:9b:4d:e1:66:07:0e:66:e7:1e:d3:33:f4:
                    18:bf:87:2c:34:53:19:2e:e3:08:37:4f:75:47:fa:
                    45:57:ab:f5:05:b3:9d:91:a4:7a:46:cd:f4:3f:62:
                    50:9f:a8:7a:64:56:97:3f:b0:db:f5:b6:0e:27:f1:
                    fa:83:49:ae:12:31:bc:83:05:3e:53:9e:c0:a6:18:
                    eb:f4:9c:9a:8c:e2:bf:8b:03:37:3b:df:a1:51:04:
                    b0:f0:2b:99:5b:83:e0:f3:40:41:d9:88:13:f4:09:
                    ca:5d:13:59:ff:88:54:f2:f0:83:04:49:2d:37:91:
                    80:52:da:4c:1d:08:4e:4d:13:9f:c4:64:0f:73:cc:
                    63:06:eb:2b:b4:62:36:b0:0c:b5:94:bb:42:94:2a:
                    79:68:f2:f1:ce:cc:18:da:17:51:cf:35:0a:cb:31:
                    32:85:74:f7:35:29:35:1c:6b:5c:80:d3:04:3a:b4:
                    60:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9E:DA:52:E6:B1:1D:79:B1:F1:9E:37:7C:6C:4A:31:CE:2E:0E:93
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383962303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:89b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         63:f9:f6:4c:43:51:c1:fe:61:57:2c:89:84:aa:8c:fc:e3:91:
         a1:ee:f8:a8:98:3c:0d:56:15:21:b4:f9:3e:34:6d:8a:0f:3a:
         cf:0d:ab:69:f7:19:f0:c6:be:fe:e5:bb:a1:bc:2d:41:26:ca:
         b6:f6:34:16:50:56:5c:dc:e0:29:d0:40:fa:00:3d:0c:03:be:
         9e:24:0a:04:df:c9:5f:09:87:47:17:4b:fb:17:f4:1b:e6:79:
         bb:18:2c:f7:04:e2:03:5d:31:f5:ca:34:e4:ed:49:72:bc:6a:
         3f:32:f5:94:4e:4b:4f:10:47:9e:d3:c9:be:30:b6:27:b8:2b:
         22:45:8a:69:3e:b7:d8:23:f5:29:c8:63:d6:eb:db:f4:c0:88:
         3c:27:68:35:01:38:d9:37:ec:cc:5c:e6:32:11:7b:ee:06:c1:
         bc:fe:90:cd:b0:27:3b:bd:69:56:c0:af:e6:b6:7f:71:d5:3e:
         e7:c7:cd:03:9b:87:71:a4:88:5a:d9:1b:d4:4f:4b:23:68:68:
         8e:7c:17:47:73:ca:70:46:aa:60:c1:01:cf:7d:7d:8e:c3:6f:
         87:82:a6:37:3e:cc:0e:b2:b3:6f:3b:22:17:c6:50:3b:19:36:
         a0:31:05:6e:c3:b1:30:8a:76:4e:cd:ad:34:be:69:dc:ce:42:
         6d:94:da:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:46:55 2026 by rpki-client