Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383964303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383964303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          urN2iwBhUlscG0bjMq+U9nhmSzpmi5ODK/PlYaXV1w8=
Subject key identifier:   BD:A7:35:AB:C2:8B:E4:D3:20:D0:8B:0F:F5:6C:A9:DE:6F:BE:34:CB
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       240052F5FBA2EFB7210F1DFF47CEB0FB744FDC49
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383964303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:19 +0000
ROA not before:           Sun 03 May 2026 02:59:19 +0000
ROA not after:            Sun 02 May 2027 03:04:19 +0000
asID:                     133798
IP address blocks:        2402:5680:89d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:00:52:f5:fb:a2:ef:b7:21:0f:1d:ff:47:ce:b0:fb:74:4f:dc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:19 2026 GMT
            Not After : May  2 03:04:19 2027 GMT
        Subject: CN=BDA735ABC28BE4D320D08B0FF56CA9DE6FBE34CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:d9:3c:c2:1b:e9:20:35:27:cc:5d:d0:fc:
                    23:71:2b:a3:1e:3d:20:c2:b2:4d:11:8e:98:d4:95:
                    05:24:68:f0:d4:94:71:9d:41:15:c2:74:c7:5b:8b:
                    7e:83:81:45:48:cc:5a:ff:e1:ae:2e:9b:74:d9:6f:
                    85:e9:e1:78:59:ce:ea:91:7f:3e:78:a8:c5:da:25:
                    29:13:2e:3b:49:7c:c1:5a:38:8f:88:8e:ba:35:a2:
                    70:27:2f:a8:2e:1f:d2:38:d2:6d:63:5a:88:2c:34:
                    45:c8:61:ce:fc:b1:97:15:be:4a:54:5c:9d:4e:06:
                    bc:a1:63:bf:c7:ab:2c:0d:e4:62:ce:12:46:27:f2:
                    5e:8a:85:a1:fa:cc:80:fc:d3:43:36:c1:c1:13:8c:
                    ec:9b:22:9e:64:6f:f9:ea:c1:df:97:50:7b:2c:b5:
                    5d:7b:5c:1d:b4:2e:e1:4a:ef:15:8b:0d:6f:a2:66:
                    65:03:ec:e2:a4:68:e4:0f:30:92:26:e8:88:76:1d:
                    53:dc:86:a2:76:c0:34:cf:f2:a4:ab:ac:cc:7b:4f:
                    d9:50:92:9b:96:a9:e2:39:5f:cc:33:d4:bd:08:48:
                    f1:0e:a1:65:ec:77:83:5a:22:2e:e5:0b:a3:68:ad:
                    21:af:b4:96:3e:7f:3f:35:56:df:6d:88:55:6f:42:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A7:35:AB:C2:8B:E4:D3:20:D0:8B:0F:F5:6C:A9:DE:6F:BE:34:CB
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383964303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:89d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         54:11:fb:1e:f9:f6:e3:fd:a2:4e:0a:7c:de:13:3b:0d:24:bd:
         44:f8:8b:0f:a0:74:0d:9a:47:d7:7e:37:07:fd:6b:c1:3d:0a:
         ab:9e:e0:13:c8:c2:de:91:b4:5f:14:1a:28:dd:35:e2:8e:ce:
         74:ab:cb:b9:5f:66:b9:9b:55:0e:5d:6a:1f:51:3e:56:b4:b8:
         fa:16:41:f8:9c:86:f9:f6:3b:5b:d3:ef:e6:10:d2:7b:12:76:
         f7:b0:76:20:ee:50:38:f9:87:61:ae:55:74:d4:69:df:da:23:
         74:24:ef:ce:63:6a:6d:73:af:13:c1:60:30:47:09:1c:d9:57:
         24:62:da:a5:6e:9e:2a:7d:e7:a9:72:3d:5c:1a:ae:12:9d:14:
         18:ac:a2:d7:16:ef:0f:79:3e:51:1a:85:a2:1c:75:1d:42:0b:
         41:a8:5e:8f:4e:70:c1:e9:80:b4:6a:2d:80:a4:a1:ac:18:cc:
         9b:cc:bf:24:71:fb:d2:a7:24:85:8a:82:b1:b5:e4:1a:20:9c:
         79:ed:5b:3a:0c:ea:48:d0:fb:cc:ef:6e:a2:78:44:87:ac:d5:
         68:6e:54:cd:3a:26:68:05:4c:ef:7f:f3:41:6e:82:08:2f:26:
         0a:98:c4:2d:6d:7b:b2:59:54:77:f7:56:30:72:6f:09:13:1f:
         c5:1d:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:47:05 2026 by rpki-client