Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383965303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383965303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          y/aqqjfGksuEvOZ+zorfrkJj2zMM3inBREArJuslGng=
Subject key identifier:   0D:9F:6E:D1:83:66:AC:71:9C:0F:29:7F:F0:84:64:6E:86:D7:0D:23
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       6CD595645FAE79EFE265A5018FED672D53E347C1
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383965303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:05 +0000
ROA not before:           Sun 03 May 2026 02:59:05 +0000
ROA not after:            Sun 02 May 2027 03:04:05 +0000
asID:                     133798
IP address blocks:        2402:5680:89e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d5:95:64:5f:ae:79:ef:e2:65:a5:01:8f:ed:67:2d:53:e3:47:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:05 2026 GMT
            Not After : May  2 03:04:05 2027 GMT
        Subject: CN=0D9F6ED18366AC719C0F297FF084646E86D70D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:e6:d1:a9:be:18:a3:3b:01:65:b0:68:6c:
                    25:fd:e4:cd:08:e0:bb:d8:b8:e5:ba:ed:06:be:27:
                    d8:8b:09:77:2b:79:24:3d:11:f0:d5:b6:0a:7e:9f:
                    1a:50:bf:52:ca:c3:25:4c:0b:7e:61:42:6b:b4:3d:
                    dd:1b:b3:e2:e0:46:bf:00:77:4d:e2:c9:ec:8f:a9:
                    e1:f0:02:82:90:5b:3d:d9:2b:fd:07:aa:bb:c3:cb:
                    09:a0:d4:4a:3a:73:a3:05:73:96:ac:0a:b9:d7:e0:
                    fc:00:d7:bc:4d:a0:16:31:a0:53:33:6c:f0:c5:e6:
                    ab:bb:bd:a2:bb:d0:6d:9f:26:ba:d4:9c:d0:4c:70:
                    a8:b9:8c:43:fb:cb:8e:bc:6d:73:fd:87:a1:0e:3b:
                    46:a6:1e:6f:5e:cc:29:eb:b6:c8:9e:2e:e5:0b:59:
                    ca:0f:29:f4:11:40:07:a2:00:54:fb:10:f8:ee:f0:
                    7c:a4:be:d6:88:32:42:21:46:81:6c:0a:31:72:4b:
                    14:01:f3:00:21:62:01:95:1a:8e:0c:fd:60:ba:14:
                    39:ab:72:32:e7:0f:b1:87:c3:7e:3a:7b:7c:70:e2:
                    04:00:68:ee:0a:d1:94:e3:ed:9d:69:ae:1e:84:a2:
                    6d:69:a0:c5:09:2d:0d:de:3d:7b:b8:2f:a1:07:0a:
                    ff:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9F:6E:D1:83:66:AC:71:9C:0F:29:7F:F0:84:64:6E:86:D7:0D:23
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383965303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:89e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         47:af:68:19:17:b8:e8:45:9c:89:4e:26:0a:ab:ab:a2:a9:47:
         80:c6:8d:59:80:61:e7:29:5e:34:f8:2e:3f:b5:bb:23:3d:7b:
         d7:09:67:96:77:87:21:a4:67:37:40:28:2f:a8:2c:d5:ea:7b:
         49:c0:a8:27:0f:d5:2b:6d:b2:8d:22:3c:4f:88:9e:60:11:70:
         e4:a5:34:41:f2:63:93:27:04:3b:0a:64:19:2a:67:4f:8a:ce:
         28:2f:4a:5f:5b:00:00:96:b7:c9:70:a3:32:3d:66:61:d4:26:
         6a:c6:70:c9:cc:17:86:0a:23:3b:43:96:ba:96:63:48:d7:ad:
         05:51:d2:c7:1a:44:6e:16:da:96:56:a4:fa:92:03:9d:71:3b:
         aa:96:1e:c3:a4:3d:f5:c6:4d:4f:b5:26:6f:d8:13:69:17:e8:
         b9:9e:60:38:c5:84:b8:6b:1b:d9:fe:20:e6:b6:89:98:20:b4:
         88:b3:a0:f2:77:4f:f6:74:8b:a0:87:e4:74:5d:94:4a:0e:f5:
         ff:e3:c6:16:18:5c:1b:61:e4:84:0f:b6:f1:55:db:98:02:66:
         5c:7c:07:84:f1:6b:b2:7d:a0:c8:0e:d2:ba:cb:0f:28:5e:43:
         0f:74:34:34:d3:91:d4:11:82:74:a5:15:c0:6f:d6:37:3d:ba:
         c2:6b:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:27 2026 by rpki-client