Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383966303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383966303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          gizO22mnZbWK+dVLahOieGlVCOp8/ME6/IuxYpb4oY0=
Subject key identifier:   96:74:C2:4F:6C:EB:B9:5A:41:C1:C2:CE:82:93:29:7A:C8:96:F8:91
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       6BEA3D9EEE463C739205573176556311B8001DE9
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383966303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:28 +0000
ROA not before:           Sun 03 May 2026 02:59:28 +0000
ROA not after:            Sun 02 May 2027 03:04:28 +0000
asID:                     133798
IP address blocks:        2402:5680:89f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ea:3d:9e:ee:46:3c:73:92:05:57:31:76:55:63:11:b8:00:1d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:28 2026 GMT
            Not After : May  2 03:04:28 2027 GMT
        Subject: CN=9674C24F6CEBB95A41C1C2CE8293297AC896F891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:28:2e:f7:be:e6:cd:fe:bf:aa:38:6f:7a:
                    b9:6b:7c:b9:84:a5:12:fe:57:f2:65:93:a2:93:d4:
                    c5:6b:7d:11:a0:6f:6c:87:b4:ad:0b:f1:e6:eb:dd:
                    ba:eb:50:c3:9f:68:87:86:6e:65:f2:fc:d4:13:89:
                    4b:ce:33:28:a8:d0:3e:7a:f8:22:17:9e:10:b7:5c:
                    7c:ea:fa:72:3e:9f:d7:4a:0e:e9:34:51:79:c8:71:
                    9f:f0:e8:27:63:a3:af:3f:a3:72:cd:bb:54:07:53:
                    d7:1d:c9:e1:77:3a:dc:97:5e:aa:58:47:8e:bb:69:
                    d7:cf:11:04:86:73:a7:54:81:dd:23:b0:2b:cd:de:
                    05:bc:de:a4:e6:0f:a1:98:6e:2c:37:4a:b3:6f:72:
                    2a:16:7e:bf:e7:47:15:a9:74:fd:b4:80:f1:98:b2:
                    54:37:86:ad:62:6c:57:b4:f0:80:2d:5b:45:93:2b:
                    c3:3a:8b:13:f9:56:d9:a2:c9:2b:82:81:7c:35:9d:
                    f6:52:04:9b:bb:07:c4:43:5a:e5:fe:b3:da:63:9d:
                    0d:8c:fd:b0:53:d3:ae:5b:d9:28:8f:f0:e2:0a:5d:
                    6a:ed:1f:a7:42:7b:62:a2:67:2f:57:d5:2b:8e:2a:
                    bf:5c:8c:ac:86:b9:26:39:b3:76:75:d4:66:49:23:
                    f9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:74:C2:4F:6C:EB:B9:5A:41:C1:C2:CE:82:93:29:7A:C8:96:F8:91
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383966303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:89f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b5:5e:af:84:52:60:b0:1a:be:1a:91:60:0d:7a:b4:e0:71:c1:
         65:55:ac:1d:94:e6:14:aa:f2:1e:e6:a8:cb:b3:8b:4d:9a:e4:
         7c:26:1e:bb:0b:7b:e9:ef:55:7c:2e:69:46:18:33:5b:d8:13:
         0e:c9:ed:b4:ba:f0:84:75:69:70:4b:05:09:9b:52:4c:75:70:
         38:50:5a:95:74:f7:0f:34:c3:a7:64:4b:36:f5:7d:c0:54:c2:
         42:30:31:de:b4:c3:d7:22:db:1a:d1:04:4b:25:b6:17:f6:64:
         5f:36:a2:bf:8c:b0:9e:d1:36:f8:a2:af:4c:a8:fe:70:68:8c:
         1b:d9:8c:dd:a0:45:b1:c5:ae:90:50:f7:e4:93:6b:e0:8a:46:
         a6:4b:a6:6d:f7:55:71:93:49:6d:76:a5:02:23:4f:ed:c1:16:
         b1:e0:ac:86:fc:ac:8d:d1:4b:b2:23:ea:8a:a8:c1:71:43:16:
         22:1f:e7:a4:3b:41:75:bd:cd:c7:b0:c0:f8:da:42:6b:5a:eb:
         db:46:8e:91:c4:b2:eb:74:a5:fd:e0:74:53:80:0d:6f:af:8e:
         d4:af:2e:53:a7:36:3e:8a:18:27:c9:7b:6f:b6:2e:6a:fb:d2:
         c6:11:a5:a9:28:6a:a9:4e:76:f0:69:65:cc:f6:44:1d:9c:30:
         0b:00:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:41 2026 by rpki-client