Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386564303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a386564303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          srJeBARMu5Iy/Iuw8jCLt4/JL2K93KK/4FTyilF9uhE=
Subject key identifier:   5B:F8:77:6B:1B:37:BF:E0:81:C4:8D:59:61:0E:00:61:C5:23:60:88
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       4BADF269C33F197EB79927B36D0FB70347B66C3C
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386564303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:21 +0000
ROA not before:           Sun 03 May 2026 02:59:21 +0000
ROA not after:            Sun 02 May 2027 03:04:21 +0000
asID:                     133798
IP address blocks:        2402:5680:8ed0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ad:f2:69:c3:3f:19:7e:b7:99:27:b3:6d:0f:b7:03:47:b6:6c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:21 2026 GMT
            Not After : May  2 03:04:21 2027 GMT
        Subject: CN=5BF8776B1B37BFE081C48D59610E0061C5236088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:b2:94:00:26:9f:18:6b:e0:9b:e0:5d:0b:
                    99:be:fe:3b:8c:8a:1f:3c:e3:5e:88:e2:25:e1:8a:
                    d6:da:7b:c1:1c:ca:db:f2:b5:91:e3:49:52:35:bd:
                    ed:8e:82:5c:6b:7c:e6:39:c0:3a:53:41:3c:5f:55:
                    f4:f4:5c:37:55:4c:f0:c8:05:e0:63:30:2c:5e:1c:
                    d7:14:b5:86:c3:19:2c:24:13:a3:51:db:b0:42:d6:
                    a8:f7:4f:52:05:34:78:50:9d:a7:b9:78:72:0e:17:
                    12:18:c2:a6:0a:36:c7:af:53:b7:17:a9:1b:92:e6:
                    32:c9:0c:a3:0c:5b:13:28:54:43:12:62:0e:8c:89:
                    d9:1b:64:14:90:fd:bc:07:92:26:52:f1:31:2e:2e:
                    f1:cc:ea:47:d1:44:9c:4a:32:17:63:3c:28:bf:88:
                    37:ef:e9:e1:1f:e0:c6:21:99:1c:b0:e9:4e:93:67:
                    83:53:00:c6:c2:0f:68:2b:88:15:6b:96:3d:c0:c8:
                    bd:1c:dd:39:b2:02:4d:d7:2d:86:65:1b:4c:65:63:
                    19:b8:3a:1b:b6:2f:4d:12:20:1b:31:1c:9a:11:d7:
                    d2:c0:36:cb:a1:b0:9a:01:3c:d3:a3:da:b1:c1:56:
                    1f:a7:a1:6a:62:34:08:4d:d4:44:1a:46:e1:59:f2:
                    e8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F8:77:6B:1B:37:BF:E0:81:C4:8D:59:61:0E:00:61:C5:23:60:88
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386564303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8ed0::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:ad:33:dd:1d:61:86:c9:6e:13:70:d0:6f:39:8c:62:48:74:
         a7:de:6b:5f:9e:2a:e3:d7:8a:75:a4:2f:01:c1:ec:5f:43:a8:
         d8:14:09:3d:bd:df:98:f6:c0:33:bd:ea:84:c7:c2:f6:62:2d:
         ff:9a:d2:4e:8d:05:76:88:c5:61:b4:cf:13:d4:19:80:cd:ba:
         f1:89:bf:3d:2e:61:e0:b9:8e:56:d6:4a:fd:26:4a:d1:18:79:
         c5:ee:ec:94:7c:d2:59:7f:9f:c6:e4:23:4a:12:c1:e1:6e:b1:
         c8:5e:47:4b:7f:d8:c5:2b:f1:b4:d8:b1:cf:b5:a7:57:b8:b9:
         57:c8:8c:12:c6:72:0e:db:57:58:fd:c9:08:b0:53:7c:39:c6:
         c2:78:45:2a:6f:c2:8c:bf:1b:22:17:c6:15:a2:72:6f:e2:68:
         7b:81:fa:e5:57:a0:be:e9:55:94:cc:20:e7:6b:f6:18:bf:7c:
         56:69:b5:0c:02:20:14:fe:61:2b:44:9a:19:41:d9:1c:97:cf:
         4e:04:7b:77:33:92:5b:2b:a6:98:21:e8:ad:04:02:a7:cd:94:
         e2:92:99:97:51:b4:d4:d7:65:ff:bc:f0:6d:48:49:99:d0:7e:
         e8:11:33:7c:7d:77:1c:c8:51:16:16:7c:af:51:c4:cb:44:47:
         0b:9e:14:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:52 2026 by rpki-client