Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386565303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a386565303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          bQ2PzRgYgo3MiypaMMOaQrAkMTl9JQney06NLix2L7M=
Subject key identifier:   2B:AD:BB:8A:59:CE:AA:82:0C:91:F8:89:0F:AB:5E:9D:B4:CB:FE:95
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       325FF4F204FAF1D9251DB4286759C606CCCC9816
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386565303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:29 +0000
ROA not before:           Sun 03 May 2026 02:59:29 +0000
ROA not after:            Sun 02 May 2027 03:04:29 +0000
asID:                     133798
IP address blocks:        2402:5680:8ee0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5f:f4:f2:04:fa:f1:d9:25:1d:b4:28:67:59:c6:06:cc:cc:98:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:29 2026 GMT
            Not After : May  2 03:04:29 2027 GMT
        Subject: CN=2BADBB8A59CEAA820C91F8890FAB5E9DB4CBFE95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:ea:52:90:d5:d7:85:94:3f:8b:a4:35:49:
                    38:d1:51:76:49:ec:b2:78:99:20:9a:38:57:42:54:
                    a1:3e:f7:90:c8:73:ac:c2:5e:46:d3:0b:0c:69:6f:
                    65:15:18:87:5c:8a:9c:46:11:81:3e:fc:8c:49:d6:
                    18:91:f8:78:45:f2:74:25:ef:41:1a:37:a0:b6:f1:
                    f5:e3:cd:8a:56:25:bd:27:da:58:21:54:68:e7:6f:
                    48:97:1e:e4:80:a1:9b:10:70:a8:36:80:d9:73:03:
                    9a:87:ea:fe:62:1b:8d:99:a7:ff:8f:f6:ef:a4:d3:
                    b3:d4:ff:cb:0f:77:a6:f7:c3:6f:3c:83:c8:d4:d2:
                    55:f8:85:1c:83:47:cf:75:2e:b9:6b:8b:76:13:8c:
                    91:95:f7:40:31:75:a2:45:67:a7:57:e8:d4:eb:f0:
                    46:15:ab:0d:24:19:eb:94:89:7f:dd:2e:6e:cc:10:
                    ef:ba:18:3e:d6:28:0b:66:4f:3e:7e:97:f5:52:41:
                    9a:e0:6f:27:28:41:b4:e2:26:fe:cc:c1:3a:53:b1:
                    d0:43:d1:25:90:ee:ba:b8:ab:16:31:7c:c8:2d:02:
                    6c:0c:8d:0d:4b:3a:1e:da:f1:52:a2:c9:5e:9e:72:
                    39:a0:4e:52:24:93:33:86:a1:28:c0:36:0d:e5:85:
                    40:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AD:BB:8A:59:CE:AA:82:0C:91:F8:89:0F:AB:5E:9D:B4:CB:FE:95
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386565303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8ee0::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:63:ef:d9:ca:b0:12:8f:76:6d:a1:0c:74:43:d3:c4:32:79:
         50:c2:bd:35:c6:9f:c0:09:88:c5:36:d3:6c:67:4a:f4:77:ac:
         d0:a4:8f:65:5a:87:89:bc:d6:bd:88:7a:2e:9c:1b:b7:b6:7a:
         d7:9d:b9:60:23:f2:48:5d:3f:8e:ee:d9:41:96:3f:4e:68:87:
         f2:50:ee:ed:a7:e4:f4:6a:40:19:97:3a:49:95:6d:6f:b0:36:
         90:cc:65:5e:e9:52:d1:8a:e8:35:cc:a9:19:41:76:0f:34:22:
         9b:33:85:f6:39:c2:02:9a:00:71:2f:78:f0:e6:2a:32:34:4d:
         38:41:d0:25:80:c6:fd:d3:22:58:09:b5:65:45:bb:ec:57:51:
         ba:d0:7b:86:3c:83:c2:44:0c:e9:9d:fa:a8:d4:f4:e6:35:67:
         3e:ad:b1:d3:d8:1a:6b:ba:25:29:5b:46:76:f4:4d:37:b7:9a:
         31:db:f5:14:86:2b:35:1c:b8:74:30:49:83:aa:46:cb:a5:db:
         9f:55:55:06:13:a9:b6:6d:09:60:4a:5a:10:c7:aa:40:7c:96:
         81:39:aa:3c:f6:e1:a8:e0:19:d2:02:26:f4:a3:c9:32:67:f5:
         6d:42:d0:59:86:3e:b0:17:65:d1:c6:0f:a8:7c:be:a8:55:78:
         63:69:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:49:21 2026 by rpki-client