Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386630303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a386630303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          yerfE2LveP2HiajXmyuvBeobG3EdpJaADku3+s+kCAg=
Subject key identifier:   10:DD:3A:B7:DA:09:6D:54:FA:42:1F:DD:D8:79:C0:C3:BE:BE:F0:05
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       50384D5A82B5BB9B5901918649414442EF660C95
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386630303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:03 +0000
ROA not before:           Sun 03 May 2026 02:59:03 +0000
ROA not after:            Sun 02 May 2027 03:04:03 +0000
asID:                     133798
IP address blocks:        2402:5680:8f00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:38:4d:5a:82:b5:bb:9b:59:01:91:86:49:41:44:42:ef:66:0c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:03 2026 GMT
            Not After : May  2 03:04:03 2027 GMT
        Subject: CN=10DD3AB7DA096D54FA421FDDD879C0C3BEBEF005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:4f:a7:10:1c:f9:9f:2f:21:45:b3:c4:21:
                    cf:1d:57:63:ee:d7:d5:df:28:82:9b:fe:b1:45:f0:
                    8b:a5:da:a8:8a:86:25:20:7d:fa:c5:2f:ac:ce:f4:
                    6a:ce:2e:36:b4:5c:2f:46:33:c9:72:66:63:b2:00:
                    bf:76:fc:42:aa:8c:d0:aa:15:bb:e0:91:8c:76:2e:
                    73:19:8e:b3:ad:5b:67:e7:f0:4b:2b:59:72:bc:f6:
                    46:a3:1e:d8:9a:96:51:b0:9f:db:15:04:0c:ce:13:
                    0a:7b:db:d0:b0:38:24:24:44:87:a5:a3:25:e3:ff:
                    1f:ca:e0:69:50:06:30:52:a2:01:20:54:61:a5:aa:
                    48:2c:87:97:75:26:49:4d:c6:17:47:9d:a2:1e:50:
                    11:c0:8e:89:14:af:46:2f:ec:3c:e6:22:a2:9b:d7:
                    33:9a:4d:bc:71:34:9d:f6:a2:3c:10:c2:3f:70:41:
                    35:b1:bd:ad:48:9f:da:26:ff:d7:b4:0c:3b:95:a1:
                    76:3f:d9:dc:4e:9b:d9:b7:65:89:6a:9b:2e:4c:89:
                    c3:65:e6:07:7e:d5:23:ec:84:7d:ed:c8:2e:30:3e:
                    e4:86:20:65:9a:72:bb:c2:11:d8:53:83:dc:64:9e:
                    b2:ed:62:7c:6f:75:3d:ab:64:73:1d:e3:c6:12:e6:
                    6c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DD:3A:B7:DA:09:6D:54:FA:42:1F:DD:D8:79:C0:C3:BE:BE:F0:05
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386630303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8f00::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:68:d6:1a:99:44:cd:cf:34:f8:24:eb:08:63:1f:8f:af:ce:
         21:ab:8f:e1:e3:14:d5:36:3e:46:2d:38:d5:da:01:00:61:d7:
         94:90:f6:95:a4:12:c6:01:9b:68:e2:b5:e5:cb:a4:8d:47:48:
         fc:47:5f:cd:02:3e:14:ad:c2:0f:0c:aa:79:88:93:5b:0e:43:
         8b:e4:39:b1:cd:10:d5:61:a9:39:42:20:8d:f7:03:87:1e:7b:
         49:3d:11:b9:e1:6c:29:8f:ff:97:e4:60:18:4f:d8:29:57:3a:
         ef:72:ec:04:62:50:aa:69:09:63:19:54:12:24:d2:e7:0f:18:
         54:b1:08:dd:e3:df:84:26:a7:9d:8c:80:b3:79:45:9e:24:40:
         1d:34:0f:a6:64:c0:d4:47:0e:ec:65:af:69:96:d7:76:d8:a9:
         2e:54:aa:69:db:19:d7:d9:85:10:06:3e:b9:27:e7:26:f5:80:
         cb:19:9d:0d:57:dc:ed:92:a9:c1:b9:12:18:91:03:19:bd:d7:
         99:d5:85:ad:1b:35:17:f6:10:2d:36:c7:49:eb:93:88:f8:dc:
         92:ae:f2:37:e3:ad:b7:0a:dc:d1:31:5e:e4:ed:ae:ed:a6:e6:
         22:68:ac:0b:c1:65:37:91:33:51:aa:e1:45:77:7d:62:81:98:
         04:5f:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:53 2026 by rpki-client