Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393138303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a393138303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          AgobrUzq14pixyn1iW6LBgc5ekPot/nntHyAxVWHBNE=
Subject key identifier:   35:15:8E:50:A2:A4:80:A9:D9:29:17:EF:11:C1:C2:04:37:21:64:A6
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       28DDEA982E01B8777F392609B944EFCB09FC1FEA
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393138303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:15 +0000
ROA not before:           Sun 03 May 2026 02:59:15 +0000
ROA not after:            Sun 02 May 2027 03:04:15 +0000
asID:                     133798
IP address blocks:        2402:5680:9180::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:dd:ea:98:2e:01:b8:77:7f:39:26:09:b9:44:ef:cb:09:fc:1f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:15 2026 GMT
            Not After : May  2 03:04:15 2027 GMT
        Subject: CN=35158E50A2A480A9D92917EF11C1C204372164A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:09:3f:02:f0:50:46:fc:6f:84:51:8e:28:
                    7a:33:95:ed:33:80:98:26:fb:d7:ea:7a:8c:e6:96:
                    c5:ee:ba:73:6e:15:b4:0b:e1:35:eb:15:8b:56:2c:
                    bb:f2:7e:2a:e2:f2:aa:3b:2a:4d:eb:67:5d:13:e8:
                    9f:eb:4d:65:53:75:d5:8c:93:04:81:fa:57:3c:68:
                    93:e5:ad:f9:03:f0:b1:d5:33:e9:5c:9c:77:a0:e3:
                    fb:29:ac:8c:72:bc:d1:31:2c:26:44:20:77:61:09:
                    06:67:05:43:b1:f3:94:83:a3:e0:c2:16:7e:5a:62:
                    8d:a4:c4:e7:60:9c:15:2c:b8:47:24:a3:17:25:9b:
                    57:46:82:3a:43:df:88:43:97:46:ac:d4:c0:b2:3c:
                    f4:df:9c:fd:4c:ab:ff:37:f6:bd:91:3c:ac:9c:ba:
                    7a:28:a6:73:5a:1d:45:c9:e6:f6:a9:7b:85:c3:1e:
                    19:e3:32:73:aa:ae:72:8f:cf:68:ef:75:2b:69:6d:
                    01:12:18:6d:37:30:f9:a6:2a:2c:68:ac:27:31:9e:
                    3b:ec:79:d6:53:00:ed:46:3a:5b:f8:db:20:ff:51:
                    c4:d0:e4:b0:c1:49:2c:dd:cb:d2:de:22:d9:1a:5b:
                    c3:12:76:98:42:2d:80:69:50:bb:10:dc:5a:fb:f0:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:15:8E:50:A2:A4:80:A9:D9:29:17:EF:11:C1:C2:04:37:21:64:A6
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393138303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:9180::/44

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:6c:77:48:8d:55:8c:87:34:59:c8:cc:b6:3e:e3:5b:26:
         7d:84:3b:e0:16:f7:6a:39:f0:9c:2a:54:e9:5c:91:d7:9b:74:
         76:11:29:1c:52:ae:fc:35:01:f7:ce:08:92:4a:72:e4:c4:89:
         5b:cc:7c:f2:ff:f0:c8:f8:b3:8b:88:32:e2:33:e6:b7:f6:24:
         29:91:b1:3d:c0:33:7d:f5:a0:b2:b7:10:c3:8b:74:6b:52:5c:
         d9:c8:8d:cd:e7:fd:53:f2:29:72:24:a3:11:7f:c6:f6:1f:36:
         eb:8e:56:32:b1:02:25:8f:07:83:f7:e3:d4:33:24:e7:6c:bd:
         1b:fb:0f:a8:c0:ac:d6:75:97:00:58:8e:64:57:36:ee:51:4e:
         ba:99:37:42:b0:16:7d:54:29:a3:1e:30:03:bc:ba:54:5f:f1:
         bb:14:47:e6:14:65:b7:27:d5:b5:36:71:cf:10:4b:e4:73:c5:
         d3:e1:11:83:1a:5a:49:93:e1:58:a9:d4:b3:44:02:c1:d1:dc:
         22:1a:c7:c7:6f:61:b2:b7:b3:16:dc:d0:c9:e4:6b:09:e0:32:
         55:54:75:08:80:04:35:df:1a:41:f6:c0:02:34:2c:d0:ee:76:
         99:66:9e:0d:bd:ee:0c:a5:f3:c7:28:38:3e:b1:15:3b:8d:be:
         d6:8c:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:34 2026 by rpki-client