Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393938303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a393938303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          Wdp7R3QpVEHs5ewyLjqb8Z30udvpedEvCcZce0kOO7s=
Subject key identifier:   C9:2C:6C:45:CD:5E:74:04:9D:86:FD:32:DC:09:DB:12:55:F4:B9:28
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       63E8260C419148C21A37EAC941A9E07AB195671E
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393938303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:05 +0000
ROA not before:           Sun 03 May 2026 02:59:05 +0000
ROA not after:            Sun 02 May 2027 03:04:05 +0000
asID:                     133798
IP address blocks:        2402:5680:9980::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e8:26:0c:41:91:48:c2:1a:37:ea:c9:41:a9:e0:7a:b1:95:67:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:05 2026 GMT
            Not After : May  2 03:04:05 2027 GMT
        Subject: CN=C92C6C45CD5E74049D86FD32DC09DB1255F4B928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:9f:7d:86:4e:6a:84:49:6d:d1:ca:ab:b0:
                    b3:5d:ce:5f:9f:5b:24:a0:70:a8:63:b3:28:d1:a6:
                    1f:ff:cf:7d:ae:06:60:9a:33:f6:b5:fe:29:76:55:
                    f3:7c:62:64:6a:58:69:7c:af:71:c9:69:ea:40:89:
                    f1:a1:a2:a0:64:5f:43:42:93:22:fd:da:ac:39:9f:
                    b7:f5:ec:05:20:c0:df:2c:14:52:fc:48:f4:55:5d:
                    07:0e:fb:7b:4b:b9:f8:f7:a4:9f:03:0e:5f:e2:97:
                    06:9a:59:6c:46:03:b9:be:c0:a6:6e:5d:92:b9:fd:
                    44:98:af:ff:3d:3b:ea:f3:90:bc:74:a8:13:4f:0f:
                    2b:05:13:46:0b:fe:58:6f:e1:6d:e2:58:98:5b:fe:
                    0e:69:73:00:12:cd:75:bf:2b:84:cf:07:36:f5:be:
                    cb:2c:b5:8e:ce:7d:29:67:41:69:55:a3:ea:59:76:
                    2e:db:fd:a9:a1:f6:b3:62:7c:70:94:c1:d6:82:ee:
                    13:c1:29:68:0f:f1:14:ff:dc:d8:b5:3e:72:04:ad:
                    6a:b8:d0:20:32:38:13:c3:29:76:85:f6:19:65:d5:
                    40:c9:d8:ff:7b:4f:65:22:fe:3d:95:04:a2:36:bb:
                    9a:2b:fc:00:ad:d4:eb:f4:35:ce:5d:8d:d1:13:4a:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2C:6C:45:CD:5E:74:04:9D:86:FD:32:DC:09:DB:12:55:F4:B9:28
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393938303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:9980::/44

    Signature Algorithm: sha256WithRSAEncryption
         53:1e:0b:b8:d6:cf:b3:02:f5:3b:b5:ea:0c:fe:15:8c:87:3e:
         3c:a8:23:a9:ba:dc:54:1a:54:65:16:62:a4:9e:51:9e:e8:1a:
         73:69:b2:da:3c:3d:05:7b:0e:ef:e7:39:28:73:1f:2f:fd:5e:
         0e:02:ab:2b:22:b8:03:cb:b3:62:c9:61:42:bb:26:9f:1c:5b:
         14:29:90:bb:34:d1:81:ff:4b:b7:3a:10:b2:8e:7b:90:b2:2f:
         e1:30:f3:47:90:1f:6c:d7:9f:08:2a:42:01:f5:de:e6:0e:9f:
         26:4f:c5:fd:0b:5c:76:8e:69:80:66:c9:e3:95:a9:64:3b:dd:
         bc:ff:e5:52:54:43:70:fd:5f:75:fb:05:65:af:f1:37:30:61:
         af:a2:4e:a8:a2:2f:98:c7:94:98:5e:17:3b:0b:b5:f9:01:53:
         75:3b:93:2e:0d:d4:22:ac:3d:32:c4:21:ec:28:a5:06:2e:36:
         23:cb:93:da:99:e6:4d:ae:d1:e7:37:43:a0:3a:cb:28:35:bb:
         62:0f:8d:de:77:95:80:08:3d:b0:f0:fd:6e:44:45:3d:16:41:
         fd:03:09:14:e2:75:f3:06:11:69:fe:af:23:2e:13:e1:c9:53:
         21:99:4c:32:e5:21:b8:f8:c3:2c:e1:39:c3:02:9e:c5:c7:56:
         cb:38:ed:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:46:42 2026 by rpki-client