Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393965303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a393965303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          R/G4Xc6bhdK42xAZDK/y+HmMElEKvOwYfQFM8fHvJb4=
Subject key identifier:   88:CD:95:0A:EB:8B:F8:55:A2:F0:E5:E7:B8:5C:23:EF:E6:9E:91:F2
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       287572EF8668A3350060053EF662576FC2B6F673
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393965303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:26 +0000
ROA not before:           Sun 03 May 2026 02:59:26 +0000
ROA not after:            Sun 02 May 2027 03:04:26 +0000
asID:                     133798
IP address blocks:        2402:5680:99e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:75:72:ef:86:68:a3:35:00:60:05:3e:f6:62:57:6f:c2:b6:f6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:26 2026 GMT
            Not After : May  2 03:04:26 2027 GMT
        Subject: CN=88CD950AEB8BF855A2F0E5E7B85C23EFE69E91F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6b:22:72:35:dc:d5:a6:8d:04:93:2f:41:2a:
                    f9:c6:54:55:4c:18:bb:f0:b6:8b:67:ff:49:ad:3f:
                    0e:df:1a:b7:84:d7:44:37:df:48:83:0c:41:8d:20:
                    c5:0d:50:57:3e:46:e8:1d:1a:db:74:fb:67:8d:80:
                    fc:21:66:b7:35:98:8b:39:e4:d3:42:74:cc:8a:79:
                    a1:4e:09:69:08:38:8b:4e:a9:b2:f3:65:b2:59:03:
                    d3:fe:4a:06:e9:88:d1:59:e3:11:54:c8:fd:fe:f1:
                    26:a7:67:77:bf:a6:ab:e1:ad:4a:c2:58:74:cd:8b:
                    69:c6:13:05:e2:18:77:0b:59:18:86:37:a0:1c:25:
                    c6:62:8c:b7:8d:d2:7c:ea:51:41:02:8c:84:c4:c6:
                    4e:b0:94:36:a5:7f:b6:70:89:50:74:9a:28:2c:30:
                    33:08:9e:4c:28:42:be:bc:92:c8:c8:bc:94:6d:98:
                    bc:1c:07:f0:ac:98:01:78:b5:24:28:a5:3e:19:dd:
                    5e:7a:e2:48:b9:f0:19:34:65:df:02:28:85:64:86:
                    a6:c7:e2:1a:5a:9c:97:1e:fb:8c:aa:c0:0e:4d:45:
                    7d:19:30:ac:ff:76:8a:d4:b7:f9:d6:c4:fd:dc:d6:
                    8a:0f:3d:02:17:f4:14:fb:b5:1c:03:49:15:87:82:
                    74:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CD:95:0A:EB:8B:F8:55:A2:F0:E5:E7:B8:5C:23:EF:E6:9E:91:F2
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393965303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:99e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:4c:64:4e:4e:8a:6b:34:7e:17:0f:77:50:dd:bb:bb:ca:
         be:0c:a2:99:90:c5:b0:dc:48:0a:95:06:ef:ca:e2:34:e9:06:
         7c:b8:f4:76:86:8f:44:0e:84:0e:05:91:54:cf:17:38:5c:cb:
         a7:37:78:67:af:ee:22:32:55:0a:3b:8f:a9:06:6c:e3:3a:8f:
         27:34:e7:c3:15:6b:e3:20:64:59:4a:e8:77:d4:2d:f4:45:1c:
         79:c3:76:3c:f5:c1:c9:35:71:b8:1e:d6:0f:1d:dc:bd:00:53:
         17:b8:ae:94:56:8b:df:ee:6f:18:82:0a:0c:6f:c1:e1:86:e3:
         84:15:fb:0f:6d:2b:ad:6f:7a:60:71:50:6b:61:69:27:cf:4e:
         6a:b0:d2:38:30:9f:a7:2d:9e:93:31:2e:27:cc:ff:0a:65:13:
         00:77:fb:e2:fe:0d:49:76:99:a9:83:03:91:6a:3a:ae:d6:36:
         f6:35:b6:67:76:f2:39:d7:ad:bb:3a:08:0a:3f:39:a1:60:e2:
         f4:7f:d6:53:0c:59:6a:ce:ee:17:1e:8a:53:20:72:57:38:5b:
         07:96:63:81:c0:27:f4:65:93:64:e5:62:9a:ce:9d:a8:07:1d:
         c2:86:08:3c:9d:a8:50:3a:0e:eb:bc:a0:32:a9:e7:56:6a:1c:
         3d:35:b8:f4
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUKHVy74ZoozUAYAU+9mJXb8K29nMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2
MzIxQTVDMDAeFw0yNjA1MDMwMjU5MjZaFw0yNzA1MDIwMzA0MjZaMDMxMTAvBgNV
BAMTKDg4Q0Q5NTBBRUI4QkY4NTVBMkYwRTVFN0I4NUMyM0VGRTY5RTkxRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5ayJyNdzVpo0Eky9BKvnGVFVM
GLvwtotn/0mtPw7fGreE10Q330iDDEGNIMUNUFc+RugdGtt0+2eNgPwhZrc1mIs5
5NNCdMyKeaFOCWkIOItOqbLzZbJZA9P+SgbpiNFZ4xFUyP3+8SanZ3e/pqvhrUrC
WHTNi2nGEwXiGHcLWRiGN6AcJcZijLeN0nzqUUECjITExk6wlDalf7ZwiVB0migs
MDMInkwoQr68ksjIvJRtmLwcB/CsmAF4tSQopT4Z3V564ki58Bk0Zd8CKIVkhqbH
4hpanJce+4yqwA5NRX0ZMKz/dorUt/nWxP3c1ooPPQIX9BT7tRwDSRWHgnSFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUiM2VCuuL+FWi8OXnuFwj7+aekfIwHwYDVR0j
BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB
RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB
NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzkzOTY1MzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAmeAwDQYJKoZIhvcNAQELBQADggEBAHOdTGROToprNH4XD3dQ3bu7yr4MopmQ
xbDcSAqVBu/K4jTpBny49HaGj0QOhA4FkVTPFzhcy6c3eGev7iIyVQo7j6kGbOM6
jyc058MVa+MgZFlK6HfULfRFHHnDdjz1wck1cbge1g8d3L0AUxe4rpRWi9/ubxiC
CgxvweGG44QV+w9tK61vemBxUGthaSfPTmqw0jgwn6ctnpMxLifM/wplEwB3++L+
DUl2mamDA5FqOq7WNvY1tmd28jnXrbs6CAo/OaFg4vR/1lMMWWrO7hceilMgclc4
WweWY4HAJ/Rlk2TlYprOnagHHcKGCDydqFA6Duu8oDKp51ZqHD01uPQ=
-----END CERTIFICATE-----
Generated at Wed May 13 12:51:58 2026 by rpki-client