Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          83EO81YygQVBu7fvfZnirT6sCWLMueUnkwaqMnwFLKI=
Subject key identifier:   D5:AE:76:F2:62:76:E8:6A:AB:32:5E:51:9E:08:E2:17:59:08:FD:8D
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       2382999834CB0BFFAE17C1732594F73CF6F05107
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:14 +0000
ROA not before:           Sun 03 May 2026 02:59:14 +0000
ROA not after:            Sun 02 May 2027 03:04:14 +0000
asID:                     133798
IP address blocks:        2402:5680:9b00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:82:99:98:34:cb:0b:ff:ae:17:c1:73:25:94:f7:3c:f6:f0:51:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:14 2026 GMT
            Not After : May  2 03:04:14 2027 GMT
        Subject: CN=D5AE76F26276E86AAB325E519E08E2175908FD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:69:c7:8c:dd:da:69:ec:02:b7:05:55:57:
                    a0:01:5b:fc:92:d4:8c:e6:64:ed:02:45:c7:a8:44:
                    f8:b3:0e:2d:a0:75:b7:e2:b5:41:01:b1:ab:3a:47:
                    96:c6:35:e9:f3:15:08:e6:91:70:47:30:32:67:9a:
                    c6:6c:c2:82:fa:8f:fd:dd:18:a7:e1:44:f2:e3:cf:
                    58:a0:96:37:72:fc:53:43:1a:6b:52:7d:85:52:79:
                    0e:81:23:a5:40:f7:39:ec:76:8d:60:79:60:47:65:
                    77:3e:6f:b8:fe:4b:e4:3a:00:b9:9d:60:4c:35:c8:
                    aa:5f:cd:b5:b1:8f:ca:92:bb:c2:5d:9f:59:bb:49:
                    87:8a:a6:f8:fd:78:39:fd:2a:5e:9b:c2:aa:3c:4c:
                    f1:6c:b2:3b:2f:cd:a4:09:74:fa:d1:6d:15:d3:93:
                    ba:61:88:8b:f2:69:fa:02:3b:26:b1:cf:f3:10:d7:
                    f1:bd:81:67:32:76:8f:4a:38:b5:36:49:01:fa:51:
                    b5:4d:99:d6:84:9a:77:ed:0f:90:2a:d1:34:6e:d8:
                    1c:cf:07:b0:2c:b2:32:72:05:57:98:a7:02:93:ae:
                    ce:90:14:c3:8a:48:6b:29:30:59:ce:cc:d3:9a:0b:
                    88:cd:a9:d0:b1:96:98:56:b8:c2:e2:ae:5f:36:c4:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AE:76:F2:62:76:E8:6A:AB:32:5E:51:9E:08:E2:17:59:08:FD:8D
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:9b00::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:87:57:13:53:bd:53:c0:35:ce:6d:a9:2f:2e:da:e8:7a:53:
         69:9e:0f:28:4b:43:08:29:0c:87:3a:54:dd:c0:b1:4e:f9:d7:
         ff:67:a6:c9:fa:61:f7:b6:00:da:f1:a5:9e:84:95:59:34:86:
         b0:fb:33:bd:3e:c1:3f:de:6a:b0:a3:84:67:9d:7a:de:e1:b0:
         3b:be:88:cb:20:7c:af:d2:72:50:9f:e4:e0:03:7b:8c:f2:53:
         23:a3:34:51:67:5c:df:5c:ec:f4:4d:e4:9c:c5:2e:69:f5:9e:
         6c:a8:50:fa:32:11:88:ad:bb:11:91:48:64:99:4c:1f:59:cc:
         07:51:6a:41:66:53:20:cb:9d:fc:1c:11:3e:0f:9d:cd:46:fe:
         cf:85:8b:e8:38:52:09:d8:5b:6b:7e:7f:fb:06:92:fb:32:8a:
         36:00:9c:c2:2c:55:77:ae:d9:a0:66:7c:16:2c:5e:3e:5d:ee:
         f9:18:50:8b:94:28:66:4b:90:2c:f7:fd:f7:3a:0b:37:ae:03:
         64:9e:10:48:57:75:ce:34:70:1a:e2:24:31:3b:4d:64:01:ee:
         92:2f:d9:41:e3:eb:21:f5:44:b9:da:9d:54:af:37:3b:90:12:
         85:3e:cd:6b:fb:74:bc:c9:db:a6:1b:d4:3c:4f:9f:aa:bb:5b:
         9c:16:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:48 2026 by rpki-client