Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396232303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a396232303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          xtiLk06bf84duWJu6nWb1lMkJ0XdZhZW6kbgGRWZ/RE=
Subject key identifier:   BC:C0:9A:0B:E4:F9:2D:06:5D:29:27:34:75:16:47:E1:6A:D7:3F:2B
Certificate issuer:       /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial:       12B020EC57CE1000E53502AC5899F043BA393752
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396232303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Sun 03 May 2026 03:04:31 +0000
ROA not before:           Sun 03 May 2026 02:59:31 +0000
ROA not after:            Sun 02 May 2027 03:04:31 +0000
asID:                     133798
IP address blocks:        2402:5680:9b20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
                          rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b0:20:ec:57:ce:10:00:e5:35:02:ac:58:99:f0:43:ba:39:37:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
        Validity
            Not Before: May  3 02:59:31 2026 GMT
            Not After : May  2 03:04:31 2027 GMT
        Subject: CN=BCC09A0BE4F92D065D292734751647E16AD73F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:95:55:07:55:29:43:9f:36:74:be:b6:1f:7e:
                    50:ca:8f:c8:db:ae:71:e7:ff:37:13:05:c8:af:d5:
                    1b:e9:84:11:42:8c:59:bf:62:b5:55:33:52:11:ff:
                    02:f6:14:0d:c1:a8:b5:80:2f:30:9e:e8:97:00:1e:
                    5d:bf:d0:ac:45:cf:fa:79:04:23:11:8d:43:7c:e7:
                    22:2e:25:8e:f5:4b:95:ba:b2:c8:27:8b:ea:61:e2:
                    f1:17:76:de:b5:c2:ae:aa:58:d5:31:0c:cd:4b:4c:
                    4a:36:e1:5b:b1:b3:de:a0:12:a5:9d:0d:ee:65:c0:
                    d1:e3:67:08:2c:74:81:4d:05:53:3a:02:e6:0a:da:
                    8e:3c:94:f4:d1:8d:4f:1b:54:65:67:15:9b:8a:b4:
                    0e:af:b0:47:37:3a:52:90:88:12:39:9c:b9:6f:1a:
                    2a:eb:0d:9a:62:e0:7a:f0:49:13:bd:3a:c5:15:3d:
                    0f:6f:ac:e2:f3:67:12:f7:c8:ad:30:25:de:45:40:
                    db:32:b2:fc:dd:a1:0f:64:1e:4e:bd:2c:ab:9e:da:
                    83:31:31:24:8d:87:20:34:b0:fb:22:0c:89:cc:b6:
                    1c:d3:96:ca:ba:8d:07:f4:34:5c:fc:a5:a5:cd:35:
                    7b:e9:c5:b7:ff:80:8f:90:4e:8a:ab:76:9e:d3:b5:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C0:9A:0B:E4:F9:2D:06:5D:29:27:34:75:16:47:E1:6A:D7:3F:2B
            X509v3 Authority Key Identifier:
                keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396232303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:9b20::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:85:cd:cc:cb:7b:99:1c:35:b2:87:df:b4:86:65:66:b9:d7:
         2e:b5:e7:18:11:7d:f2:ab:7d:c4:c9:64:4f:cb:a6:58:ba:8a:
         c8:62:61:49:d2:bb:38:59:7e:d4:4a:a5:70:c5:d1:d5:0a:0c:
         74:55:17:3b:5e:63:1d:20:aa:ea:e9:1e:e6:96:67:a2:a0:b6:
         44:32:1b:c2:c9:6f:ec:b8:e1:14:46:6a:de:9c:c8:93:4b:e6:
         c5:a0:bb:92:63:0c:d1:3b:b4:8d:10:bd:e8:3c:77:1c:72:5a:
         e4:5e:2b:15:45:05:ed:3f:12:c0:46:74:4d:08:b2:1f:8b:99:
         86:0d:90:3a:ba:c3:38:e2:a1:0d:10:a6:59:f6:40:9b:5e:37:
         8d:b3:db:b6:9c:46:ff:95:83:48:fa:d0:dc:10:88:34:a8:97:
         aa:83:29:6e:fd:34:82:8c:8a:e4:a9:12:3e:62:ae:4b:64:a0:
         0a:cd:a0:c0:c2:33:b5:26:55:2a:00:ee:42:4a:0b:8b:72:31:
         3a:f2:20:58:da:e9:81:3c:7c:45:78:86:97:6c:a6:9e:53:cd:
         ec:14:82:a2:a6:1f:2c:64:9a:a3:71:5b:cc:6b:65:61:60:4c:
         96:ce:5a:cf:d6:e6:f0:28:ce:a2:68:09:2b:74:64:e0:05:a9:
         1b:26:31:08
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUErAg7FfOEADlNQKsWJnwQ7o5N1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2
MzIxQTVDMDAeFw0yNjA1MDMwMjU5MzFaFw0yNzA1MDIwMzA0MzFaMDMxMTAvBgNV
BAMTKEJDQzA5QTBCRTRGOTJEMDY1RDI5MjczNDc1MTY0N0UxNkFENzNGMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4lVUHVSlDnzZ0vrYfflDKj8jb
rnHn/zcTBciv1RvphBFCjFm/YrVVM1IR/wL2FA3BqLWALzCe6JcAHl2/0KxFz/p5
BCMRjUN85yIuJY71S5W6ssgni+ph4vEXdt61wq6qWNUxDM1LTEo24Vuxs96gEqWd
De5lwNHjZwgsdIFNBVM6AuYK2o48lPTRjU8bVGVnFZuKtA6vsEc3OlKQiBI5nLlv
GirrDZpi4HrwSRO9OsUVPQ9vrOLzZxL3yK0wJd5FQNsysvzdoQ9kHk69LKue2oMx
MSSNhyA0sPsiDInMthzTlsq6jQf0NFz8paXNNXvpxbf/gI+QToqrdp7Tteh3AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUvMCaC+T5LQZdKSc0dRZH4WrXPyswHwYDVR0j
BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB
RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB
NUMwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzk2MjMyMzAz
YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk
AlaAmyAwDQYJKoZIhvcNAQELBQADggEBAJSFzczLe5kcNbKH37SGZWa51y615xgR
ffKrfcTJZE/Lpli6ishiYUnSuzhZftRKpXDF0dUKDHRVFzteYx0gqurpHuaWZ6Kg
tkQyG8LJb+y44RRGat6cyJNL5sWgu5JjDNE7tI0Qveg8dxxyWuReKxVFBe0/EsBG
dE0Ish+LmYYNkDq6wzjioQ0Qpln2QJteN42z27acRv+Vg0j60NwQiDSol6qDKW79
NIKMiuSpEj5irktkoArNoMDCM7UmVSoA7kJKC4tyMTryIFja6YE8fEV4hpdspp5T
zewUgqKmHyxkmqNxW8xrZWFgTJbOWs/W5vAozqJoCSt0ZOAFqRsmMQg=
-----END CERTIFICATE-----
Generated at Wed May 13 13:00:05 2026 by rpki-client