Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          G3mpZmD64zWPzoaI+PEWGj9N85YGqwYb2GjVMXfv318=
Subject key identifier:   38:0E:94:66:31:A6:2D:D0:17:A0:B0:46:AA:47:A2:F0:7F:1C:BA:99
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       0617FFCE9E16F9063C94AB981F7DA5CCE4ECD800
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:16 +0000
ROA not before:           Sun 03 May 2026 02:22:16 +0000
ROA not after:            Sun 02 May 2027 02:27:16 +0000
asID:                     63859
IP address blocks:        2402:8780:1005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:17:ff:ce:9e:16:f9:06:3c:94:ab:98:1f:7d:a5:cc:e4:ec:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: May  3 02:22:16 2026 GMT
            Not After : May  2 02:27:16 2027 GMT
        Subject: CN=380E946631A62DD017A0B046AA47A2F07F1CBA99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:5a:7e:3f:9f:92:41:2f:b7:de:f1:98:f7:
                    c9:9d:91:05:c7:47:ab:d4:48:b2:b6:87:b8:e3:f8:
                    7a:74:96:b9:1c:c4:5f:05:d9:8d:5b:7e:fa:40:7a:
                    ec:e2:3b:ce:d8:f4:20:04:dd:85:a8:2e:3b:1a:c1:
                    b6:08:00:38:73:80:b5:93:2d:b2:91:57:ab:bf:b0:
                    80:1a:86:87:c2:f9:2c:71:86:e6:39:69:50:ad:7c:
                    53:ab:38:18:53:55:c2:37:22:05:1b:a8:63:89:8a:
                    5f:97:ed:df:48:68:54:ad:99:a9:5e:69:ea:bf:e0:
                    03:ca:25:0a:ce:4c:c8:65:8a:32:22:b1:d0:25:32:
                    47:37:ea:ce:89:06:c2:61:11:0e:64:c5:71:08:78:
                    58:d8:bc:cf:a5:3c:fe:ea:0e:e2:de:19:7d:80:49:
                    25:8e:a9:a6:ac:1d:11:aa:eb:2b:01:12:68:54:1d:
                    8c:d1:c9:44:06:4c:9e:61:41:df:82:08:ae:43:be:
                    ce:80:b3:9d:a5:a1:6b:75:a7:d8:08:d7:b5:b0:21:
                    72:d6:a3:52:ca:1c:ba:5b:ea:c1:24:2f:2f:2a:28:
                    50:2a:0b:4b:fd:5d:df:a0:ed:08:99:a8:5b:5b:5d:
                    47:ac:86:52:3e:e2:bc:6f:d8:0c:fd:a3:4d:0b:7e:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0E:94:66:31:A6:2D:D0:17:A0:B0:46:AA:47:A2:F0:7F:1C:BA:99
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1005::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:6f:18:77:53:f9:ea:ab:1b:8e:96:12:a0:09:28:72:b3:43:
         aa:a1:51:0a:b1:93:0a:5e:ba:b2:7d:65:0c:92:73:b3:c6:7b:
         b9:93:4b:c9:f6:65:89:8c:27:d7:11:fe:02:ab:55:2b:d2:11:
         2b:f5:91:12:e4:9c:7a:13:70:ce:df:50:c0:e3:c2:46:04:69:
         9f:97:5b:b4:2f:7b:2c:44:1c:b0:11:15:2c:63:91:19:de:16:
         6c:0c:f2:bd:fd:55:ad:a2:a2:3e:13:4f:f7:bd:ac:ea:00:2a:
         48:18:aa:6f:58:d9:fd:d9:62:9b:6e:ff:20:11:78:5c:c4:32:
         a6:3d:b5:b4:1c:04:85:59:30:39:1a:cb:9a:3f:da:3f:78:3e:
         cb:82:32:05:d3:b3:6e:51:0d:ad:73:04:1d:3b:66:c1:13:bd:
         2b:3e:62:4e:18:ae:11:8b:69:b8:d4:b2:25:4e:e0:68:4c:68:
         e2:87:57:1a:39:98:6f:b4:04:2a:fa:0e:48:6d:ab:9b:b5:8f:
         af:6d:58:a2:e1:86:8c:b3:2d:92:95:8e:39:67:6e:ea:e8:98:
         88:0e:53:7e:51:65:19:5a:ec:3d:2a:6b:ce:66:cb:44:e4:b1:
         10:f7:ce:bf:6d:0f:da:17:dc:c3:a0:0b:0a:65:fe:ad:f9:d9:
         f3:63:12:22
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBhf/zp4W+QY8lKuYH32lzOTs2AAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNDNDI1MDRGNzA0RTUzNkFEREY0RDQxREYwMjc5NjVB
NjJGN0IxMTAeFw0yNjA1MDMwMjIyMTZaFw0yNzA1MDIwMjI3MTZaMDMxMTAvBgNV
BAMTKDM4MEU5NDY2MzFBNjJERDAxN0EwQjA0NkFBNDdBMkYwN0YxQ0JBOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwi1p+P5+SQS+33vGY98mdkQXH
R6vUSLK2h7jj+Hp0lrkcxF8F2Y1bfvpAeuziO87Y9CAE3YWoLjsawbYIADhzgLWT
LbKRV6u/sIAahofC+SxxhuY5aVCtfFOrOBhTVcI3IgUbqGOJil+X7d9IaFStmale
aeq/4APKJQrOTMhlijIisdAlMkc36s6JBsJhEQ5kxXEIeFjYvM+lPP7qDuLeGX2A
SSWOqaasHRGq6ysBEmhUHYzRyUQGTJ5hQd+CCK5Dvs6As52loWt1p9gI17WwIXLW
o1LKHLpb6sEkLy8qKFAqC0v9Xd+g7QiZqFtbXUeshlI+4rxv2Az9o00Lfn1vAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUOA6UZjGmLdAXoLBGqkei8H8cupkwHwYDVR0j
BBgwFoAUY8QlBPcE5Tat301B3wJ5ZaYvexEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzEvNjNDNDI1MDRG
NzA0RTUzNkFEREY0RDQxREYwMjc5NjVBNjJGN0IxMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82M0M0MjUwNEY3MDRFNTM2QURERjRENDFERjAyNzk2NUE2MkY3
QjExLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04
NTk4LWI3Y2QxMDEzNDNjYS8xLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDMwMzUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH
gBAFMA0GCSqGSIb3DQEBCwUAA4IBAQBvbxh3U/nqqxuOlhKgCShys0OqoVEKsZMK
XrqyfWUMknOzxnu5k0vJ9mWJjCfXEf4Cq1Ur0hEr9ZES5Jx6E3DO31DA48JGBGmf
l1u0L3ssRBywERUsY5EZ3hZsDPK9/VWtoqI+E0/3vazqACpIGKpvWNn92WKbbv8g
EXhcxDKmPbW0HASFWTA5GsuaP9o/eD7LgjIF07NuUQ2tcwQdO2bBE70rPmJOGK4R
i2m41LIlTuBoTGjih1caOZhvtAQq+g5IbaubtY+vbVii4YaMsy2SlY45Z27q6JiI
DlN+UWUZWuw9KmvOZstE5LEQ986/bQ/aF9zDoAsKZf6t+dnzYxIi
-----END CERTIFICATE-----
Generated at Wed May 13 05:55:30 2026 by rpki-client