Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          5hgqs02RXm1ZntrYSk4tQ5/RQyJ8uqBgUr+Y2soYwvI=
Subject key identifier:   11:76:C1:28:D1:63:BB:1A:1F:37:98:60:22:06:43:EC:DF:C4:84:8E
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       615018E1453516B8FBE6C1EFE1291E8FF94F22D0
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:12 +0000
ROA not before:           Sun 03 May 2026 02:22:12 +0000
ROA not after:            Sun 02 May 2027 02:27:12 +0000
asID:                     63859
IP address blocks:        2402:8780:1009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:50:18:e1:45:35:16:b8:fb:e6:c1:ef:e1:29:1e:8f:f9:4f:22:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: May  3 02:22:12 2026 GMT
            Not After : May  2 02:27:12 2027 GMT
        Subject: CN=1176C128D163BB1A1F379860220643ECDFC4848E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:f4:1c:9e:78:30:db:32:c8:db:42:1f:46:
                    14:3a:32:1f:04:c7:41:9e:10:6a:11:79:8c:4d:f0:
                    da:3c:3a:dd:ee:00:a5:1d:84:bf:7a:f9:08:0f:6e:
                    ab:8f:ac:26:7b:4c:da:e7:21:bc:eb:58:c1:b2:30:
                    56:39:67:8f:e2:bd:8a:96:ba:20:66:82:06:e8:a4:
                    70:00:5a:ef:b5:fe:26:90:99:fb:fe:d6:28:9f:0f:
                    72:90:3d:7b:c2:3f:35:80:fd:25:99:aa:89:54:9a:
                    2e:ae:e1:da:69:22:ff:f9:5e:1e:67:da:92:c9:78:
                    7f:0e:e3:86:04:d5:51:49:b1:42:07:08:8d:d0:32:
                    22:78:aa:d5:b4:86:5f:c4:ef:61:2c:7f:f0:10:7d:
                    2b:39:5c:a8:01:6d:75:4f:56:73:b4:d9:a9:ec:3b:
                    f3:0a:b6:b1:30:38:7e:4d:94:70:5e:f5:a0:10:e2:
                    db:49:42:8d:40:a5:50:dd:9f:3b:26:b4:a6:70:29:
                    a2:d8:08:06:fa:45:89:03:0c:c8:da:cf:63:df:fe:
                    89:51:6d:6f:3a:37:11:e8:dd:99:c8:b0:7a:84:dd:
                    d2:c2:e4:54:26:84:32:00:60:09:d6:bd:dc:f8:fd:
                    9f:51:de:8c:68:57:81:5e:d4:0b:0a:6b:4e:b7:c7:
                    4b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:76:C1:28:D1:63:BB:1A:1F:37:98:60:22:06:43:EC:DF:C4:84:8E
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1009::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:0c:1a:e2:15:c2:1c:0a:99:82:a8:85:13:c8:3f:f3:92:08:
         45:54:f6:cf:66:1a:ad:1e:93:3c:bc:fe:ac:e3:30:11:b6:56:
         8d:76:03:46:17:0b:20:58:d0:3a:62:b0:16:bc:b1:73:a3:0f:
         47:6f:30:25:cc:74:e2:dd:8a:3c:75:c7:95:e2:e8:41:a1:4e:
         d7:d7:17:ea:21:39:fe:cb:8a:45:c7:c4:d9:b7:90:64:f4:02:
         9b:2e:4d:55:76:93:04:75:c7:a4:e3:b3:0a:b3:9a:5c:c0:8d:
         b3:17:d1:31:16:23:cc:de:da:20:d6:d0:0f:1d:08:00:4a:9f:
         97:28:e0:45:d8:ff:f5:8c:93:d4:73:a8:c6:11:88:c7:dd:23:
         8f:4d:a4:87:97:4d:e0:28:fb:d4:fe:6f:5c:ee:b4:7b:bc:fa:
         86:97:7a:36:cc:2a:a9:e7:0a:bc:69:ad:7c:f5:01:04:a0:1a:
         f3:26:8b:56:69:87:ed:fb:7a:99:d9:27:0e:73:a4:e1:67:fe:
         48:24:d6:05:f1:b5:ba:64:3a:dd:03:5d:2f:32:e5:d4:64:8e:
         cd:61:b7:0f:bc:4a:6b:ce:bb:a5:27:4e:7f:ba:99:d2:2a:80:
         65:ed:f4:d1:7a:92:d5:aa:2b:7a:17:8b:cc:19:20:57:8a:e0:
         32:7e:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:38 2026 by rpki-client