Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313031323a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313031323a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          gcK+pqJGEc+f4D2WBOCc7GUa0VaQrxTAkfx+JnB9KGI=
Subject key identifier:   9A:BD:F9:63:86:82:1B:37:69:F6:78:22:7A:13:B8:46:DE:A8:0F:E4
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       248F30602130EDE2F2B05D7D096E4020AC204547
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313031323a3a2f34382d3438203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:15 +0000
ROA not before:           Sun 03 May 2026 02:22:15 +0000
ROA not after:            Sun 02 May 2027 02:27:15 +0000
asID:                     63859
IP address blocks:        2402:8780:1012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8f:30:60:21:30:ed:e2:f2:b0:5d:7d:09:6e:40:20:ac:20:45:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: May  3 02:22:15 2026 GMT
            Not After : May  2 02:27:15 2027 GMT
        Subject: CN=9ABDF96386821B3769F678227A13B846DEA80FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:16:1a:93:14:6b:7f:e2:aa:5d:00:92:5c:
                    0d:47:69:ee:a3:e7:cf:4a:a6:37:30:d7:f0:fb:28:
                    a9:28:5d:92:19:44:f0:3b:54:cf:bb:2d:97:97:42:
                    e2:3b:c1:8c:fc:3a:7c:24:89:1c:44:18:ae:a1:90:
                    d5:ae:15:94:fd:c8:2e:b7:db:fb:0a:72:85:5b:f3:
                    55:df:ae:bd:d2:47:1c:00:69:2d:80:9e:cf:60:ba:
                    93:37:ed:3d:7c:c5:67:11:77:82:57:00:23:17:c0:
                    c8:c0:f6:1b:87:02:eb:b0:81:22:50:91:87:08:7c:
                    07:c9:dc:25:bd:6e:e4:63:b1:ed:29:74:3c:9e:0a:
                    b0:72:b9:9f:6e:f7:24:bd:47:ef:d1:bc:52:51:a9:
                    e1:b4:d8:97:74:d1:5e:41:61:57:eb:51:13:ee:78:
                    db:c9:37:0e:cf:f3:b4:b1:61:bb:6f:80:88:04:e3:
                    b3:e9:7e:e0:12:ae:53:17:8f:c4:5f:d3:49:90:d8:
                    bb:75:2c:32:b0:2f:62:95:ed:ee:2d:a1:23:7d:62:
                    c6:7b:5a:4e:5a:83:e2:b0:64:ec:03:3b:e4:8a:44:
                    7a:91:67:04:e7:b5:96:9b:45:ae:8d:fc:00:b4:60:
                    b7:75:68:86:cd:33:4c:ab:10:be:ca:68:f6:b0:7f:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BD:F9:63:86:82:1B:37:69:F6:78:22:7A:13:B8:46:DE:A8:0F:E4
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313031323a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1012::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:c3:50:ea:0d:ca:1d:1a:15:b7:28:4f:91:99:5c:2b:d9:c6:
         14:60:d7:c1:a7:e9:d7:4c:24:32:85:c8:5a:8c:fe:03:0f:2c:
         5e:0c:89:26:59:f1:13:2b:a9:00:17:a6:83:dc:c7:44:3c:ec:
         39:32:a6:28:07:8e:0f:1e:85:b7:34:c1:3f:c8:d7:cb:88:6a:
         ef:35:7f:20:c5:42:d4:ad:a5:df:97:65:a6:46:af:1e:bb:66:
         93:70:64:bc:7f:41:8a:95:81:cc:e8:ae:22:f1:32:f1:62:58:
         a6:29:6e:0e:66:61:f2:8f:c9:b3:08:c2:e6:1c:62:0c:d6:e5:
         29:51:13:e2:60:f8:63:0a:7f:e2:8b:e7:5c:a5:33:7d:d9:ff:
         88:f6:4c:42:68:3e:6a:dc:e2:97:4d:07:a6:8e:4e:91:20:db:
         90:15:06:23:0c:f9:59:44:2a:8b:46:de:1c:06:47:31:81:c3:
         f3:a7:d0:4f:79:5a:c4:87:61:02:dc:d7:3f:27:53:81:99:95:
         36:01:45:5e:42:a1:fb:94:ac:6a:2e:09:79:54:0d:51:0f:1b:
         69:9d:2d:c8:9b:2d:6e:6f:39:a7:61:dd:b8:b6:22:00:82:74:
         2b:c4:eb:e6:c1:73:9c:d0:dc:33:95:09:21:89:2d:82:83:37:
         0c:80:1b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:37 2026 by rpki-client