Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          E7tRyXIBozKmAWDPU94JKnpIjpmZW93mBbGB/vhSTfw=
Subject key identifier:   B3:C3:6C:90:58:2A:60:7F:F4:D0:4F:B3:80:50:66:B0:1D:59:91:68
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       3B964AAC58C46506944DBD2E9F97B2332B36DC29
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:09 +0000
ROA not before:           Sun 03 May 2026 02:22:09 +0000
ROA not after:            Sun 02 May 2027 02:27:09 +0000
asID:                     63859
IP address blocks:        2402:8780:1029::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:96:4a:ac:58:c4:65:06:94:4d:bd:2e:9f:97:b2:33:2b:36:dc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: May  3 02:22:09 2026 GMT
            Not After : May  2 02:27:09 2027 GMT
        Subject: CN=B3C36C90582A607FF4D04FB3805066B01D599168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:29:92:02:81:c0:60:1a:b5:74:d6:92:bc:
                    2a:7a:fb:92:18:bb:47:cb:e7:b1:e2:2d:93:d8:62:
                    18:1b:bb:2b:bb:ca:c6:f6:88:e3:07:63:1c:6d:05:
                    10:de:69:aa:a8:ee:ca:14:17:9f:6d:7f:d2:20:56:
                    07:91:f4:38:7b:38:61:4e:c9:a6:86:d7:78:19:fc:
                    b3:ba:46:ea:ac:1a:fb:07:ed:65:b8:b1:73:bd:2b:
                    d3:1f:4b:b3:52:3d:b8:5d:ef:68:8b:be:5c:52:13:
                    7d:74:a0:d4:a8:9f:41:c3:ee:42:46:b3:93:ef:f3:
                    62:57:fd:b5:cb:3c:24:2f:36:30:60:3b:d2:78:ae:
                    b9:93:41:dc:4a:79:80:79:0c:22:3e:3b:2a:8a:db:
                    e4:a7:28:f0:6f:f4:f8:0e:cb:33:7c:b7:0d:c9:1f:
                    ec:60:46:b2:02:4a:b5:22:7e:be:af:86:ab:52:d1:
                    a4:af:f2:f5:a3:f4:fd:36:33:fb:eb:c5:58:cf:4e:
                    ef:69:6f:bd:68:a1:e0:db:3e:ad:d6:d2:8f:91:33:
                    c5:50:d8:96:c6:f3:2c:cc:ba:92:06:b9:e2:d9:fd:
                    c7:77:9c:fb:6f:ba:a1:6b:81:75:9f:b8:6f:44:b1:
                    2d:4b:0f:89:84:0e:10:de:89:b0:05:e7:a1:af:a3:
                    0c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C3:6C:90:58:2A:60:7F:F4:D0:4F:B3:80:50:66:B0:1D:59:91:68
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1029::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:c6:ee:3f:85:8c:72:be:42:b2:69:bc:5e:b5:b1:cc:41:1e:
         12:28:b8:3e:dd:16:82:42:c9:29:d2:db:9e:aa:de:13:da:92:
         93:8b:95:b3:6c:e7:96:4f:72:f7:3f:bd:81:06:cd:e6:0e:06:
         91:6c:51:b3:64:c2:00:56:af:1e:6a:91:a4:ad:84:2d:f2:41:
         ea:25:e6:21:a9:9b:17:dc:72:d4:b3:50:04:5e:60:22:3a:b6:
         2f:58:f5:23:6c:bd:e3:89:5b:e0:04:a8:bd:9a:59:e1:bf:99:
         d2:ab:45:f1:90:68:93:06:c0:be:60:43:37:bf:4a:3b:86:55:
         c2:25:41:6a:d9:d2:45:35:ce:a8:07:13:a8:26:fe:f8:61:f6:
         3c:a2:f0:84:cf:22:01:5d:63:3a:e0:d4:38:90:96:ea:41:ee:
         47:40:a1:64:25:29:4b:79:d5:9c:54:10:0c:24:14:e6:b0:39:
         f2:72:48:40:62:ac:40:fd:c6:b2:65:b1:19:92:d8:9c:9a:de:
         53:9d:e8:cd:bd:6d:f9:c3:84:14:37:c8:3e:6d:fe:d3:e4:04:
         70:5d:f7:57:6f:d2:50:b9:ab:da:fc:2f:3e:b2:68:d1:6e:06:
         53:d1:20:19:32:62:37:75:f9:94:5b:06:69:50:1d:f8:fc:a2:
         ba:cb:5d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:28:53 2026 by rpki-client