Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa
File:                     323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (raw, json)
Hash identifier:          nWI4uIvaFgK4Hk7GaUoKI1TVheMwIL3XscjU5iDUJX4=
Subject key identifier:   C7:B4:27:14:83:07:8D:CD:74:1D:EF:4C:CB:3C:77:44:40:1D:22:6F
Certificate issuer:       /CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
Certificate serial:       73E38328CC666B7B1A90522C66981EF130A9DA57
Authority key identifier: 76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa
Signing time:             Sun 03 May 2026 02:59:44 +0000
ROA not before:           Sun 03 May 2026 02:54:44 +0000
ROA not after:            Sun 02 May 2027 02:59:44 +0000
asID:                     59278
IP address blocks:        2402:6980:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl
                          rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e3:83:28:cc:66:6b:7b:1a:90:52:2c:66:98:1e:f1:30:a9:da:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
        Validity
            Not Before: May  3 02:54:44 2026 GMT
            Not After : May  2 02:59:44 2027 GMT
        Subject: CN=C7B4271483078DCD741DEF4CCB3C7744401D226F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:61:ad:eb:c5:21:a8:3e:ae:e8:a2:1d:ec:
                    47:76:71:8e:5c:5f:b0:13:7a:af:2a:2a:d7:77:e7:
                    47:e9:dd:4f:20:5d:ab:21:0f:49:08:dc:0a:72:07:
                    8e:61:7e:35:c3:0a:af:ba:82:9f:3a:02:b0:7e:ef:
                    77:27:e9:cd:09:e4:a6:c2:a8:52:ce:24:0b:ba:a3:
                    dc:a5:bb:61:3a:5b:7c:d6:17:41:94:52:89:2b:b9:
                    96:f1:6d:e8:97:22:da:e4:44:e9:0b:92:7c:4c:b0:
                    40:bc:35:c9:6c:9a:55:71:65:f6:ab:9f:49:b3:f3:
                    92:06:cf:79:d9:8e:f5:7a:6a:a7:23:66:00:c1:6c:
                    f2:b8:8d:33:5c:fd:07:9c:13:77:49:8b:1e:4b:f3:
                    f8:bb:b2:91:7d:97:75:07:8c:b7:43:e7:3a:3b:e3:
                    9c:a4:25:99:60:c4:8c:dc:21:01:13:b1:17:2a:3a:
                    71:e0:dd:f4:df:2c:0e:42:1d:1e:a4:9c:23:1d:d1:
                    d4:de:40:42:ce:b1:ab:75:ba:d6:f7:c9:46:92:5a:
                    5f:05:22:fc:fb:98:51:5d:5e:cc:85:d9:63:bb:5c:
                    f4:2f:f0:07:f3:fd:ca:59:5e:4c:71:5d:36:cf:25:
                    33:be:84:04:87:01:cd:03:7a:2d:e6:77:43:f6:1c:
                    11:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B4:27:14:83:07:8D:CD:74:1D:EF:4C:CB:3C:77:44:40:1D:22:6F
            X509v3 Authority Key Identifier:
                keyid:76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6980:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:2e:26:59:d7:40:7d:b5:1f:5f:c4:97:71:d7:62:bc:20:58:
         06:c1:90:c8:de:fe:ce:f0:f5:5c:e5:d6:81:d2:ab:94:ca:c6:
         ec:e4:a0:42:3a:ed:3d:6e:14:f9:47:b7:64:4f:59:e2:b6:d8:
         2a:ff:d2:20:b5:c6:70:b9:c5:7e:1c:85:7f:59:0e:a0:a9:65:
         6e:ff:19:63:be:be:62:52:38:90:af:ac:9b:72:65:d9:c3:e6:
         fc:08:5c:f0:4b:61:29:e1:a2:8c:aa:40:bb:42:8e:3b:3a:23:
         3b:bb:9c:4b:e4:79:52:ad:2b:ce:51:a4:cc:17:fa:cc:87:a2:
         b3:9e:db:2d:4d:15:cd:af:69:31:dd:0e:e1:b0:19:83:e8:3d:
         3e:f8:72:2c:8e:97:0f:47:ec:af:7f:b6:01:de:71:5b:7d:42:
         50:be:70:21:72:11:84:04:43:71:6c:6b:fd:10:ee:20:24:4c:
         40:9c:83:94:e4:f1:e6:69:68:12:fb:b2:55:8f:cb:6d:37:a3:
         e6:62:9e:a1:4d:59:05:9a:15:00:1c:3d:62:da:45:64:a7:e1:
         7e:a2:89:be:5e:4a:a6:c2:fa:49:ce:d8:72:89:e6:50:58:74:
         53:45:b3:63:fd:88:2f:13:f9:46:ec:24:90:38:29:44:2e:bc:
         74:aa:f9:bb
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUc+ODKMxma3sakFIsZpge8TCp2lcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdC
QTA5RUI2NDAeFw0yNjA1MDMwMjU0NDRaFw0yNzA1MDIwMjU5NDRaMDMxMTAvBgNV
BAMTKEM3QjQyNzE0ODMwNzhEQ0Q3NDFERUY0Q0NCM0M3NzQ0NDAxRDIyNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTH2Gt68UhqD6u6KId7Ed2cY5c
X7ATeq8qKtd350fp3U8gXashD0kI3ApyB45hfjXDCq+6gp86ArB+73cn6c0J5KbC
qFLOJAu6o9ylu2E6W3zWF0GUUokruZbxbeiXItrkROkLknxMsEC8NclsmlVxZfar
n0mz85IGz3nZjvV6aqcjZgDBbPK4jTNc/QecE3dJix5L8/i7spF9l3UHjLdD5zo7
45ykJZlgxIzcIQETsRcqOnHg3fTfLA5CHR6knCMd0dTeQELOsat1utb3yUaSWl8F
Ivz7mFFdXsyF2WO7XPQv8Afz/cpZXkxxXTbPJTO+hASHAc0Dei3md0P2HBG9AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUx7QnFIMHjc10He9Myzx3REAdIm8wHwYDVR0j
BBgwFoAUdjfpY+9wniu9OYgSAuaOp7oJ62QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWYxYzc5ZjEtMjY0ZS00MjNmLTllMDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNF
RjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdCQTA5RUI2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NjM3RTk2M0VGNzA5RTJCQkQzOTg4MTIwMkU2OEVBN0JBMDlF
QjY0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FmMWM3OWYxLTI2NGUtNDIzZi05
ZTA4LTBiMjkwMGRhNjk0OS8wLzMyMzQzMDMyM2EzNjM5MzgzMDNhMzEzMDMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM5MzIzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAJp
gBAAMA0GCSqGSIb3DQEBCwUAA4IBAQDJLiZZ10B9tR9fxJdx12K8IFgGwZDI3v7O
8PVc5daB0quUysbs5KBCOu09bhT5R7dkT1nittgq/9IgtcZwucV+HIV/WQ6gqWVu
/xljvr5iUjiQr6ybcmXZw+b8CFzwS2Ep4aKMqkC7Qo47OiM7u5xL5HlSrSvOUaTM
F/rMh6KzntstTRXNr2kx3Q7hsBmD6D0++HIsjpcPR+yvf7YB3nFbfUJQvnAhchGE
BENxbGv9EO4gJExAnIOU5PHmaWgS+7JVj8ttN6PmYp6hTVkFmhUAHD1i2kVkp+F+
oom+XkqmwvpJzthyieZQWHRTRbNj/YgvE/lG7CSQOClELrx0qvm7
-----END CERTIFICATE-----
Generated at Wed May 13 14:02:59 2026 by rpki-client