Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          P/CRBCwgpqum8FYFDzwyHXHMI8YL0EQQHVLJv9xYjmQ=
Subject key identifier:   D2:ED:24:F4:7E:C1:A3:BB:B0:D3:93:BD:EA:B2:D3:5F:93:08:BE:78
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       790B075BD5A739EB98A538E2BF15D5A41BB30CBB
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:16 +0000
ROA not before:           Sun 03 May 2026 02:22:16 +0000
ROA not after:            Sun 02 May 2027 02:27:16 +0000
asID:                     63859
IP address blocks:        2402:8780:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0b:07:5b:d5:a7:39:eb:98:a5:38:e2:bf:15:d5:a4:1b:b3:0c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: May  3 02:22:16 2026 GMT
            Not After : May  2 02:27:16 2027 GMT
        Subject: CN=D2ED24F47EC1A3BBB0D393BDEAB2D35F9308BE78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:c9:49:6a:4a:a6:21:f0:db:81:8b:89:c2:
                    3b:00:5c:3b:77:55:75:35:62:39:ab:aa:9f:4e:4c:
                    7b:26:20:52:a0:0a:f1:32:98:17:9b:60:04:e9:cb:
                    52:b5:42:58:c2:3d:f0:61:08:b8:6d:0a:c7:37:bb:
                    56:6e:a7:4d:fd:3b:d4:3d:a7:3c:2e:be:a3:0e:86:
                    3a:8b:de:cb:55:a5:4a:9c:1c:31:34:c8:a6:4b:7e:
                    3e:0a:98:63:26:79:8f:ae:a9:67:11:0c:47:53:32:
                    e4:f1:11:41:88:12:a9:71:7b:f1:ef:2a:cc:89:e1:
                    65:f9:e7:63:48:86:8b:13:60:70:e7:eb:85:08:20:
                    1b:c1:00:ab:6c:11:e0:be:ad:5d:a0:72:6d:9a:39:
                    e0:b7:36:f5:1a:34:e8:a7:35:40:97:08:40:42:f5:
                    3c:fc:99:3c:48:3c:dd:f6:7e:14:25:c0:14:4d:95:
                    c7:e4:00:25:76:70:9b:6d:84:94:ce:49:02:37:33:
                    3b:dc:2b:84:66:80:4e:f3:2a:a6:0c:21:7e:f8:db:
                    1e:6d:b2:5e:5e:56:8d:f3:1b:c9:e5:5a:64:57:1a:
                    97:94:4d:ba:4a:da:10:61:60:ad:19:7e:60:a0:26:
                    4c:16:d9:78:4c:ee:aa:0d:10:ef:0e:40:45:a5:5c:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:ED:24:F4:7E:C1:A3:BB:B0:D3:93:BD:EA:B2:D3:5F:93:08:BE:78
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:5d:01:9e:97:86:07:64:21:eb:ab:f7:79:2d:74:61:7d:38:
         29:65:85:dd:f3:8b:4d:41:48:af:08:e7:47:e7:58:6d:ad:18:
         00:d9:e3:0e:c5:1e:60:ed:b3:ac:bd:56:5e:94:5b:9a:45:c3:
         c3:dc:37:f6:da:95:cb:fc:a2:3c:cc:a9:9b:c9:d9:e3:15:62:
         84:74:39:b6:0a:c7:e5:86:10:ba:96:7a:4a:f1:ed:64:c0:27:
         a4:5d:55:eb:46:08:6a:a7:78:0d:11:b2:0f:21:0e:1d:81:30:
         5e:5f:67:2c:2c:a2:b6:79:47:78:24:3f:d4:11:dd:b4:ae:9f:
         07:9c:14:d3:41:eb:72:2e:5d:0f:05:00:03:e7:b9:f4:62:86:
         14:81:79:5d:c8:5d:13:ff:fd:34:48:f7:00:22:dd:8e:16:e9:
         df:6a:af:4a:60:92:48:cc:1e:45:38:5d:2e:9e:64:57:04:66:
         fc:4e:e8:c3:7b:31:78:11:de:2b:0d:6d:fa:ab:15:6d:34:a4:
         b7:d9:f3:ee:12:c8:e7:89:b6:ee:50:70:5f:40:c3:91:9b:d5:
         d3:61:48:4a:65:38:04:0c:77:8d:bd:0e:8b:b3:28:98:c4:0d:
         61:c4:7a:1a:f3:b3:ef:0e:ac:b3:9f:04:bf:fe:03:d2:9f:7b:
         3c:00:8e:11
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUeQsHW9WnOeuYpTjivxXVpBuzDLswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNDNDI1MDRGNzA0RTUzNkFEREY0RDQxREYwMjc5NjVB
NjJGN0IxMTAeFw0yNjA1MDMwMjIyMTZaFw0yNzA1MDIwMjI3MTZaMDMxMTAvBgNV
BAMTKEQyRUQyNEY0N0VDMUEzQkJCMEQzOTNCREVBQjJEMzVGOTMwOEJFNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGtclJakqmIfDbgYuJwjsAXDt3
VXU1Yjmrqp9OTHsmIFKgCvEymBebYATpy1K1QljCPfBhCLhtCsc3u1Zup039O9Q9
pzwuvqMOhjqL3stVpUqcHDE0yKZLfj4KmGMmeY+uqWcRDEdTMuTxEUGIEqlxe/Hv
KsyJ4WX552NIhosTYHDn64UIIBvBAKtsEeC+rV2gcm2aOeC3NvUaNOinNUCXCEBC
9Tz8mTxIPN32fhQlwBRNlcfkACV2cJtthJTOSQI3MzvcK4RmgE7zKqYMIX742x5t
sl5eVo3zG8nlWmRXGpeUTbpK2hBhYK0ZfmCgJkwW2XhM7qoNEO8OQEWlXGv5AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU0u0k9H7Bo7uw05O96rLTX5MIvngwHwYDVR0j
BBgwFoAUY8QlBPcE5Tat301B3wJ5ZaYvexEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzEvNjNDNDI1MDRG
NzA0RTUzNkFEREY0RDQxREYwMjc5NjVBNjJGN0IxMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82M0M0MjUwNEY3MDRFNTM2QURERjRENDFERjAyNzk2NUE2MkY3
QjExLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04
NTk4LWI3Y2QxMDEzNDNjYS8xLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH
gBAAMA0GCSqGSIb3DQEBCwUAA4IBAQBYXQGel4YHZCHrq/d5LXRhfTgpZYXd84tN
QUivCOdH51htrRgA2eMOxR5g7bOsvVZelFuaRcPD3Df22pXL/KI8zKmbydnjFWKE
dDm2CsflhhC6lnpK8e1kwCekXVXrRghqp3gNEbIPIQ4dgTBeX2csLKK2eUd4JD/U
Ed20rp8HnBTTQetyLl0PBQAD57n0YoYUgXldyF0T//00SPcAIt2OFunfaq9KYJJI
zB5FOF0unmRXBGb8TujDezF4Ed4rDW36qxVtNKS32fPuEsjnibbuUHBfQMORm9XT
YUhKZTgEDHeNvQ6LsyiYxA1hxHoa87PvDqyznwS//gPSn3s8AI4R
-----END CERTIFICATE-----
Generated at Wed May 13 21:40:43 2026 by rpki-client