Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313031343a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313031343a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          QEvplEmBTKzvLNJjG+BuTZvEQ5RxcrPMpi8Wq9iAPuY=
Subject key identifier:   9E:C5:59:0C:DE:39:F6:14:FE:60:BD:31:E7:13:73:A0:3E:67:B5:AC
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       7E8FD891C1B9706F4FC55564A8CADB2BD01D4E0B
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313031343a3a2f34382d3438203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:07 +0000
ROA not before:           Sun 03 May 2026 02:22:07 +0000
ROA not after:            Sun 02 May 2027 02:27:07 +0000
asID:                     63859
IP address blocks:        2402:8780:1014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8f:d8:91:c1:b9:70:6f:4f:c5:55:64:a8:ca:db:2b:d0:1d:4e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: May  3 02:22:07 2026 GMT
            Not After : May  2 02:27:07 2027 GMT
        Subject: CN=9EC5590CDE39F614FE60BD31E71373A03E67B5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:93:e1:93:a3:4d:1a:39:f5:c3:74:3e:04:
                    31:1a:86:88:9e:13:4e:01:47:c8:7a:f4:01:a9:44:
                    f8:c8:aa:80:23:fb:3f:86:43:2e:37:30:b3:a0:1c:
                    a1:e5:27:82:dd:89:51:4b:49:04:ab:ae:96:13:76:
                    ab:e4:c1:f7:d7:c7:81:3c:84:7e:55:80:8f:9a:de:
                    06:c8:d9:36:22:c5:0a:c9:c3:98:79:f2:7e:c9:2c:
                    ac:87:fa:67:58:38:d3:0b:56:de:51:14:0e:83:c1:
                    1b:ad:12:48:90:9f:54:69:84:2f:a5:79:25:62:85:
                    bc:7e:7f:77:a1:e6:8d:c5:6e:25:8f:10:82:55:bc:
                    c4:1a:6f:b0:16:6e:f4:f4:8d:4d:3d:5c:c0:4b:41:
                    1c:d8:df:f3:eb:5e:3e:40:5b:5d:3a:46:f4:2d:af:
                    2a:26:a8:cb:a3:ab:f8:f6:3c:3d:b6:0c:c0:c4:f8:
                    39:08:78:71:06:c3:fb:d1:39:14:a2:b2:13:a9:4d:
                    c8:8e:ad:c4:d5:01:a5:cf:0f:ee:fa:53:81:f0:8d:
                    fe:6e:26:10:73:95:64:fc:a1:b9:25:a5:87:b4:e3:
                    fb:8c:a1:e6:88:7a:13:cf:0b:e3:9f:42:1a:67:f9:
                    18:54:81:1f:93:16:f1:3f:68:f4:64:4b:41:b6:5d:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:59:0C:DE:39:F6:14:FE:60:BD:31:E7:13:73:A0:3E:67:B5:AC
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313031343a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1014::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:be:95:8f:b1:a9:a5:11:29:7f:2d:dc:69:c6:08:45:6d:f3:
         8d:d3:71:95:d8:d2:fc:a2:75:1e:e0:f6:83:46:0b:fa:55:7e:
         7f:35:c1:a9:24:20:4d:c3:a9:a5:de:9c:12:0a:10:74:96:20:
         eb:74:ab:1b:de:d5:b5:42:a6:2c:d9:c9:30:51:fa:1a:7a:a7:
         53:39:24:c4:9c:94:39:65:f9:3c:1a:8c:08:67:83:9a:8a:e9:
         a1:5c:e0:96:ff:31:7a:79:72:51:a7:d5:76:34:9b:72:5c:c8:
         0e:57:ac:0a:4e:cd:03:97:93:9a:81:29:b5:70:ca:25:48:bb:
         3a:e7:db:3c:f1:86:ce:ff:df:ee:f5:b7:fe:cf:dd:e4:46:b6:
         a8:d3:b1:70:b8:db:a5:ff:55:9b:89:c9:0d:45:4f:1b:27:40:
         7e:a9:2c:a9:08:fb:bd:83:9e:81:ff:ce:2f:67:9d:fe:11:4d:
         2c:46:85:af:03:17:6c:d7:d4:c8:27:9c:c0:38:ec:2c:6e:7b:
         02:28:81:56:02:8d:fd:29:ee:58:4e:8c:22:a4:ea:34:7d:fb:
         07:ea:17:42:5c:9e:70:f3:12:74:73:c2:c9:49:7c:a0:6c:7a:
         0e:3f:f0:db:65:78:fd:33:bd:9c:ab:bf:51:4e:7f:72:ed:67:
         d9:c6:90:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:40:43 2026 by rpki-client