Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313034303a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313034303a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          mKDRLLuItZdGKqg74M0ldsqeCk9UewXSi/RAFWP012I=
Subject key identifier:   11:E8:00:F8:3A:60:25:E1:BC:8B:FA:12:F7:A4:35:17:7A:1B:48:57
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       07B7F436FEDA02DFC1BDFE9EAEB21717055D1F0C
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313034303a3a2f34382d3438203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:12 +0000
ROA not before:           Sun 03 May 2026 02:22:12 +0000
ROA not after:            Sun 02 May 2027 02:27:12 +0000
asID:                     63859
IP address blocks:        2402:8780:1040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b7:f4:36:fe:da:02:df:c1:bd:fe:9e:ae:b2:17:17:05:5d:1f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: May  3 02:22:12 2026 GMT
            Not After : May  2 02:27:12 2027 GMT
        Subject: CN=11E800F83A6025E1BC8BFA12F7A435177A1B4857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:49:5c:ce:67:3a:6f:09:82:cd:16:c1:21:21:
                    62:4c:cf:17:dd:e2:d7:5b:06:95:8b:0d:ad:c6:31:
                    f6:4f:7a:8e:c3:6d:76:24:5d:28:1a:22:a4:d3:9d:
                    f5:0d:bf:5e:d0:49:47:ed:19:98:3d:ca:8b:be:75:
                    ab:d6:35:5d:a0:7f:f2:55:14:18:5b:9a:3b:8e:7e:
                    c4:e4:70:28:1e:df:8f:69:26:d1:80:14:5b:4a:c0:
                    0f:24:4a:0a:a8:22:3c:32:1a:8d:0a:9f:ad:00:cf:
                    62:13:4e:73:62:aa:c3:0f:27:d5:94:39:68:ee:15:
                    50:9c:73:5b:d7:a8:69:fc:99:a7:a1:72:fa:a6:15:
                    89:29:58:86:27:a0:e7:1a:c2:56:dc:5a:18:3d:4c:
                    e8:c8:17:08:04:12:6d:29:94:fb:00:25:fa:fc:7b:
                    50:51:12:54:7c:54:7c:41:4c:4f:a9:71:5d:39:59:
                    d9:10:78:eb:27:7a:c6:5a:8c:01:ab:ec:a5:54:bf:
                    d3:74:83:51:9f:07:08:da:73:cf:4f:49:67:48:99:
                    a5:09:5a:5e:7e:04:bd:c5:cc:a5:cd:b2:b9:c5:6e:
                    d3:b6:cd:8c:c6:ef:12:bb:8f:10:e5:9c:31:da:d2:
                    4e:3e:7a:a1:47:fd:37:26:5c:58:77:04:f9:2c:0e:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E8:00:F8:3A:60:25:E1:BC:8B:FA:12:F7:A4:35:17:7A:1B:48:57
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313034303a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:97:91:99:1b:7f:37:19:98:27:4b:07:1b:72:4b:d6:e5:b1:
         a4:f9:ba:9d:1a:65:72:07:1f:3e:38:21:be:8a:ab:ea:52:fb:
         db:ce:1e:e5:ee:c8:a4:e1:f8:7a:2b:7a:a7:5b:cf:7c:cf:35:
         c1:a4:5d:b4:a7:e2:93:cd:b3:cb:53:e4:fe:9c:68:88:53:e5:
         88:96:d6:01:bf:d4:33:a5:aa:d3:09:f5:1a:fd:dc:bc:7e:e3:
         87:ab:61:b9:99:03:25:15:66:81:9c:fb:d4:88:48:e8:ea:cb:
         98:a9:df:98:22:4e:3e:e5:8c:80:8d:f6:a3:49:85:47:be:fd:
         00:fe:18:1b:c3:d3:49:5f:5c:ca:b4:8a:23:d6:79:a9:c1:e5:
         10:0d:d7:01:20:a2:5a:8e:66:c2:24:4b:0b:5b:aa:c2:02:46:
         cb:0a:ec:87:d3:70:65:b4:57:ca:ab:71:4f:ec:ef:05:4e:df:
         cf:51:88:bf:c4:61:f1:00:d9:25:d4:fb:d2:b1:72:e7:51:6c:
         ef:a5:27:fe:38:0a:88:0b:60:92:14:c5:0d:96:cf:4e:d1:01:
         f9:ed:db:55:e5:b3:14:34:17:5b:ef:bf:b1:20:94:74:f4:01:
         b0:9b:ce:ee:57:64:d8:da:f1:6a:d7:e0:95:65:8a:f1:f0:79:
         98:cc:e0:3b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUB7f0Nv7aAt/Bvf6errIXFwVdHwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNDNDI1MDRGNzA0RTUzNkFEREY0RDQxREYwMjc5NjVB
NjJGN0IxMTAeFw0yNjA1MDMwMjIyMTJaFw0yNzA1MDIwMjI3MTJaMDMxMTAvBgNV
BAMTKDExRTgwMEY4M0E2MDI1RTFCQzhCRkExMkY3QTQzNTE3N0ExQjQ4NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkSVzOZzpvCYLNFsEhIWJMzxfd
4tdbBpWLDa3GMfZPeo7DbXYkXSgaIqTTnfUNv17QSUftGZg9you+davWNV2gf/JV
FBhbmjuOfsTkcCge349pJtGAFFtKwA8kSgqoIjwyGo0Kn60Az2ITTnNiqsMPJ9WU
OWjuFVCcc1vXqGn8maehcvqmFYkpWIYnoOcawlbcWhg9TOjIFwgEEm0plPsAJfr8
e1BRElR8VHxBTE+pcV05WdkQeOsnesZajAGr7KVUv9N0g1GfBwjac89PSWdImaUJ
Wl5+BL3FzKXNsrnFbtO2zYzG7xK7jxDlnDHa0k4+eqFH/TcmXFh3BPksDvGTAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUEegA+DpgJeG8i/oS96Q1F3obSFcwHwYDVR0j
BBgwFoAUY8QlBPcE5Tat301B3wJ5ZaYvexEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzEvNjNDNDI1MDRG
NzA0RTUzNkFEREY0RDQxREYwMjc5NjVBNjJGN0IxMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82M0M0MjUwNEY3MDRFNTM2QURERjRENDFERjAyNzk2NUE2MkY3
QjExLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04
NTk4LWI3Y2QxMDEzNDNjYS8xLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDM0MzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH
gBBAMA0GCSqGSIb3DQEBCwUAA4IBAQDZl5GZG383GZgnSwcbckvW5bGk+bqdGmVy
Bx8+OCG+iqvqUvvbzh7l7sik4fh6K3qnW898zzXBpF20p+KTzbPLU+T+nGiIU+WI
ltYBv9QzparTCfUa/dy8fuOHq2G5mQMlFWaBnPvUiEjo6suYqd+YIk4+5YyAjfaj
SYVHvv0A/hgbw9NJX1zKtIoj1nmpweUQDdcBIKJajmbCJEsLW6rCAkbLCuyH03Bl
tFfKq3FP7O8FTt/PUYi/xGHxANkl1PvSsXLnUWzvpSf+OAqIC2CSFMUNls9O0QH5
7dtV5bMUNBdb77+xIJR09AGwm87uV2TY2vFq1+CVZYrx8HmYzOA7
-----END CERTIFICATE-----
Generated at Wed May 13 21:40:43 2026 by rpki-client