Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          I4hXtaqkriV2QirRqH9cwQ/d2faPVKnfLsriv/RsIUs=
Subject key identifier:   CF:39:BB:B7:94:B4:45:8D:95:11:21:56:1B:61:2C:F2:CB:EE:7C:93
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       123E6E724BA95174DF06A48E2D4B1E04A472CC0C
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:10 +0000
ROA not before:           Sun 03 May 2026 02:22:10 +0000
ROA not after:            Sun 02 May 2027 02:27:10 +0000
asID:                     63859
IP address blocks:        2402:8780:1056::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3e:6e:72:4b:a9:51:74:df:06:a4:8e:2d:4b:1e:04:a4:72:cc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: May  3 02:22:10 2026 GMT
            Not After : May  2 02:27:10 2027 GMT
        Subject: CN=CF39BBB794B4458D951121561B612CF2CBEE7C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:7f:93:71:21:c5:c4:88:bf:2b:2e:84:33:
                    5b:08:a6:a1:86:8e:01:26:30:7e:bc:ad:00:5c:79:
                    c4:15:f5:40:e5:ef:b4:2b:c0:bc:fb:ee:d3:75:b9:
                    3b:10:29:33:23:3c:50:3c:3a:59:35:c7:4f:05:f3:
                    ec:1d:87:2e:46:00:81:c5:aa:74:a5:e1:05:a9:64:
                    c4:4b:27:94:4a:62:45:65:b8:ad:3b:52:60:a3:05:
                    2a:05:c5:50:c2:33:7b:27:20:71:ba:e8:f4:e5:39:
                    43:da:12:b0:dd:c7:6a:fa:e1:29:47:a1:5d:8f:45:
                    22:86:de:f0:46:ab:ef:a3:f2:96:8d:9d:ff:45:cc:
                    af:4d:11:20:75:c6:f7:d4:18:c4:4d:68:30:20:79:
                    35:6d:ed:04:93:87:84:ac:ba:85:a7:3b:e1:d5:88:
                    ec:ce:18:5f:1b:c7:7e:29:02:01:d1:3a:81:c3:6e:
                    36:10:05:8e:b3:05:55:e8:f3:c2:e7:94:bf:93:95:
                    6c:06:44:05:c5:94:ec:d8:ee:38:76:1e:89:49:0f:
                    d4:28:b8:72:af:94:69:bd:0d:9a:69:b3:6a:74:16:
                    74:9d:cf:5d:ab:35:19:0f:2f:35:f4:f7:3b:a3:a4:
                    bd:ae:5d:88:b0:b6:a6:f0:61:db:4a:7c:89:4e:97:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:39:BB:B7:94:B4:45:8D:95:11:21:56:1B:61:2C:F2:CB:EE:7C:93
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1056::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:0b:97:c7:03:4f:68:c0:24:86:34:5d:12:c8:56:e9:35:b8:
         c6:6c:a0:5c:90:f1:df:6d:98:88:13:79:96:16:70:4b:63:6e:
         88:d6:e2:e8:0a:12:57:fc:33:9e:47:48:c1:2b:e2:ab:3f:8b:
         52:2d:fa:8e:df:4a:ce:69:56:3e:ec:ef:ae:60:61:19:b8:42:
         ce:93:5d:38:0e:4b:b9:ac:61:22:54:a9:a4:82:52:dc:55:24:
         a0:e3:c6:00:39:97:53:31:be:0b:2e:e0:df:ab:9d:6e:57:ab:
         b4:c3:b4:a9:33:66:97:73:94:c5:d0:54:e4:db:75:46:cd:25:
         8c:78:92:33:75:74:64:a7:f1:f1:9e:b7:88:71:f8:8f:bf:5a:
         8e:71:88:e6:9b:32:af:cd:bd:0c:db:02:f9:ed:8c:2d:43:1b:
         56:0e:11:e7:af:72:78:8f:44:b1:20:50:c6:81:05:0e:e1:26:
         96:06:54:52:6c:82:84:0e:87:cf:d5:c4:1b:53:0f:5e:a0:31:
         46:c7:ae:12:42:9a:7e:7f:9e:97:d3:6e:f9:b5:4c:38:08:60:
         f4:a8:5b:93:3f:af:2b:09:e2:df:fb:e2:2e:90:32:b6:48:c4:
         d3:c2:18:15:63:f0:9e:4c:07:77:0a:69:1f:e0:00:04:61:f5:
         fa:14:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:40:45 2026 by rpki-client