Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313035613a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313035613a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          dnzOeOUcbijY19xCxBtYtQBVd5nl1yqrwv2rQGxHNeM=
Subject key identifier:   5A:E1:18:2A:B3:8F:39:C7:74:DC:A1:B7:59:0D:7E:EE:8B:D0:3D:0D
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       061F67D2AA618CC4AB2193828BBD1D54BA49819A
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313035613a3a2f34382d3438203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:08 +0000
ROA not before:           Sun 03 May 2026 02:22:08 +0000
ROA not after:            Sun 02 May 2027 02:27:08 +0000
asID:                     63859
IP address blocks:        2402:8780:105a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1f:67:d2:aa:61:8c:c4:ab:21:93:82:8b:bd:1d:54:ba:49:81:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: May  3 02:22:08 2026 GMT
            Not After : May  2 02:27:08 2027 GMT
        Subject: CN=5AE1182AB38F39C774DCA1B7590D7EEE8BD03D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:1a:21:52:3a:20:3f:c6:f2:82:b2:13:10:
                    17:9e:1c:e9:0d:34:38:e0:d6:a8:50:43:86:f0:73:
                    5c:ed:46:3e:d6:b8:9f:2b:2b:10:a1:67:42:3e:2a:
                    f0:50:7d:2c:bb:31:12:9f:e2:f3:35:a0:d7:ab:50:
                    80:da:82:85:94:47:4b:fe:84:97:b7:bb:cd:e3:d3:
                    fd:69:f9:97:80:19:4b:ad:4b:f9:b0:8f:87:f4:13:
                    95:23:6f:45:65:21:05:33:1c:57:da:6f:e1:54:5e:
                    36:02:fe:bf:3c:2d:8b:93:99:db:dc:06:6c:22:d0:
                    54:6d:0c:e8:62:f8:6a:ea:eb:5e:25:3e:bc:09:bf:
                    cf:a9:dc:f0:f9:16:9f:ac:32:be:22:40:de:5a:75:
                    40:20:82:85:7c:d4:9f:7c:a3:61:6e:7d:3b:99:1d:
                    ad:c1:88:bb:81:bc:ad:6f:f5:f3:96:50:49:8d:b5:
                    3d:72:6a:27:e7:82:8c:92:c6:91:39:33:c7:b6:d6:
                    e0:e3:fe:63:28:49:3c:45:31:af:5e:e5:c7:b2:3a:
                    58:49:3b:81:5b:dc:49:3f:c9:83:7c:85:6c:97:e2:
                    21:3c:ce:4e:8c:1c:39:64:35:4c:b5:a9:f5:26:c3:
                    88:50:1e:96:6f:fd:9a:dc:6d:c3:5f:73:4e:bf:79:
                    e0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:18:2A:B3:8F:39:C7:74:DC:A1:B7:59:0D:7E:EE:8B:D0:3D:0D
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313035613a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:105a::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:c0:60:98:10:62:b4:b2:27:6c:3b:fa:20:ec:8b:2e:12:8a:
         cb:9a:12:96:46:f5:11:c2:22:ff:46:d6:29:61:fd:87:3e:f7:
         47:e3:13:fb:54:b3:8e:a4:b0:cb:6d:ec:18:f8:b8:98:3e:2f:
         2d:3a:b1:63:db:23:0e:29:35:b1:46:c2:59:d2:82:d4:14:ab:
         c6:85:c5:52:48:32:f6:69:d6:5b:84:1f:33:82:2f:9e:79:54:
         63:19:fd:d8:e9:9a:71:46:a2:7b:98:29:23:a3:72:f2:5c:10:
         cd:ef:b1:40:91:d5:4e:36:6c:f7:88:08:22:fe:98:d4:b4:9c:
         f7:23:30:b9:09:d8:50:4d:a8:50:45:cc:a8:25:69:46:7b:bb:
         82:2c:ee:9c:c5:14:27:5a:82:22:09:57:85:77:d2:31:9e:ff:
         c8:29:70:80:19:0c:cd:d4:4e:d2:cd:55:a3:4f:8c:bc:03:83:
         16:90:4d:8f:00:64:4c:38:94:37:6d:40:d0:e8:ca:f1:61:46:
         37:e4:bf:3e:e8:34:20:05:90:dd:f5:5c:a0:66:7d:64:85:86:
         57:8e:b8:25:62:f0:1b:ac:35:15:58:f9:39:ea:e8:23:61:95:
         79:64:3f:34:fe:06:14:42:1a:03:c2:6b:1f:c4:25:46:4d:9b:
         8e:84:ca:35
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBh9n0qphjMSrIZOCi70dVLpJgZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNDNDI1MDRGNzA0RTUzNkFEREY0RDQxREYwMjc5NjVB
NjJGN0IxMTAeFw0yNjA1MDMwMjIyMDhaFw0yNzA1MDIwMjI3MDhaMDMxMTAvBgNV
BAMTKDVBRTExODJBQjM4RjM5Qzc3NERDQTFCNzU5MEQ3RUVFOEJEMDNEMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYexohUjogP8bygrITEBeeHOkN
NDjg1qhQQ4bwc1ztRj7WuJ8rKxChZ0I+KvBQfSy7MRKf4vM1oNerUIDagoWUR0v+
hJe3u83j0/1p+ZeAGUutS/mwj4f0E5Ujb0VlIQUzHFfab+FUXjYC/r88LYuTmdvc
Bmwi0FRtDOhi+Grq614lPrwJv8+p3PD5Fp+sMr4iQN5adUAggoV81J98o2FufTuZ
Ha3BiLuBvK1v9fOWUEmNtT1yaifngoySxpE5M8e21uDj/mMoSTxFMa9e5ceyOlhJ
O4Fb3Ek/yYN8hWyX4iE8zk6MHDlkNUy1qfUmw4hQHpZv/ZrcbcNfc06/eeD1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUWuEYKrOPOcd03KG3WQ1+7ovQPQ0wHwYDVR0j
BBgwFoAUY8QlBPcE5Tat301B3wJ5ZaYvexEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzEvNjNDNDI1MDRG
NzA0RTUzNkFEREY0RDQxREYwMjc5NjVBNjJGN0IxMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82M0M0MjUwNEY3MDRFNTM2QURERjRENDFERjAyNzk2NUE2MkY3
QjExLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04
NTk4LWI3Y2QxMDEzNDNjYS8xLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDM1NjEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH
gBBaMA0GCSqGSIb3DQEBCwUAA4IBAQBbwGCYEGK0sidsO/og7IsuEorLmhKWRvUR
wiL/RtYpYf2HPvdH4xP7VLOOpLDLbewY+LiYPi8tOrFj2yMOKTWxRsJZ0oLUFKvG
hcVSSDL2adZbhB8zgi+eeVRjGf3Y6ZpxRqJ7mCkjo3LyXBDN77FAkdVONmz3iAgi
/pjUtJz3IzC5CdhQTahQRcyoJWlGe7uCLO6cxRQnWoIiCVeFd9Ixnv/IKXCAGQzN
1E7SzVWjT4y8A4MWkE2PAGRMOJQ3bUDQ6MrxYUY35L8+6DQgBZDd9VygZn1khYZX
jrglYvAbrDUVWPk56ugjYZV5ZD80/gYUQhoDwmsfxCVGTZuOhMo1
-----END CERTIFICATE-----
Generated at Wed May 13 21:40:42 2026 by rpki-client