Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313036313a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313036313a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          UMElmVxVGeAJIKPTmGSXx95CBCTsQ3LOa1MQYwRIjcw=
Subject key identifier:   78:D3:D0:B0:01:26:F6:42:5D:95:AD:28:E1:92:DE:7A:81:62:23:56
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       4532671EA9726AB5A6F648579A0C8D5EC178AF56
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313036313a3a2f34382d3438203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:16 +0000
ROA not before:           Sun 03 May 2026 02:22:16 +0000
ROA not after:            Sun 02 May 2027 02:27:16 +0000
asID:                     63859
IP address blocks:        2402:8780:1061::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:32:67:1e:a9:72:6a:b5:a6:f6:48:57:9a:0c:8d:5e:c1:78:af:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: May  3 02:22:16 2026 GMT
            Not After : May  2 02:27:16 2027 GMT
        Subject: CN=78D3D0B00126F6425D95AD28E192DE7A81622356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:fe:dc:2e:95:49:da:79:5a:4c:49:8d:d5:
                    b4:c8:88:97:cf:85:36:96:c2:09:04:6d:5a:19:3a:
                    7b:d3:81:f6:0d:e4:15:e4:58:fd:1c:f9:0b:7d:41:
                    5e:4b:13:8e:5e:f5:42:aa:13:3d:f9:d6:a8:6d:7f:
                    13:be:e1:a3:06:e9:79:4b:12:83:94:3d:7d:7f:9e:
                    65:07:89:e2:70:41:27:9c:2f:99:6c:fe:c1:48:1d:
                    20:94:8e:c5:2f:a7:4f:2c:c6:9a:04:06:63:09:be:
                    9d:8b:c6:5c:f3:87:11:0c:f8:13:6a:84:bb:a1:68:
                    0d:2c:ef:78:81:26:a9:14:86:98:a5:9d:8d:83:15:
                    53:ca:5f:57:05:1f:13:c3:b8:89:d3:39:92:de:cc:
                    86:6d:f8:20:83:6f:32:d0:16:ef:ba:2d:d9:a8:8c:
                    41:f2:af:38:18:1d:83:cb:76:7d:91:f5:81:27:b9:
                    3f:0c:40:d5:37:2a:60:ff:a7:f6:e7:3f:71:a9:cd:
                    ed:02:a3:88:aa:01:50:c4:f5:18:fa:2a:a1:f0:43:
                    1c:d7:56:cc:76:06:8b:19:19:d9:1b:fd:f2:65:5d:
                    1d:b5:df:88:7e:2a:b6:48:a1:4b:81:bb:19:bf:24:
                    60:ff:45:46:23:75:ef:da:ef:21:ca:7b:5d:ad:d6:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D3:D0:B0:01:26:F6:42:5D:95:AD:28:E1:92:DE:7A:81:62:23:56
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313036313a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1061::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:75:78:9b:7f:dc:09:b4:94:17:20:47:5c:b9:aa:05:4e:aa:
         69:ed:c2:be:45:18:02:b2:17:12:63:d3:f5:08:10:33:c0:ce:
         dd:7b:b4:71:a2:13:a8:aa:44:0d:a3:03:93:d3:05:d2:7b:78:
         8d:a0:d5:29:81:b9:6d:c7:4c:1b:6b:79:4b:bd:d6:14:68:c6:
         a1:65:e8:51:49:3d:57:51:2b:cf:7a:2f:dd:50:26:96:ef:a3:
         10:2f:24:5b:ec:99:5b:df:62:75:ec:13:0d:c5:4e:64:d8:22:
         50:7b:7a:8f:ec:60:99:24:8c:18:57:7a:a1:87:4e:f2:f2:c9:
         ae:51:c6:8c:65:6d:e7:7b:ad:46:72:01:2b:da:97:e9:ca:40:
         6c:4e:82:ba:6a:2f:da:b2:e3:43:9c:fa:1e:01:08:9a:b3:06:
         37:33:2a:55:0d:f4:38:ab:02:74:d4:fe:52:4c:f8:fd:e1:6a:
         e0:27:f0:0e:af:33:ee:c1:cb:9f:8b:55:57:0f:82:d1:4b:96:
         8d:51:4c:a7:89:27:ea:0c:c3:67:bf:1c:e6:02:15:d4:3b:72:
         2d:5f:0f:8d:4a:30:85:a5:ae:e4:d1:64:75:be:52:5c:45:1f:
         a9:1a:7d:ad:7a:61:01:b2:d0:f5:36:f2:50:0b:90:4f:11:8a:
         30:9d:d4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:40:44 2026 by rpki-client