Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          BHe0m+lPcGp48MevadQczbSKo8lgsMBfVDuyo6gH4Z8=
Subject key identifier:   86:5D:B4:7C:D8:30:86:6E:CE:D1:45:E2:3E:5D:D5:D4:AA:F1:DD:08
Certificate issuer:       /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial:       490C0C82E7A94FC863EC3F18FB14DC3B18A293CB
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:12 +0000
ROA not before:           Sun 03 May 2026 02:22:12 +0000
ROA not after:            Sun 02 May 2027 02:27:12 +0000
asID:                     63859
IP address blocks:        2402:8780:1077::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0c:0c:82:e7:a9:4f:c8:63:ec:3f:18:fb:14:dc:3b:18:a2:93:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
        Validity
            Not Before: May  3 02:22:12 2026 GMT
            Not After : May  2 02:27:12 2027 GMT
        Subject: CN=865DB47CD830866ECED145E23E5DD5D4AAF1DD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:78:f8:6e:0d:5c:0b:e1:5e:c4:01:9f:63:
                    c3:54:29:39:c5:ab:41:4d:86:c1:37:48:0d:6c:83:
                    52:44:72:08:60:4f:96:31:b5:e6:93:0b:fb:1b:84:
                    ad:ce:e9:a9:c6:38:f6:f7:95:90:42:63:3c:d4:2e:
                    b9:47:90:84:e7:1b:4e:45:ad:35:6a:c3:49:7a:78:
                    a4:f3:9f:38:6d:b4:3e:61:ea:b6:11:aa:dd:44:5a:
                    af:3f:27:8e:87:11:79:66:c0:12:26:61:6b:8a:77:
                    97:4e:e1:3c:97:9b:0d:4b:b8:88:f7:d3:cd:d8:5a:
                    e5:c9:13:42:25:d7:1b:7d:99:4f:2e:41:ff:5d:ee:
                    bf:24:3e:28:55:1b:0a:1f:c0:eb:a7:3d:02:8c:b7:
                    2e:12:60:65:4e:15:65:36:89:3f:87:8a:ae:1a:22:
                    dc:81:e3:e3:4a:7e:33:a2:dc:c9:a5:f0:f4:9d:c7:
                    eb:d1:74:1f:a0:4a:6c:88:b9:03:89:d8:48:af:a2:
                    7b:6b:47:35:43:8f:aa:0f:cb:98:37:d4:63:35:bd:
                    4a:ae:b0:6c:ea:50:a1:71:1e:dd:3e:56:93:66:ac:
                    73:25:ae:7e:62:24:72:bc:85:fd:9c:48:6d:a8:e0:
                    68:ab:bc:d1:98:ee:8f:f6:14:a9:11:c2:3b:38:04:
                    ef:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5D:B4:7C:D8:30:86:6E:CE:D1:45:E2:3E:5D:D5:D4:AA:F1:DD:08
            X509v3 Authority Key Identifier:
                keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1077::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:5f:48:b8:63:ac:3a:b5:e3:5f:02:19:2f:8e:97:6f:9b:5e:
         f1:76:fa:4e:7e:13:98:cb:fa:03:e5:d5:39:8e:4a:8e:1c:82:
         f5:72:ba:a4:d7:41:da:5a:83:5e:4d:ce:be:49:c2:31:8e:b1:
         67:f9:1f:a9:45:23:ad:52:c3:4f:1b:47:9d:d0:38:6b:3c:3c:
         cc:9e:d7:79:92:31:0d:1c:02:78:c5:e0:01:af:7a:00:67:25:
         5e:89:51:d5:c4:7b:96:61:ad:c9:78:b4:78:b1:29:49:1f:71:
         c8:9f:27:38:ce:95:ad:83:81:3f:2a:07:5b:28:1d:e3:9c:03:
         3b:e9:97:fa:a7:6c:dc:0e:67:61:c0:56:ac:ac:e0:28:3b:76:
         84:22:82:fe:6b:73:54:4c:46:fe:0d:dc:30:39:64:5f:57:80:
         fd:db:28:61:0c:50:30:47:22:8e:25:97:cb:66:2a:47:3c:63:
         13:d3:ed:49:12:9e:d2:80:b6:a1:be:20:45:a5:c8:d2:4f:8b:
         20:32:83:09:77:f4:57:a5:d1:5e:ac:c9:2e:c7:fb:5d:5e:eb:
         60:b8:c1:8e:be:bd:2d:d5:8a:e4:2b:24:42:94:82:1c:c2:57:
         ca:6b:61:9e:81:3e:3b:50:97:dc:d0:43:ef:5b:38:59:e6:c5:
         82:1c:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:40:43 2026 by rpki-client