Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa
File:                     323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (raw, json)
Hash identifier:          omGcwmDsT8BYpBScz5Bq8p8wjIAMhQE4SKahvN0WhGg=
Subject key identifier:   99:8E:FF:2E:81:F5:CB:10:36:D3:37:67:F3:91:D5:78:FD:B1:0D:0F
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       7C378429DBE60AAECD5CF968E5E63F15836353E3
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa
Signing time:             Fri 11 Jul 2025 09:02:23 +0000
ROA not before:           Fri 11 Jul 2025 08:57:23 +0000
ROA not after:            Fri 10 Jul 2026 09:02:23 +0000
asID:                     147137
IP address blocks:        2400:46a0:27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
                          rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 11:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:37:84:29:db:e6:0a:ae:cd:5c:f9:68:e5:e6:3f:15:83:63:53:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: Jul 11 08:57:23 2025 GMT
            Not After : Jul 10 09:02:23 2026 GMT
        Subject: CN=998EFF2E81F5CB1036D33767F391D578FDB10D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:c7:aa:0f:c5:df:71:dc:6f:46:94:10:0f:
                    91:09:0a:34:35:5a:6f:7f:fe:34:88:1a:e8:ef:50:
                    6f:df:87:20:13:c2:3d:d3:85:e3:d1:31:86:be:b4:
                    62:5c:00:40:9c:eb:e1:92:36:bf:c5:f0:c9:e0:2c:
                    85:3d:f5:d1:1a:7d:f2:2e:1d:c2:1f:0f:56:cc:17:
                    1d:a6:bf:1a:9d:ca:cf:6e:2c:da:10:1f:4e:c4:bf:
                    e0:8d:e6:7e:9b:86:4c:07:5f:8c:ac:56:f8:b4:92:
                    4f:4c:b0:29:2d:df:42:12:c6:1d:a4:a0:f3:2e:72:
                    bd:72:1b:ad:f7:3a:ae:2b:de:66:32:23:08:f2:44:
                    b0:12:de:f4:cb:be:67:2b:c0:9c:9b:e7:5f:db:bf:
                    50:5e:b2:2b:37:33:b2:41:7e:ce:61:b5:83:3a:25:
                    52:6b:a0:ee:17:30:50:a7:94:71:15:0a:2b:80:98:
                    bc:02:ce:28:b0:78:7c:6f:d4:ec:83:e0:db:2d:6f:
                    be:62:44:16:c1:50:64:12:a9:f2:dc:b0:52:e3:8e:
                    a6:1a:92:23:f4:c4:a8:52:f9:d4:b2:27:23:56:b6:
                    73:de:db:a3:06:9c:f2:71:bd:c2:ce:3e:ec:11:a2:
                    b6:4c:d6:b5:10:d3:c9:d9:0e:d5:60:0c:d5:39:c3:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8E:FF:2E:81:F5:CB:10:36:D3:37:67:F3:91:D5:78:FD:B1:0D:0F
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:46a0:27::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:e6:81:a2:31:43:66:03:60:fb:46:5a:7f:89:a8:c8:81:c0:
         81:65:77:f5:8d:d6:d7:a0:4c:51:f7:be:d5:48:6e:97:09:ec:
         87:cb:43:01:fd:ef:0e:ec:2e:6e:ef:e2:43:d4:be:78:e2:86:
         5a:22:27:82:27:f5:00:97:dc:77:cf:7d:b9:09:53:cb:50:94:
         3a:11:54:bc:7c:6e:44:24:fe:f0:d0:2c:1a:f1:76:02:3d:fa:
         4f:8a:3d:0c:7b:20:44:d6:6d:50:cd:56:77:8a:48:a4:d5:6a:
         ac:e6:bd:7c:b9:0b:21:7f:79:85:1f:cd:80:a3:33:24:3d:6e:
         3b:79:91:88:a4:cb:48:f0:b3:b2:16:03:17:3d:80:bc:de:fe:
         87:94:bd:bc:46:39:f5:98:80:80:7e:b7:46:0c:65:e2:76:48:
         a3:c0:16:4e:4b:ea:f9:43:65:74:ef:27:27:26:ae:f8:f8:66:
         ed:74:bd:95:16:1b:5e:8b:6b:13:4a:3f:80:a1:9f:1f:af:48:
         b0:63:e0:5a:e0:55:e3:92:84:2d:30:10:69:54:23:81:3c:02:
         fd:c5:4e:8e:7e:d6:e9:fe:df:b0:ac:c2:57:ac:60:6c:b4:25:
         87:09:69:c2:6e:7e:2e:86:fd:fc:8a:32:24:67:ec:2f:64:4f:
         48:99:1c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:55:09 2025 by rpki-client