Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa
File:                     323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (raw, json)
Hash identifier:          Cwh07TkFHSVxFptsS9+W0W6emaGKqX4GCK/GVTdPowA=
Subject key identifier:   B7:DB:D1:10:03:15:C7:9F:D4:29:1C:00:AA:4B:43:D2:27:A4:DD:16
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       0F7CE22F1DFAC0DE46C5F9DDA7DFA8E1C2B1EFA1
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa
Signing time:             Thu 10 Jul 2025 20:00:05 +0000
ROA not before:           Thu 10 Jul 2025 19:55:05 +0000
ROA not after:            Thu 09 Jul 2026 20:00:05 +0000
asID:                     147137
IP address blocks:        2400:46a0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
                          rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 11:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7c:e2:2f:1d:fa:c0:de:46:c5:f9:dd:a7:df:a8:e1:c2:b1:ef:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: Jul 10 19:55:05 2025 GMT
            Not After : Jul  9 20:00:05 2026 GMT
        Subject: CN=B7DBD1100315C79FD4291C00AA4B43D227A4DD16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:44:81:49:a7:cb:e0:25:30:7a:5c:90:59:
                    c1:25:ca:ab:67:0b:35:5c:a7:b2:66:56:b1:ed:0b:
                    db:29:ab:06:b2:db:07:f5:74:13:9e:5c:a3:f0:8a:
                    43:4a:9d:fc:e8:07:b9:a2:59:98:ee:b6:85:40:ac:
                    e1:18:8a:df:7b:55:5d:22:68:f6:53:96:b0:6a:c6:
                    64:8b:34:3c:4c:7e:ad:d7:df:50:ed:47:ca:d3:bf:
                    06:50:d0:ea:85:7f:98:3e:ff:53:3d:6d:d3:9c:d2:
                    29:18:e7:87:24:ce:3f:99:7a:38:f8:ce:c9:7a:61:
                    65:7b:12:3b:f1:9e:70:cb:38:55:a8:51:c3:77:54:
                    88:24:e6:8c:57:4c:c6:86:0f:e3:7c:ff:ed:6f:b6:
                    f9:72:b6:0b:59:38:22:78:80:bd:a3:46:89:fe:3e:
                    c6:87:99:6d:1b:8a:f0:d4:b2:16:63:db:bc:89:ed:
                    1e:c5:ae:c9:06:82:f4:ff:36:2e:b5:d2:9e:46:e4:
                    f2:93:d5:25:39:a4:ce:32:86:58:94:4d:c6:82:21:
                    fa:87:92:88:21:c6:44:c1:55:74:be:19:a6:67:4a:
                    57:d0:24:72:f1:c0:04:44:49:81:58:b4:4c:59:33:
                    d2:b0:bf:0d:bc:15:d9:76:4d:28:0a:45:c6:12:92:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DB:D1:10:03:15:C7:9F:D4:29:1C:00:AA:4B:43:D2:27:A4:DD:16
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:46a0:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:84:21:62:58:3b:cc:f0:db:54:5b:4a:8b:48:f7:5f:ac:58:
         26:f8:17:78:2d:b1:0e:9a:33:63:03:51:91:86:8f:ec:d0:c5:
         39:b5:cd:73:20:d0:f6:fe:49:9a:c0:ef:b1:dd:e9:d8:dd:a2:
         1e:fb:7f:8d:2c:1e:c8:2a:a5:d5:8c:7f:9c:53:c4:2d:b4:9c:
         a8:65:6f:f5:3c:44:8f:4c:da:75:c4:8c:ee:10:03:6b:2a:74:
         43:6f:bf:7b:02:cd:9b:c3:b2:f8:80:27:d4:a5:6f:26:be:b3:
         9c:51:1d:2c:85:26:ad:67:89:d3:50:86:50:38:d1:3c:79:91:
         c8:cb:de:29:ca:18:f1:ad:87:42:d1:11:9c:3b:3b:db:f8:ca:
         ef:53:48:6e:91:66:26:84:da:b6:cf:92:45:c7:08:60:2e:6c:
         2d:4f:11:52:a9:19:44:1e:55:fd:13:51:f3:f0:6c:7d:63:db:
         51:73:20:a3:1a:cd:ac:93:c2:41:3d:d8:82:87:b0:70:f4:b4:
         1c:f0:ad:35:21:a1:d1:73:b5:1e:ae:6a:7f:5b:23:cc:a2:fd:
         d2:2a:59:04:ab:e5:63:c5:1b:25:67:c0:be:23:fe:53:e9:a3:
         e6:e1:15:0d:29:8c:3a:74:fe:25:c2:0d:1d:4b:6f:28:b0:53:
         c0:65:d5:16
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUD3ziLx36wN5Gxfndp9+o4cKx76EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz
NzI4Mjk4MDAeFw0yNTA3MTAxOTU1MDVaFw0yNjA3MDkyMDAwMDVaMDMxMTAvBgNV
BAMTKEI3REJEMTEwMDMxNUM3OUZENDI5MUMwMEFBNEI0M0QyMjdBNEREMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHESBSafL4CUwelyQWcElyqtn
CzVcp7JmVrHtC9spqway2wf1dBOeXKPwikNKnfzoB7miWZjutoVArOEYit97VV0i
aPZTlrBqxmSLNDxMfq3X31DtR8rTvwZQ0OqFf5g+/1M9bdOc0ikY54ckzj+Zejj4
zsl6YWV7EjvxnnDLOFWoUcN3VIgk5oxXTMaGD+N8/+1vtvlytgtZOCJ4gL2jRon+
PsaHmW0bivDUshZj27yJ7R7FrskGgvT/Ni610p5G5PKT1SU5pM4yhliUTcaCIfqH
koghxkTBVXS+GaZnSlfQJHLxwARESYFYtExZM9Kwvw28Fdl2TSgKRcYSkqEPAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUt9vREAMVx5/UKRwAqktD0iek3RYwHwYDVR0j
BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF
RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4
Mjk4MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i
Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzczYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzczMTMzMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAEagAAcw
DQYJKoZIhvcNAQELBQADggEBAEeEIWJYO8zw21RbSotI91+sWCb4F3gtsQ6aM2MD
UZGGj+zQxTm1zXMg0Pb+SZrA77Hd6djdoh77f40sHsgqpdWMf5xTxC20nKhlb/U8
RI9M2nXEjO4QA2sqdENvv3sCzZvDsviAJ9Slbya+s5xRHSyFJq1nidNQhlA40Tx5
kcjL3inKGPGth0LREZw7O9v4yu9TSG6RZiaE2rbPkkXHCGAubC1PEVKpGUQeVf0T
UfPwbH1j21FzIKMazayTwkE92IKHsHD0tBzwrTUhodFztR6uan9bI8yi/dIqWQSr
5WPFGyVnwL4j/lPpo+bhFQ0pjDp0/iXCDR1LbyiwU8Bl1RY=
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:54:58 2025 by rpki-client