Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa
File:                     323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (raw, json)
Hash identifier:          DRnLhFvj0XZm0VXEZ42TGDJPOpd0ZTUBf7MwJZ8bqOE=
Subject key identifier:   6E:C6:4D:AD:5D:3A:D8:F2:FB:DD:E9:C9:84:92:C9:E1:FC:4E:D0:F0
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       68F6D04E4B68510AE402466D3BFE23CEA0CFBA12
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa
Signing time:             Thu 10 Jul 2025 04:02:22 +0000
ROA not before:           Thu 10 Jul 2025 03:57:22 +0000
ROA not after:            Thu 09 Jul 2026 04:02:22 +0000
asID:                     133827
IP address blocks:        2404:a640:139::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 03:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f6:d0:4e:4b:68:51:0a:e4:02:46:6d:3b:fe:23:ce:a0:cf:ba:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: Jul 10 03:57:22 2025 GMT
            Not After : Jul  9 04:02:22 2026 GMT
        Subject: CN=6EC64DAD5D3AD8F2FBDDE9C98492C9E1FC4ED0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:81:3a:54:de:5f:f5:0b:4f:b7:d9:0c:6e:
                    4f:1b:83:87:60:a6:5a:0a:1f:87:a5:df:01:36:d5:
                    19:04:6b:58:76:d8:0e:ad:42:33:70:b5:cd:d7:90:
                    55:2b:d4:d9:1e:68:46:e3:db:8c:d2:88:63:e0:fc:
                    a7:13:5c:be:89:90:b4:b6:3e:7a:c8:b5:fa:17:ce:
                    3d:7a:3b:29:79:dc:94:a2:9d:c0:88:23:b6:16:4a:
                    54:ad:f8:2d:39:d3:5b:97:59:41:51:35:52:4a:84:
                    55:1e:85:25:2b:3d:aa:31:56:fe:0d:cc:b5:3f:8d:
                    3d:0b:85:82:a5:a1:d0:4c:1f:fe:73:e3:10:ee:92:
                    41:07:d9:fb:10:0d:9a:ad:80:1d:ae:47:d2:e3:27:
                    4c:f4:87:ab:ca:cb:36:81:91:12:e9:17:e0:6a:e6:
                    43:31:ea:a5:a2:67:dc:9c:74:e3:5e:18:22:75:0a:
                    43:d8:28:a1:fd:8f:1c:3f:55:27:ff:eb:eb:ce:43:
                    8e:37:50:ca:0d:d3:58:cc:2c:d1:13:25:96:6f:db:
                    ed:f9:9e:bb:1b:0d:db:5c:ef:5d:7b:29:3b:41:0d:
                    44:8a:ca:17:44:df:7d:f6:06:06:d3:99:a0:78:11:
                    ba:0b:8f:eb:1a:db:0e:61:ff:59:be:26:d1:6b:19:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C6:4D:AD:5D:3A:D8:F2:FB:DD:E9:C9:84:92:C9:E1:FC:4E:D0:F0
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a640:139::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:1a:10:17:80:5b:65:0c:1b:5d:00:e1:e7:23:8a:aa:1f:ef:
         39:41:92:ae:6c:7f:4c:6e:23:30:14:fa:91:5c:f0:0e:09:ff:
         30:4e:15:13:55:d4:ba:0c:d1:84:0b:0c:72:f0:71:fe:a2:5a:
         d0:fc:57:16:dc:33:d1:15:ed:74:c3:db:c9:16:0c:05:7a:bc:
         20:58:e2:62:36:d2:79:28:09:25:d7:b5:62:79:c0:d0:4b:94:
         3a:69:14:69:99:a4:27:27:9b:ce:77:67:fc:0e:13:50:8a:13:
         f9:cc:fb:4b:aa:66:31:9a:1b:b6:79:01:6f:7e:48:3e:81:79:
         19:1c:80:ce:c8:8c:bc:6f:90:83:1a:f1:11:2e:58:f8:3b:b8:
         9e:bf:b2:24:5b:9c:d3:7a:61:85:0c:4c:d7:d7:e8:69:2c:79:
         3b:d2:be:ae:04:d6:22:2f:18:9c:58:88:e5:b7:5d:09:b5:66:
         48:60:75:bd:91:41:25:86:c2:15:ab:39:f8:cc:a5:0a:de:cd:
         db:49:6c:a9:c1:44:e4:c9:44:06:b7:10:e9:20:a3:0a:65:da:
         37:8c:25:fe:39:08:41:b4:59:61:1c:e2:8e:42:5d:8b:ab:83:
         0d:9e:b2:50:e1:f7:ad:25:02:17:70:6f:5c:b2:f5:5f:7b:9b:
         ad:77:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:57:01 2025 by rpki-client