Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3a2f33322d3438203d3e203539323832.roa
File:                     323430303a643638303a3a2f33322d3438203d3e203539323832.roa (raw, json)
Hash identifier:          SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=
Subject key identifier:   3D:35:A9:6A:BA:C4:68:B5:35:15:D8:D2:0D:73:F7:D4:EB:01:82:2A
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       31096A06C4D512432940820D60DDE1A022AABBD3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3a2f33322d3438203d3e203539323832.roa
Signing time:             Sun 13 Jul 2025 11:46:14 +0000
ROA not before:           Sun 13 Jul 2025 11:41:14 +0000
ROA not after:            Sun 12 Jul 2026 11:46:14 +0000
asID:                     59282
IP address blocks:        2400:d680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
                          rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 22:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:09:6a:06:c4:d5:12:43:29:40:82:0d:60:dd:e1:a0:22:aa:bb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Jul 13 11:41:14 2025 GMT
            Not After : Jul 12 11:46:14 2026 GMT
        Subject: CN=3D35A96ABAC468B53515D8D20D73F7D4EB01822A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:13:29:e2:33:ef:ae:e7:40:55:ec:63:b8:f7:
                    70:04:f0:f6:9d:86:51:4e:12:2c:3b:51:a2:26:b8:
                    11:b2:a9:c9:7f:94:ab:7b:96:27:47:fa:c5:c8:21:
                    35:79:c8:43:fc:2d:7e:13:cb:33:a0:1e:73:86:e0:
                    cb:9d:ac:10:fb:84:94:51:9e:ed:69:c3:31:46:7b:
                    dd:97:33:56:34:b9:ff:a6:3e:4a:07:c6:bd:3a:45:
                    56:82:d7:81:db:c6:3f:1a:d7:2c:81:36:82:0f:a4:
                    6e:81:50:2e:25:e2:f7:9b:e5:88:68:a9:5d:24:ed:
                    af:7d:be:a7:46:7b:c5:6f:ab:d9:85:e2:43:b3:c5:
                    67:19:0e:dc:80:af:79:47:08:29:8c:90:69:c3:d9:
                    53:27:92:a9:46:59:6b:8a:e4:4c:ef:32:a8:05:2b:
                    7c:cf:97:cc:b3:e0:6f:45:33:e6:43:06:04:72:5a:
                    45:02:d1:8e:ee:05:76:80:34:33:a4:dd:d3:42:bf:
                    22:2a:e6:1f:5e:75:80:aa:06:5d:27:1b:f3:40:dd:
                    69:65:f7:cc:eb:fa:dd:db:d3:34:8c:24:f4:17:98:
                    81:d8:d7:cb:4d:80:88:1d:8a:04:4e:16:ac:a8:e0:
                    42:cc:bc:ee:4e:52:d0:91:b9:e0:11:df:9a:c0:ec:
                    ef:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:35:A9:6A:BA:C4:68:B5:35:15:D8:D2:0D:73:F7:D4:EB:01:82:2A
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3a2f33322d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:f3:03:78:49:f6:01:1e:e0:1b:5d:9f:b1:21:75:46:74:7c:
         15:7a:79:72:5a:94:fc:88:2f:3f:02:8a:ae:00:4b:2e:57:32:
         79:75:e7:29:81:62:23:5a:bc:f9:7d:00:93:a8:4d:0e:a4:8d:
         93:0d:e5:2e:06:af:80:fe:7f:ac:f1:0b:e9:69:b3:b0:25:13:
         5b:94:20:4f:ba:65:91:4e:31:c3:30:90:1d:c3:52:04:b3:ca:
         c8:d2:48:19:22:52:4a:31:54:66:20:b2:c0:ba:1c:2f:14:f7:
         86:d6:c5:07:aa:2d:07:5e:19:cf:82:da:ba:bb:a9:a0:9b:65:
         8f:46:4f:af:d4:88:ff:7c:3e:c9:e1:19:65:25:3a:fe:23:69:
         d8:4d:ea:7e:bd:5c:1c:f1:b4:3e:57:5e:b8:8d:1e:b6:c2:0a:
         9b:a7:ad:ca:ab:0b:05:43:98:48:f0:2b:5e:19:29:9f:f3:49:
         db:8d:0d:6f:c5:a1:89:68:ae:0c:0e:28:5f:a2:d1:09:04:a4:
         47:bc:12:58:7b:c1:24:0f:44:7e:6e:84:73:ad:8e:7f:04:a2:
         cb:83:b3:bb:80:aa:7a:31:16:71:c0:01:1d:b3:7d:d9:14:a9:
         47:60:f9:d8:6f:08:c1:b2:3f:90:4f:86:31:fc:61:a3:db:36:
         b2:e1:16:ac
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUMQlqBsTVEkMpQIINYN3hoCKqu9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yNTA3MTMxMTQxMTRaFw0yNjA3MTIxMTQ2MTRaMDMxMTAvBgNV
BAMTKDNEMzVBOTZBQkFDNDY4QjUzNTE1RDhEMjBENzNGN0Q0RUIwMTgyMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnEyniM++u50BV7GO493AE8Pad
hlFOEiw7UaImuBGyqcl/lKt7lidH+sXIITV5yEP8LX4TyzOgHnOG4MudrBD7hJRR
nu1pwzFGe92XM1Y0uf+mPkoHxr06RVaC14Hbxj8a1yyBNoIPpG6BUC4l4veb5Yho
qV0k7a99vqdGe8Vvq9mF4kOzxWcZDtyAr3lHCCmMkGnD2VMnkqlGWWuK5EzvMqgF
K3zPl8yz4G9FM+ZDBgRyWkUC0Y7uBXaANDOk3dNCvyIq5h9edYCqBl0nG/NA3Wll
98zr+t3b0zSMJPQXmIHY18tNgIgdigROFqyo4ELMvO5OUtCRueAR35rA7O9DAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUPTWparrEaLU1FdjSDXP31OsBgiowHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkANaAMA0GCSqGSIb3
DQEBCwUAA4IBAQAG8wN4SfYBHuAbXZ+xIXVGdHwVenlyWpT8iC8/AoquAEsuVzJ5
decpgWIjWrz5fQCTqE0OpI2TDeUuBq+A/n+s8QvpabOwJRNblCBPumWRTjHDMJAd
w1IEs8rI0kgZIlJKMVRmILLAuhwvFPeG1sUHqi0HXhnPgtq6u6mgm2WPRk+v1Ij/
fD7J4RllJTr+I2nYTep+vVwc8bQ+V164jR62wgqbp63KqwsFQ5hI8CteGSmf80nb
jQ1vxaGJaK4MDihfotEJBKRHvBJYe8EkD0R+boRzrY5/BKLLg7O7gKp6MRZxwAEd
s33ZFKlHYPnYbwjBsj+QT4Yx/GGj2zay4Ras
-----END CERTIFICATE-----
Generated at Mon Jul 21 14:29:15 2025 by rpki-client