Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/323430343a6563303a3a2f33322d3332203d3e20313338313132.roa
File:                     323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (raw, json)
Hash identifier:          ikejIzym3riHv/Wk7MAPoXCGoRFxR1pASpxS+fJWi4g=
Subject key identifier:   F0:14:05:31:DA:73:49:B4:DC:F1:1D:D6:EE:87:F5:3D:A1:FD:7A:E4
Certificate issuer:       /CN=255AA179563123A815C2B4073AD84B69F0967F4D
Certificate serial:       4FF9300BE5C4E2AA49ADFEFEDCC82D50F9393381
Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/323430343a6563303a3a2f33322d3332203d3e20313338313132.roa
Signing time:             Sun 06 Jul 2025 07:00:01 +0000
ROA not before:           Sun 06 Jul 2025 06:55:01 +0000
ROA not after:            Sun 05 Jul 2026 07:00:01 +0000
asID:                     138112
IP address blocks:        2404:ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl
                          rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 15:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f9:30:0b:e5:c4:e2:aa:49:ad:fe:fe:dc:c8:2d:50:f9:39:33:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D
        Validity
            Not Before: Jul  6 06:55:01 2025 GMT
            Not After : Jul  5 07:00:01 2026 GMT
        Subject: CN=F0140531DA7349B4DCF11DD6EE87F53DA1FD7AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:e6:6b:08:9c:30:bc:1b:ef:5b:06:6a:64:
                    a0:f9:12:ef:66:af:ae:c5:09:f0:8b:14:e0:6d:33:
                    7d:1e:61:7d:a3:8a:3c:82:cb:30:b0:ef:a7:9d:a5:
                    95:7b:e2:1f:1e:a0:42:99:be:4e:10:04:87:b3:fe:
                    16:35:d3:ce:23:98:04:0f:05:11:e5:81:65:f1:e4:
                    a8:c8:57:09:1d:d1:8f:4e:42:30:0e:5e:6d:6b:cc:
                    c3:e5:35:68:bf:6d:b6:ac:41:01:49:13:2b:50:b5:
                    59:92:ac:3b:27:67:32:a1:11:c8:3a:f2:df:90:8c:
                    33:d6:60:7c:94:db:1e:b7:78:92:09:89:d8:a4:49:
                    3a:76:7c:6e:90:ff:2d:66:53:f0:a2:45:bb:18:b5:
                    df:57:3c:67:36:93:8c:17:19:f3:59:c8:81:22:a3:
                    05:3b:20:b3:48:26:d9:53:7a:82:de:de:5d:6e:a3:
                    dd:ad:29:f5:f3:69:5e:52:7c:a5:2f:a4:58:4b:b6:
                    ec:ba:a1:78:49:54:85:9d:ef:c1:41:dd:f5:d3:db:
                    24:48:52:3f:73:e4:b9:a0:0f:c4:46:1f:73:14:7b:
                    a6:c8:cc:7c:65:0d:09:3e:3a:7d:22:4d:ca:b4:2d:
                    ff:c2:87:67:c3:83:00:0e:f3:06:1e:ec:1d:b4:bd:
                    f6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:14:05:31:DA:73:49:B4:DC:F1:1D:D6:EE:87:F5:3D:A1:FD:7A:E4
            X509v3 Authority Key Identifier:
                keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/323430343a6563303a3a2f33322d3332203d3e20313338313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:bc:8a:ae:7e:93:9d:ee:8e:5f:3f:65:f6:62:ed:ec:b7:5f:
         fc:0d:33:9f:2b:19:59:36:d5:8f:ee:0c:ec:3f:4f:5e:5f:58:
         c9:23:4d:de:9a:ed:c5:dd:ba:a0:3e:2c:9d:73:50:f0:2d:d7:
         3e:cb:1f:3b:5a:46:32:55:53:53:37:c6:d1:9e:7b:05:25:c4:
         a1:c7:16:ba:cf:06:35:79:b8:f0:86:58:e9:bd:48:9c:65:32:
         b7:36:b6:dd:9c:42:4c:2f:9e:07:82:0c:12:c9:b1:be:d8:6e:
         d7:a4:11:22:c8:2e:12:ce:d2:2b:fa:3b:e0:8b:b7:7c:d7:5b:
         4d:84:04:a8:f0:27:e4:35:c9:5d:57:84:cf:cd:53:38:d8:eb:
         db:f5:3e:3a:9a:3d:12:5b:97:5c:7a:61:f0:56:cb:6e:63:9c:
         46:c4:de:7d:fb:fb:9f:2c:dd:6b:11:af:4c:42:8f:26:cc:f4:
         e3:e4:e3:44:02:6b:f1:86:d6:82:67:f1:c2:09:e2:b6:19:46:
         e4:39:49:fc:ea:0c:df:c5:ff:0f:0e:07:83:5e:7f:a9:92:79:
         75:c7:19:34:a9:68:62:00:84:c2:fb:8b:19:13:8a:3e:69:2f:
         8d:54:0d:0a:18:15:ac:ee:bc:6d:7b:54:25:27:de:d8:8f:32:
         37:d9:88:1a
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUT/kwC+XE4qpJrf7+3MgtUPk5M4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG
MDk2N0Y0RDAeFw0yNTA3MDYwNjU1MDFaFw0yNjA3MDUwNzAwMDFaMDMxMTAvBgNV
BAMTKEYwMTQwNTMxREE3MzQ5QjREQ0YxMURENkVFODdGNTNEQTFGRDdBRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVweZrCJwwvBvvWwZqZKD5Eu9m
r67FCfCLFOBtM30eYX2jijyCyzCw76edpZV74h8eoEKZvk4QBIez/hY1084jmAQP
BRHlgWXx5KjIVwkd0Y9OQjAOXm1rzMPlNWi/bbasQQFJEytQtVmSrDsnZzKhEcg6
8t+QjDPWYHyU2x63eJIJidikSTp2fG6Q/y1mU/CiRbsYtd9XPGc2k4wXGfNZyIEi
owU7ILNIJtlTeoLe3l1uo92tKfXzaV5SfKUvpFhLtuy6oXhJVIWd78FB3fXT2yRI
Uj9z5LmgD8RGH3MUe6bIzHxlDQk+On0iTcq0Lf/Ch2fDgwAO8wYe7B20vfYPAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQU8BQFMdpzSbTc8R3W7of1PaH9euQwHwYDVR0j
BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2
MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2
N0Y0RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkYjhkOTA4LTFiOTktNDU1Yy1h
Yzc2LThkNjI0ZGZhNDNiNi8wLzMyMzQzMDM0M2E2NTYzMzAzYTNhMmYzMzMyMmQz
MzMyMjAzZDNlMjAzMTMzMzgzMTMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBA7AMA0GCSqGSIb3
DQEBCwUAA4IBAQBsvIqufpOd7o5fP2X2Yu3st1/8DTOfKxlZNtWP7gzsP09eX1jJ
I03emu3F3bqgPiydc1DwLdc+yx87WkYyVVNTN8bRnnsFJcShxxa6zwY1ebjwhljp
vUicZTK3NrbdnEJML54HggwSybG+2G7XpBEiyC4SztIr+jvgi7d811tNhASo8Cfk
NcldV4TPzVM42Ovb9T46mj0SW5dcemHwVstuY5xGxN59+/ufLN1rEa9MQo8mzPTj
5ONEAmvxhtaCZ/HCCeK2GUbkOUn86gzfxf8PDgeDXn+pknl1xxk0qWhiAITC+4sZ
E4o+aS+NVA0KGBWs7rxte1QlJ97YjzI32Yga
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:13:47 2025 by rpki-client