Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/323430353a63303a3a2f33322d3438203d3e20313338383831.roa
File:                     323430353a63303a3a2f33322d3438203d3e20313338383831.roa (raw, json)
Hash identifier:          pTOPZ6sG4IHWMXNqdVtb8BodM+aimyGzFSlPn64NksY=
Subject key identifier:   2E:D4:C4:C3:16:5A:4B:65:36:EB:6F:6B:6C:C9:44:BE:58:58:32:7C
Certificate issuer:       /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Certificate serial:       335E6B39CA8A2C21114FAF0CA75B0895223E6E27
Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/323430353a63303a3a2f33322d3438203d3e20313338383831.roa
Signing time:             Mon 02 Jun 2025 02:04:05 +0000
ROA not before:           Mon 02 Jun 2025 01:59:05 +0000
ROA not after:            Mon 01 Jun 2026 02:04:05 +0000
asID:                     138881
IP address blocks:        2405:c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl
                          rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 18:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5e:6b:39:ca:8a:2c:21:11:4f:af:0c:a7:5b:08:95:22:3e:6e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
        Validity
            Not Before: Jun  2 01:59:05 2025 GMT
            Not After : Jun  1 02:04:05 2026 GMT
        Subject: CN=2ED4C4C3165A4B6536EB6F6B6CC944BE5858327C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:3e:8d:8e:b5:45:f3:d9:48:b3:47:1f:eb:
                    64:83:21:66:53:1a:84:5f:c9:9c:f3:fa:b1:45:ff:
                    74:9b:c5:d1:f4:b8:0c:c5:b1:72:c1:e7:f0:79:b4:
                    0d:c4:49:c8:b5:c5:10:25:15:6e:ac:d5:46:6c:8e:
                    4b:95:d3:71:6a:50:c2:ff:48:ee:f9:2f:60:06:7e:
                    2a:64:55:12:5f:11:d8:55:38:a6:1a:95:64:2a:3b:
                    56:87:18:4d:21:e2:93:b8:52:58:98:5c:26:03:62:
                    0d:42:b9:da:0e:ec:ad:98:3f:f9:32:1a:26:dd:3c:
                    eb:d4:fa:04:19:78:3f:c9:18:61:4b:a8:19:e4:18:
                    fc:d6:a3:39:d0:48:1e:82:6d:f7:8b:1f:a1:8b:ba:
                    02:b7:b8:f2:38:44:5b:06:ce:e0:30:7c:c4:45:36:
                    bd:f3:6d:d5:e7:2b:cc:93:e1:61:83:2e:18:13:33:
                    27:9e:45:6e:68:c3:50:dd:98:db:de:32:76:a1:7e:
                    77:7e:e8:00:eb:b7:28:11:1d:fe:a1:c0:61:7e:bd:
                    3a:8a:56:6a:57:31:54:72:c9:96:05:89:db:b3:e4:
                    a7:f8:80:1c:7d:dd:96:96:76:d2:fa:4a:70:04:38:
                    48:a8:dc:b0:37:81:a3:aa:2d:3b:e6:b7:d9:97:99:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:C4:C3:16:5A:4B:65:36:EB:6F:6B:6C:C9:44:BE:58:58:32:7C
            X509v3 Authority Key Identifier:
                keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/323430353a63303a3a2f33322d3438203d3e20313338383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:d4:0a:46:ae:8e:6c:73:07:ec:f5:2a:9b:af:62:83:2b:79:
         64:a7:11:dc:48:ad:d6:b9:91:38:6f:7c:09:f6:62:20:d9:b9:
         b9:74:3a:06:1a:4a:c0:85:4b:f3:85:d5:56:16:04:6f:6e:3a:
         e0:73:f3:71:8f:cf:29:08:f3:c6:50:e7:07:e5:b6:b4:2b:cd:
         eb:92:3c:a8:c2:d4:b5:f1:cc:33:27:19:77:ac:2e:a7:fa:cd:
         71:4c:3b:70:23:14:e6:95:d7:44:17:c5:86:a9:4b:2b:a2:71:
         5f:1a:66:c8:28:6c:5e:67:18:da:50:4b:37:74:87:17:8a:2d:
         46:88:d5:b9:9d:6b:54:65:12:f5:c3:57:84:33:15:b3:61:4c:
         34:b9:8a:f3:e2:e0:3c:8a:f7:78:11:47:e4:4f:38:9f:59:bb:
         cb:4f:c6:a8:c4:3c:83:1a:b9:bc:37:df:33:9b:14:d6:47:7e:
         df:38:1e:d1:c0:5a:60:6f:43:bf:7f:1a:6c:98:6f:d3:c0:fa:
         6a:86:9c:53:b5:bf:8c:b8:46:b2:b3:fe:1d:13:be:18:42:18:
         51:41:75:85:5d:c7:68:6f:6f:92:76:65:47:95:8c:7c:64:80:
         47:55:74:69:73:9f:9d:7d:f5:d6:3f:92:c3:ac:eb:2e:ec:08:
         5c:f4:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:04 2025 by rpki-client