Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/323430353a396434303a3a2f33322d3438203d3e203538343935.roa
File:                     323430353a396434303a3a2f33322d3438203d3e203538343935.roa (raw, json)
Hash identifier:          0gzYY7cjTPjY2yjhcF04nMrJdj9Xu6B9UNr2O7vO1co=
Subject key identifier:   7C:B1:1C:CE:9D:B3:CB:9E:E9:6C:B4:CB:52:DB:9E:0E:ED:02:E6:CC
Certificate issuer:       /CN=C005531488F38475CA53CB4A7ABCEC0C32F75962
Certificate serial:       42E4815DD280D7F3D6F81FDD45499A4501B23087
Authority key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/323430353a396434303a3a2f33322d3438203d3e203538343935.roa
Signing time:             Fri 27 Dec 2024 03:01:15 +0000
ROA not before:           Fri 27 Dec 2024 02:56:15 +0000
ROA not after:            Fri 26 Dec 2025 03:01:15 +0000
asID:                     58495
IP address blocks:        2405:9d40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl
                          rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 06:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e4:81:5d:d2:80:d7:f3:d6:f8:1f:dd:45:49:9a:45:01:b2:30:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962
        Validity
            Not Before: Dec 27 02:56:15 2024 GMT
            Not After : Dec 26 03:01:15 2025 GMT
        Subject: CN=7CB11CCE9DB3CB9EE96CB4CB52DB9E0EED02E6CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:e9:7b:70:58:1c:21:0a:33:2c:9e:fc:00:
                    71:95:29:d1:58:61:b5:c6:c1:e7:27:61:6d:d4:9b:
                    52:0e:43:dd:d4:d6:4d:ee:d7:89:34:d6:4f:85:1a:
                    0f:05:55:6e:29:78:75:96:8a:a4:ac:cb:a7:b2:ce:
                    3e:94:ee:c2:01:14:ac:44:f2:fe:55:0b:e7:6c:4c:
                    70:2f:c8:94:c3:eb:0b:45:10:54:d2:2c:e1:05:66:
                    a3:32:9b:78:83:4c:71:f6:07:44:fb:6f:d0:8b:ea:
                    29:30:3d:8c:43:ae:c7:47:b4:ab:68:86:9c:c4:6f:
                    05:4a:52:73:a9:02:2a:dd:ff:62:a1:12:45:40:cf:
                    cf:69:e6:92:8b:bc:ae:91:1a:b1:a6:ff:19:ca:8c:
                    b6:6a:8f:c8:2b:69:54:fd:f2:88:a1:dd:ec:bd:ff:
                    49:17:b9:d4:a9:5c:07:5d:91:17:15:f0:3f:31:47:
                    57:ef:ff:a0:31:11:12:49:7c:2c:d1:ef:dc:a8:bc:
                    f1:f7:6e:72:a9:19:00:e9:31:43:82:d9:48:82:6a:
                    f0:b4:4f:43:f5:84:f4:82:13:d2:b6:aa:07:42:f6:
                    e8:9c:15:84:54:d0:ea:1a:1c:71:40:c3:f5:9e:ba:
                    79:36:a8:cc:40:0a:f6:76:13:d1:2a:e6:64:ee:31:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B1:1C:CE:9D:B3:CB:9E:E9:6C:B4:CB:52:DB:9E:0E:ED:02:E6:CC
            X509v3 Authority Key Identifier:
                keyid:C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/323430353a396434303a3a2f33322d3438203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:8f:59:95:c9:6a:9b:ab:fb:ed:e8:25:7e:dd:e5:f9:db:c5:
         57:a9:82:e2:cf:78:a6:ce:8f:da:d4:e7:8f:55:eb:3c:57:56:
         ca:76:de:cf:64:18:17:21:29:38:3b:9d:31:4e:cb:09:58:52:
         3b:22:48:a2:49:e7:fb:ed:a4:80:7d:29:6a:b0:21:3d:75:5f:
         e1:a4:cf:9a:1c:63:ba:75:dd:99:f5:f9:a5:49:4b:93:a1:e9:
         38:42:05:61:77:de:fa:6b:4c:37:6b:a4:fd:a1:73:3a:cd:89:
         f6:98:86:46:b2:c7:db:a1:e9:d1:ae:f4:c3:fc:13:c4:3e:9c:
         1b:6e:19:b2:eb:a6:74:d4:09:34:e6:4b:15:f6:1b:62:5b:07:
         ec:78:0e:74:5a:ec:3d:fd:21:49:99:29:6d:92:25:a5:fd:3c:
         ab:6a:93:fd:ac:25:08:08:c0:f5:a3:d6:ae:47:9b:1d:b5:e8:
         db:11:65:07:11:85:a7:fe:b2:92:df:a0:18:8d:99:78:24:14:
         93:5b:30:d4:b4:65:55:38:23:3a:fb:1d:93:31:9b:74:ec:47:
         67:a8:ea:43:89:7c:b7:4e:ec:cf:7b:d4:85:de:b7:13:1b:ee:
         47:36:4d:7a:4c:f9:f2:6f:b7:96:d3:b1:b9:cb:01:5c:7e:aa:
         74:dc:7f:64
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUQuSBXdKA1/PW+B/dRUmaRQGyMIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMz
MkY3NTk2MjAeFw0yNDEyMjcwMjU2MTVaFw0yNTEyMjYwMzAxMTVaMDMxMTAvBgNV
BAMTKDdDQjExQ0NFOURCM0NCOUVFOTZDQjRDQjUyREI5RTBFRUQwMkU2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZel7cFgcIQozLJ78AHGVKdFY
YbXGwecnYW3Um1IOQ93U1k3u14k01k+FGg8FVW4peHWWiqSsy6eyzj6U7sIBFKxE
8v5VC+dsTHAvyJTD6wtFEFTSLOEFZqMym3iDTHH2B0T7b9CL6ikwPYxDrsdHtKto
hpzEbwVKUnOpAird/2KhEkVAz89p5pKLvK6RGrGm/xnKjLZqj8graVT98oih3ey9
/0kXudSpXAddkRcV8D8xR1fv/6AxERJJfCzR79yovPH3bnKpGQDpMUOC2UiCavC0
T0P1hPSCE9K2qgdC9uicFYRU0OoaHHFAw/Weunk2qMxACvZ2E9Eq5mTuMYUPAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUfLEczp2zy57pbLTLUtueDu0C5swwHwYDVR0j
BBgwFoAUwAVTFIjzhHXKU8tKerzsDDL3WWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NDY0Y2JlZS1jNTEzLTQ2YzYtYTFkMC0zZWMwMWQ3YTY2MjYvMC9DMDA1NTMxNDg4
RjM4NDc1Q0E1M0NCNEE3QUJDRUMwQzMyRjc1OTYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMzMkY3
NTk2Mi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0NjRjYmVlLWM1MTMtNDZjNi1h
MWQwLTNlYzAxZDdhNjYyNi8wLzMyMzQzMDM1M2EzOTY0MzQzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDM1MzgzNDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBZ1AMA0GCSqGSIb3
DQEBCwUAA4IBAQDPj1mVyWqbq/vt6CV+3eX528VXqYLiz3imzo/a1OePVes8V1bK
dt7PZBgXISk4O50xTssJWFI7IkiiSef77aSAfSlqsCE9dV/hpM+aHGO6dd2Z9fml
SUuToek4QgVhd976a0w3a6T9oXM6zYn2mIZGssfboenRrvTD/BPEPpwbbhmy66Z0
1Ak05ksV9htiWwfseA50Wuw9/SFJmSltkiWl/TyrapP9rCUICMD1o9auR5sdtejb
EWUHEYWn/rKS36AYjZl4JBSTWzDUtGVVOCM6+x2TMZt07EdnqOpDiXy3TuzPe9SF
3rcTG+5HNk16TPnyb7eW07G5ywFcfqp03H9k
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:34 2025 by rpki-client