Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3332203d3e203538333639.roa
File:                     323430333a666438303a3a2f33322d3332203d3e203538333639.roa (raw, json)
Hash identifier:          dKntU/8KUccd1jQlL53HnU8r2eNkZdajgqdAWp6L8uw=
Subject key identifier:   C9:A2:D1:8E:6B:F8:A6:FE:E7:50:04:E6:20:4A:81:B8:CF:19:84:B6
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       26F298120CCD12CE50BD66CFD87EA513CA2E8360
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3332203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:38 +0000
ROA not before:           Mon 02 Jun 2025 01:58:38 +0000
ROA not after:            Mon 01 Jun 2026 02:03:38 +0000
asID:                     58369
IP address blocks:        2403:fd80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f2:98:12:0c:cd:12:ce:50:bd:66:cf:d8:7e:a5:13:ca:2e:83:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:38 2025 GMT
            Not After : Jun  1 02:03:38 2026 GMT
        Subject: CN=C9A2D18E6BF8A6FEE75004E6204A81B8CF1984B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:09:78:fa:31:1a:6c:bd:6b:80:c4:80:31:
                    4a:32:13:3e:a5:f5:bf:fd:e1:37:7f:25:15:82:91:
                    d8:82:7a:62:16:1a:03:a4:aa:6a:a9:e4:47:cc:6c:
                    5b:41:4c:e5:0e:18:2f:b4:ac:44:d4:c5:db:5a:d8:
                    f4:05:6c:08:3d:b6:b5:a8:db:90:18:62:f7:dc:b6:
                    bd:81:c4:cf:a4:e7:07:4d:e2:6a:39:36:ea:67:9c:
                    7b:40:64:e3:cf:8a:d2:73:a1:47:57:6a:8f:50:df:
                    1e:55:ee:4f:9b:a3:c2:5d:37:91:1e:a6:42:5a:0b:
                    6a:ef:63:a9:d7:08:04:18:e2:74:8b:24:c7:b5:1e:
                    90:61:4b:6c:e8:f0:bf:93:d6:11:b2:ab:3d:ff:a7:
                    e7:95:a5:0d:1b:a4:23:de:e7:e2:ef:e7:35:ff:11:
                    d6:a1:a5:29:8e:e2:fb:5e:af:e5:e9:aa:07:03:76:
                    fd:b1:e8:9a:c9:7e:30:a3:eb:77:82:9a:36:5a:c4:
                    48:eb:14:8d:7e:fd:71:53:79:81:58:8f:ed:06:79:
                    2d:1a:4e:9b:13:60:4e:36:27:1d:18:4a:c5:3b:86:
                    71:ae:06:eb:6d:25:86:e5:7f:3e:b2:27:85:96:e5:
                    71:74:32:85:00:3c:a2:30:bb:9b:e7:32:ec:18:d2:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A2:D1:8E:6B:F8:A6:FE:E7:50:04:E6:20:4A:81:B8:CF:19:84:B6
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3332203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:f1:2b:be:f0:58:7d:79:65:30:c5:1f:16:d9:b8:88:6c:df:
         2f:c6:cc:23:ed:36:58:49:fb:2c:ef:cd:dc:ef:80:af:e8:1a:
         f9:55:5a:ae:e4:86:de:ba:3a:6c:db:5e:cb:d7:db:e7:56:78:
         f4:89:1e:1d:e9:30:50:3f:e1:08:53:54:f8:bc:ed:ec:8f:7a:
         d9:39:85:6f:cb:b5:fb:3d:17:bb:39:9a:c3:13:8c:62:ab:0a:
         5b:83:1d:0c:6e:87:99:c1:ff:e6:e8:2b:19:8c:cb:e7:91:db:
         8b:61:35:f3:dc:23:13:cb:46:72:91:b9:64:0f:7b:92:80:45:
         54:d6:23:03:2c:9f:39:09:5a:ee:da:19:ab:d7:ab:53:b5:d9:
         3f:a9:48:da:c1:d8:35:fd:87:c6:e9:f7:35:2f:3f:e0:ea:d3:
         17:9b:ca:89:6b:15:6b:9f:46:db:ad:14:8d:1c:81:b4:f7:a9:
         d1:79:94:ce:13:7d:2e:dd:a2:58:93:8f:1e:a2:3d:ad:27:d1:
         24:a9:46:22:e8:11:c0:c1:a6:2e:05:c5:45:b6:82:b7:31:d9:
         cc:c5:03:1a:cb:40:1b:7d:81:1f:d0:9d:09:9e:dd:0c:bc:d8:
         32:e2:ec:fb:3c:cb:30:92:41:0b:74:a4:1e:be:1f:65:47:aa:
         d7:cd:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:38 2025 by rpki-client