Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa
File:                     323430333a666438303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier:          CXEUJbWbg11RsXHKqmp8wNpts2Ji5ARDaVQOi8Z/QIM=
Subject key identifier:   6B:4B:87:F5:76:44:3C:07:C5:92:9A:7F:37:57:24:F7:B0:03:20:C8
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       329454262BF6514B8121325FBDE647B30F833E58
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa
Signing time:             Fri 06 Dec 2024 11:00:01 +0000
ROA not before:           Fri 06 Dec 2024 10:55:01 +0000
ROA not after:            Fri 05 Dec 2025 11:00:01 +0000
asID:                     58369
IP address blocks:        2403:fd80::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 01:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:94:54:26:2b:f6:51:4b:81:21:32:5f:bd:e6:47:b3:0f:83:3e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Dec  6 10:55:01 2024 GMT
            Not After : Dec  5 11:00:01 2025 GMT
        Subject: CN=6B4B87F576443C07C5929A7F375724F7B00320C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:fe:18:5c:57:1a:8a:a9:39:08:82:df:62:
                    07:c5:eb:8b:15:6c:81:5e:ae:5f:1a:0e:c9:11:e0:
                    8d:cd:b4:94:1d:1b:3f:bc:69:75:d5:c7:56:8c:81:
                    ae:26:16:ea:5a:e7:c2:aa:d1:d0:e3:80:9b:37:a4:
                    87:29:f5:57:5d:ab:05:c9:9f:fb:6c:f2:50:63:37:
                    57:8b:31:aa:86:4a:9c:a5:03:71:82:4f:65:63:08:
                    85:ad:7c:f7:12:55:79:5f:81:b7:f1:db:99:e6:19:
                    c3:74:95:0e:20:44:6d:38:97:a6:8b:d8:c5:b0:61:
                    db:02:f3:67:a1:1d:9e:30:ec:42:6e:18:33:c5:aa:
                    7e:f2:cb:08:70:d0:3f:cc:93:b4:5e:ed:a4:5a:6d:
                    7c:a1:18:20:09:a2:3f:4b:8a:fd:d0:b4:6d:7b:73:
                    b0:e4:24:72:fb:3f:31:8d:e8:49:88:cc:5c:fc:90:
                    96:6c:1a:1c:ee:93:1e:0b:89:61:12:d7:09:e0:14:
                    55:2d:c9:6c:05:e4:04:2c:c1:ca:24:0a:bd:c0:42:
                    d5:47:18:2e:40:8a:26:d1:84:c0:34:e9:3b:20:70:
                    cc:30:44:9c:79:94:ed:d6:de:12:d2:49:2d:d2:ad:
                    2d:14:d3:28:2e:4f:46:70:7b:2e:b7:f9:da:ad:98:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4B:87:F5:76:44:3C:07:C5:92:9A:7F:37:57:24:F7:B0:03:20:C8
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fd80::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:48:2f:9a:b6:d0:40:2b:97:04:81:f6:e6:d0:c2:98:3d:50:
         1e:90:90:68:68:ce:c6:51:1b:62:b5:d0:2b:3e:2b:7b:08:9c:
         7e:24:0f:85:90:3b:52:69:79:c6:b1:1c:3b:9a:c6:41:f9:85:
         9a:91:32:dd:e0:69:be:2d:c9:2a:30:42:7f:f5:6d:96:9f:70:
         24:01:4b:b1:b6:1f:05:89:e6:3b:5d:f7:6c:e7:ea:48:ba:07:
         d0:4a:7c:6a:d6:29:73:2c:3a:cd:7e:02:d7:91:f2:d5:01:a8:
         9f:e6:ba:2e:9f:df:8e:a8:89:4b:b0:23:1e:42:a0:82:77:ff:
         a1:dc:22:dc:da:de:4c:50:66:58:fc:6c:67:39:75:b0:63:a8:
         d2:e2:a0:18:1c:43:ca:ea:06:0c:e7:80:c8:d4:2e:9f:01:61:
         8e:3c:8e:50:c8:2f:5e:2c:8d:3d:dd:7a:59:40:d0:f1:54:e6:
         d2:78:e6:4b:8f:cf:e0:ed:b2:8d:f0:9c:69:49:e0:ad:84:c7:
         56:f9:1a:e9:e8:89:8d:86:f6:5c:ec:81:b5:80:9e:f3:db:03:
         7a:18:cb:ad:cb:64:71:c8:e2:30:6b:cb:8d:a5:7e:64:3a:0a:
         50:59:f0:a9:0d:d6:5e:ae:7a:69:f4:75:b1:0a:e2:88:7c:5e:
         92:2a:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:09 2025 by rpki-client