Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f34302d3430203d3e203233363739.roa
File:                     323430313a323930303a3a2f34302d3430203d3e203233363739.roa (raw, json)
Hash identifier:          wik+jXDPzQGR9ICJEJGC4V5AcncrqBQJcedMIHjENt0=
Subject key identifier:   1D:7F:7A:55:D5:77:05:9C:59:C7:0A:1C:5C:7B:93:52:5C:4C:D2:6A
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       4F7B0F592D4E92AE162F7B90A87A654AC87EB9F3
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f34302d3430203d3e203233363739.roa
Signing time:             Wed 01 Jan 2025 04:00:38 +0000
ROA not before:           Wed 01 Jan 2025 03:55:38 +0000
ROA not after:            Wed 31 Dec 2025 04:00:38 +0000
asID:                     23679
IP address blocks:        2401:2900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 10:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7b:0f:59:2d:4e:92:ae:16:2f:7b:90:a8:7a:65:4a:c8:7e:b9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Jan  1 03:55:38 2025 GMT
            Not After : Dec 31 04:00:38 2025 GMT
        Subject: CN=1D7F7A55D577059C59C70A1C5C7B93525C4CD26A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:f2:3b:68:38:82:ac:f3:fd:9b:ae:73:e1:0b:
                    b0:02:be:db:a7:c6:2d:21:6d:bf:a0:33:a9:a6:bc:
                    34:31:87:99:10:98:7f:0e:a3:54:52:43:ab:9f:d2:
                    0b:4b:c6:fc:01:dd:e5:6f:91:e6:3d:cd:f3:05:aa:
                    f4:9e:00:17:d6:b9:74:49:bc:d0:cc:de:f7:2c:b5:
                    1f:0d:bd:eb:e7:8e:1f:ec:6e:c9:a0:d5:30:c2:9e:
                    65:c7:2f:af:95:1e:f7:07:62:b4:69:46:03:c5:af:
                    1b:7a:6e:d8:84:b5:6a:9d:dd:ce:9b:36:a2:25:77:
                    09:b8:fd:3d:c4:57:ea:aa:a1:76:83:87:bb:14:3c:
                    15:ba:b3:b0:fa:e3:3d:6f:74:a2:1e:11:17:a2:f7:
                    e0:10:c0:f8:d1:bc:a1:34:56:2e:b2:26:05:19:a8:
                    11:58:f5:3b:aa:62:53:1e:18:8b:f4:2f:7f:d0:bf:
                    4e:bd:e7:ce:66:a7:27:65:da:c1:70:b9:66:38:9d:
                    c9:50:da:8b:c8:6c:9a:5c:e5:4b:0d:d2:08:07:1e:
                    5f:ac:1e:07:c2:9c:22:18:82:9a:d8:79:3c:ec:7a:
                    d4:27:fb:6e:4e:3c:c7:29:13:f9:77:73:40:7c:eb:
                    5b:6b:a1:26:50:f9:a6:b5:d6:72:eb:eb:1c:76:c2:
                    0f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7F:7A:55:D5:77:05:9C:59:C7:0A:1C:5C:7B:93:52:5C:4C:D2:6A
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f34302d3430203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2900::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:c5:17:10:c4:a8:49:1f:ab:11:5f:da:ec:e9:c5:3a:be:7d:
         e1:1c:1e:20:21:3b:36:0b:47:83:2f:71:8f:33:b2:37:f0:41:
         82:c5:78:9b:7b:c8:3b:cf:c3:7c:58:db:e1:a6:38:04:29:bd:
         30:64:9f:24:e4:a6:3d:9d:c9:46:02:0c:20:0d:0c:a9:71:d2:
         83:47:4d:b0:de:b8:62:6f:1f:f8:d0:88:23:3a:bb:1b:95:44:
         45:07:4c:18:b6:13:c6:c5:a5:ae:e9:7f:d8:95:79:b0:5f:e1:
         08:59:94:35:e8:57:e5:5b:41:66:e2:a2:19:0f:47:9e:da:26:
         ca:50:2e:1e:d3:a3:69:7b:80:dc:0e:e9:6b:a6:b9:c5:aa:5f:
         80:b3:b1:3b:25:7d:0a:c5:d7:2b:98:3e:50:5c:9e:a4:f9:89:
         5d:c5:00:8d:4e:de:c8:56:64:dd:b9:da:30:bf:1a:49:cc:1d:
         6d:be:43:67:00:2d:88:56:a1:cc:87:da:1b:bb:e8:d8:3a:af:
         34:54:0b:c7:30:c0:de:37:46:52:d1:0f:98:12:07:b9:c6:82:
         78:35:57:be:fd:f3:86:7a:39:b4:02:ae:ce:29:39:c8:13:51:
         f2:55:1a:f2:4e:e3:93:4e:d1:88:b6:da:f3:44:d0:5b:0c:57:
         61:65:f1:c5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUT3sPWS1Okq4WL3uQqHplSsh+ufMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0
RkE2Njk4NDAeFw0yNTAxMDEwMzU1MzhaFw0yNTEyMzEwNDAwMzhaMDMxMTAvBgNV
BAMTKDFEN0Y3QTU1RDU3NzA1OUM1OUM3MEExQzVDN0I5MzUyNUM0Q0QyNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD78jtoOIKs8/2brnPhC7ACvtun
xi0hbb+gM6mmvDQxh5kQmH8Oo1RSQ6uf0gtLxvwB3eVvkeY9zfMFqvSeABfWuXRJ
vNDM3vcstR8Nvevnjh/sbsmg1TDCnmXHL6+VHvcHYrRpRgPFrxt6btiEtWqd3c6b
NqIldwm4/T3EV+qqoXaDh7sUPBW6s7D64z1vdKIeERei9+AQwPjRvKE0Vi6yJgUZ
qBFY9TuqYlMeGIv0L3/Qv069585mpydl2sFwuWY4nclQ2ovIbJpc5UsN0ggHHl+s
HgfCnCIYgprYeTzsetQn+25OPMcpE/l3c0B861troSZQ+aa11nLr6xx2wg8vAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUHX96VdV3BZxZxwocXHuTUlxM0mowHwYDVR0j
BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF
OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2
Njk4NC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhM2EyZjM0MzAy
ZDM0MzAyMDNkM2UyMDMyMzMzNjM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAkASkAADANBgkqhkiG
9w0BAQsFAAOCAQEAk8UXEMSoSR+rEV/a7OnFOr594RweICE7NgtHgy9xjzOyN/BB
gsV4m3vIO8/DfFjb4aY4BCm9MGSfJOSmPZ3JRgIMIA0MqXHSg0dNsN64Ym8f+NCI
Izq7G5VERQdMGLYTxsWlrul/2JV5sF/hCFmUNehX5VtBZuKiGQ9HntomylAuHtOj
aXuA3A7pa6a5xapfgLOxOyV9CsXXK5g+UFyepPmJXcUAjU7eyFZk3bnaML8aScwd
bb5DZwAtiFahzIfaG7vo2DqvNFQLxzDA3jdGUtEPmBIHucaCeDVXvv3zhno5tAKu
zik5yBNR8lUa8k7jk07RiLba80TQWwxXYWXxxQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:42 2025 by rpki-client