Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/323430353a366134303a3a2f33322d3332203d3e20313339343235.roa
File:                     323430353a366134303a3a2f33322d3332203d3e20313339343235.roa (raw, json)
Hash identifier:          sqlbIIr/3B92d510dnWRSBB/lQtkjQSBObhW88AnQqI=
Subject key identifier:   E0:E0:03:22:C6:60:EC:21:FB:C8:19:07:E2:72:4A:D4:A1:5A:DB:0B
Certificate issuer:       /CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE
Certificate serial:       2BAAFBBA7258FD89E17BD194C2DF7E0D534B10DC
Authority key identifier: 1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/323430353a366134303a3a2f33322d3332203d3e20313339343235.roa
Signing time:             Mon 02 Jun 2025 01:02:32 +0000
ROA not before:           Mon 02 Jun 2025 00:57:32 +0000
ROA not after:            Mon 01 Jun 2026 01:02:32 +0000
asID:                     139425
IP address blocks:        2405:6a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl
                          rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:aa:fb:ba:72:58:fd:89:e1:7b:d1:94:c2:df:7e:0d:53:4b:10:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE
        Validity
            Not Before: Jun  2 00:57:32 2025 GMT
            Not After : Jun  1 01:02:32 2026 GMT
        Subject: CN=E0E00322C660EC21FBC81907E2724AD4A15ADB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:68:8b:10:e9:c1:75:72:e9:05:f7:5f:6f:
                    7e:72:27:18:9d:bf:b4:cf:4d:19:7d:f4:41:10:c6:
                    94:6d:89:ab:db:fa:29:6e:36:e9:f3:dc:08:22:a1:
                    ea:25:c0:5e:e6:4c:a0:02:1e:ee:17:26:cb:87:e5:
                    6e:38:d1:69:a5:4d:04:e9:03:e6:ed:c2:3d:22:66:
                    28:04:02:b2:d0:74:04:c6:41:76:43:b7:42:4e:41:
                    02:60:2b:d9:28:05:c3:d2:51:2a:a6:cb:c4:2f:50:
                    0a:33:61:75:77:d0:cf:02:30:e4:c8:fb:0e:85:8c:
                    b6:c9:97:aa:5f:83:ce:d3:ef:c0:5a:d0:69:89:5e:
                    a0:67:58:a0:b4:85:5c:fe:4c:fc:20:84:7a:1a:71:
                    2b:f7:ea:ff:46:24:19:d5:15:cf:3b:b5:71:94:fa:
                    43:63:4a:2f:92:1d:f0:0c:f0:fb:f9:99:f3:db:00:
                    4f:53:6b:41:4e:76:ea:a5:02:f8:57:30:4c:f0:81:
                    8a:cb:ba:94:6e:ac:f4:88:e1:63:0c:7f:7c:8b:f2:
                    06:d8:d0:27:c2:cf:0b:fa:cb:09:10:4c:d8:be:0f:
                    6f:3a:00:ca:7a:54:9c:de:13:ca:54:9a:75:1c:ad:
                    7f:6d:e0:be:4f:05:30:6e:2d:af:0b:2a:0a:b9:66:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E0:03:22:C6:60:EC:21:FB:C8:19:07:E2:72:4A:D4:A1:5A:DB:0B
            X509v3 Authority Key Identifier:
                keyid:1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/323430353a366134303a3a2f33322d3332203d3e20313339343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:6a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:f8:2f:a6:93:0a:91:60:9e:c8:14:16:6a:bf:9f:db:19:5c:
         19:26:f6:0d:54:af:32:f1:10:f8:9a:d3:d7:c2:aa:c5:02:2f:
         99:79:e8:6c:8e:8b:85:d9:8b:67:5f:63:40:11:48:f7:25:1a:
         e9:2d:c2:96:c7:17:36:be:5a:86:16:0f:86:bc:b0:0f:0f:de:
         53:31:96:30:d4:7d:a8:f7:97:4b:af:b2:a8:95:29:81:a5:57:
         c7:bc:7e:8e:50:be:d8:df:62:27:26:75:0c:8e:71:9d:fe:e0:
         58:da:e2:30:6f:15:8c:67:b4:7c:af:f4:f7:99:1d:a3:92:7d:
         b2:88:be:60:7a:eb:cb:a7:4e:4d:12:54:07:0d:99:98:e2:52:
         6d:52:f4:7c:9c:b9:2d:04:e1:4b:42:82:37:d7:a0:ce:c4:69:
         eb:00:3c:d4:e1:42:7f:a0:5a:13:6e:be:81:63:01:fd:bf:2f:
         72:45:40:e7:59:6f:41:d2:54:78:cb:22:95:30:f3:8c:18:ab:
         33:8f:c3:d2:26:9b:45:51:09:9a:40:b4:22:6e:8b:97:b3:46:
         4a:d8:9c:1b:3f:c7:d2:67:f5:b9:68:11:89:2d:c2:0d:dd:f6:
         fb:48:4d:e0:a1:7c:93:64:bf:63:67:a9:ba:60:b1:88:89:88:
         99:ef:a5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:43 2025 by rpki-client