Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/323430353a326334303a3a2f33322d3438203d3e203435373035.roa
File:                     323430353a326334303a3a2f33322d3438203d3e203435373035.roa (raw, json)
Hash identifier:          KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=
Subject key identifier:   24:7B:16:A4:B3:6D:2E:6D:94:13:92:47:73:66:19:B7:8A:DB:CD:B6
Certificate issuer:       /CN=348D53D52081AB75C21BE292C2A5077DF4B75308
Certificate serial:       6271A9612002FB0E3E30349F059D356A5E120975
Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/323430353a326334303a3a2f33322d3438203d3e203435373035.roa
Signing time:             Mon 02 Jun 2025 02:04:44 +0000
ROA not before:           Mon 02 Jun 2025 01:59:44 +0000
ROA not after:            Mon 01 Jun 2026 02:04:44 +0000
asID:                     45705
IP address blocks:        2405:2c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl
                          rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 08:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:71:a9:61:20:02:fb:0e:3e:30:34:9f:05:9d:35:6a:5e:12:09:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308
        Validity
            Not Before: Jun  2 01:59:44 2025 GMT
            Not After : Jun  1 02:04:44 2026 GMT
        Subject: CN=247B16A4B36D2E6D94139247736619B78ADBCDB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fa:06:4b:f9:79:41:f1:61:ff:0b:77:5f:64:
                    e3:f1:62:9b:da:dc:86:70:14:6d:e1:a9:1a:38:f3:
                    ef:41:66:13:7b:60:a8:a9:1c:aa:bf:c4:f2:a6:fa:
                    5a:55:2c:5b:62:5e:cc:0c:da:16:de:4c:a5:3b:c5:
                    2a:17:69:3b:80:db:09:85:7a:03:81:d4:6b:3f:86:
                    4a:bc:19:63:fc:47:cd:62:51:f5:89:10:85:97:fd:
                    5a:f4:29:fd:58:ec:9c:27:dc:0b:e3:fa:76:5e:c3:
                    76:97:30:61:26:9b:58:03:9b:8d:2f:c9:66:77:e9:
                    15:58:4a:71:16:a3:3f:b8:a7:63:be:7b:97:63:d5:
                    9f:a7:6a:78:93:c3:10:fe:fa:33:1a:c8:4f:41:9a:
                    b5:84:08:33:e7:e9:f0:0a:c9:df:98:19:2e:90:ee:
                    c5:c9:25:87:e1:ae:6e:24:6d:f2:58:29:70:a8:da:
                    70:60:ec:47:b8:1c:54:65:28:76:3f:3a:77:3f:1d:
                    af:9e:43:06:26:6e:2a:1c:a9:01:96:69:64:a2:c2:
                    f1:9f:74:18:64:7f:bb:53:4b:87:dc:a7:75:b9:87:
                    a1:88:c8:e1:e9:d4:9d:ed:c8:66:87:db:cf:ab:77:
                    12:a6:91:fc:f4:64:71:8f:e7:01:d1:fd:8e:ca:3b:
                    e4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7B:16:A4:B3:6D:2E:6D:94:13:92:47:73:66:19:B7:8A:DB:CD:B6
            X509v3 Authority Key Identifier:
                keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/323430353a326334303a3a2f33322d3438203d3e203435373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:a5:94:3a:20:46:66:87:0b:00:3b:29:cf:50:89:4c:29:67:
         f9:0b:5d:05:7f:c3:df:08:c2:58:e6:00:d8:53:43:8f:6e:b7:
         5c:72:3c:10:9b:e3:37:be:31:5a:4c:13:e2:2f:a8:39:82:04:
         49:06:52:14:61:8c:eb:eb:7f:b5:36:45:60:21:47:55:e8:4f:
         d4:26:c6:66:b1:b7:94:8b:d6:91:57:73:6f:25:e2:14:13:e1:
         77:1c:4e:6d:81:b7:ca:c5:de:fd:72:8a:0f:6b:e5:c8:a6:5d:
         10:13:a2:45:27:50:d1:1e:a7:9a:cb:02:02:46:cd:97:df:8f:
         06:f1:01:7b:8e:fa:da:1d:09:d9:ba:2c:0f:88:e5:d8:49:df:
         02:38:2a:60:62:49:7f:13:a3:9f:ab:69:80:36:6a:dd:85:9b:
         f0:6f:f0:87:ee:4a:e9:9b:ca:7e:05:88:4f:f2:98:ba:a0:87:
         51:c7:51:ac:d2:e0:5a:0c:3e:dd:4c:53:e8:75:9f:1a:09:20:
         ff:b6:70:39:5a:11:17:f2:fc:e0:e4:66:a5:9d:d5:1e:53:04:
         3b:29:5a:47:98:83:85:e6:9e:97:75:1a:01:07:51:fa:36:c8:
         98:8d:78:b9:4a:c9:ed:f8:7a:40:d5:6b:35:c4:fc:9e:8a:f0:
         3f:be:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:11 2025 by rpki-client