Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a3a2f33322d3438203d3e203338313538.roa
File:                     323430323a393830303a3a2f33322d3438203d3e203338313538.roa (raw, json)
Hash identifier:          YuhlhGpBa/rvdjFiICmkr20uOyD33Y2ob8cJ0jjldVM=
Subject key identifier:   6C:33:95:34:2F:9B:F6:99:BE:01:25:42:D2:C1:3F:18:50:1E:D2:1F
Certificate issuer:       /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Certificate serial:       53DAF86DE8E268FB0A6E8FF149206C8FFE4E9726
Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a3a2f33322d3438203d3e203338313538.roa
Signing time:             Mon 02 Jun 2025 02:04:40 +0000
ROA not before:           Mon 02 Jun 2025 01:59:40 +0000
ROA not after:            Mon 01 Jun 2026 02:04:40 +0000
asID:                     38158
IP address blocks:        2402:9800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl
                          rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 00:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:da:f8:6d:e8:e2:68:fb:0a:6e:8f:f1:49:20:6c:8f:fe:4e:97:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
        Validity
            Not Before: Jun  2 01:59:40 2025 GMT
            Not After : Jun  1 02:04:40 2026 GMT
        Subject: CN=6C3395342F9BF699BE012542D2C13F18501ED21F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:ba:04:26:69:9e:28:86:99:8b:e5:e1:07:
                    09:d4:c5:1d:a7:46:ca:94:0d:3f:2e:c7:86:a5:20:
                    e4:e7:9f:de:89:3f:ce:44:db:f5:41:27:89:fe:24:
                    cb:f5:8e:cd:a0:a2:7a:b0:74:4f:cf:a1:b5:2a:73:
                    38:d0:a7:47:b8:2c:09:37:42:c9:31:58:ac:b4:72:
                    02:13:25:fb:e3:0c:86:dd:a1:87:6e:ca:53:d0:6a:
                    0d:19:86:ec:75:5b:9a:35:0c:ed:d4:1e:3f:04:ce:
                    87:8b:cc:f1:88:39:48:25:43:59:93:07:65:e1:ee:
                    bc:4b:cd:2a:2b:35:50:9a:eb:be:26:aa:76:42:98:
                    c1:38:4a:5f:37:d5:24:6e:ea:22:58:f9:60:f6:e5:
                    e8:7a:03:4b:82:23:c8:f1:6c:88:19:46:20:24:f6:
                    e8:6f:1f:69:aa:b5:1c:4d:03:7c:69:de:8b:50:81:
                    f9:ab:5d:ec:ed:d6:58:31:97:d3:77:f3:1d:5c:5d:
                    38:35:6b:b3:c3:be:a7:0a:2c:af:51:85:f1:5c:a9:
                    d7:81:41:d2:73:b7:2b:10:cc:54:cf:bc:a2:15:e6:
                    8f:53:d9:60:84:28:89:c7:8f:2c:7a:93:43:0b:75:
                    cb:6c:15:94:24:12:b4:17:45:d2:51:08:d0:60:49:
                    50:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:33:95:34:2F:9B:F6:99:BE:01:25:42:D2:C1:3F:18:50:1E:D2:1F
            X509v3 Authority Key Identifier:
                keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a3a2f33322d3438203d3e203338313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9800::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:4d:9a:fc:04:66:f8:2e:99:33:ea:5a:32:7b:d9:92:55:95:
         d1:04:ee:c4:ef:4d:1b:ee:15:89:5e:5d:ea:4c:3e:59:7f:9c:
         fe:68:e0:f8:16:03:f0:95:76:b8:ab:93:85:fb:98:1d:39:a4:
         e0:a9:75:de:db:61:7c:29:6b:44:4c:ca:06:51:51:35:70:1f:
         b3:a3:d3:e2:2e:55:19:cf:48:1b:4c:04:09:0b:87:f3:c6:7b:
         bb:7c:a0:7b:b6:3b:60:38:22:7a:6e:b9:7c:81:ef:6f:3e:e2:
         7e:79:f8:31:9c:9a:57:8e:ee:ed:54:52:98:8f:bb:93:82:01:
         8f:0d:34:9e:03:82:b0:26:1d:e5:43:e7:3a:b1:86:97:58:92:
         d8:ce:3a:48:27:e8:5b:66:b0:0e:bd:65:a4:d6:91:d6:79:ab:
         ac:ff:86:d6:d6:b6:0a:da:0a:42:4a:3b:79:c8:2b:c7:1c:09:
         5f:bd:21:06:df:b7:8f:99:77:77:b0:ec:89:6a:1f:04:51:17:
         48:60:07:17:b9:7c:7b:b6:81:7a:c9:8c:f4:c7:39:c4:93:bf:
         f2:fd:87:9c:20:ee:15:75:b1:b2:2a:a5:4b:d0:04:58:ba:af:
         06:de:69:ab:2a:6d:a4:ac:e1:2a:9f:ef:58:52:29:62:56:17:
         60:b7:bd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:09 2025 by rpki-client