Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/323430363a663138303a3a2f33322d3332203d3e20313335343734.roa
File:                     323430363a663138303a3a2f33322d3332203d3e20313335343734.roa (raw, json)
Hash identifier:          Rd705O9W8SWKuJ5NF6AkaZQphAXZfZhGKbEWE+jjbEk=
Subject key identifier:   DC:5D:9D:29:3D:DD:8C:7D:A8:70:E8:BE:91:56:97:A4:5E:A6:D4:0F
Certificate issuer:       /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial:       07C131FEBBC77DD55303B40E9FA75D3DB2AE3BBE
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/323430363a663138303a3a2f33322d3332203d3e20313335343734.roa
Signing time:             Sun 04 Aug 2024 09:00:00 +0000
ROA not before:           Sun 04 Aug 2024 08:55:00 +0000
ROA not after:            Sun 03 Aug 2025 09:00:00 +0000
asID:                     135474
IP address blocks:        2406:f180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl
                          rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Feb 2025 02:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c1:31:fe:bb:c7:7d:d5:53:03:b4:0e:9f:a7:5d:3d:b2:ae:3b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
        Validity
            Not Before: Aug  4 08:55:00 2024 GMT
            Not After : Aug  3 09:00:00 2025 GMT
        Subject: CN=DC5D9D293DDD8C7DA870E8BE915697A45EA6D40F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:56:1e:d2:de:31:e1:0e:90:4e:ae:7e:3e:
                    8c:53:a6:5b:7a:28:37:cc:90:38:d3:87:25:0a:86:
                    9d:7f:b4:7f:fc:c6:30:d1:39:2c:d8:11:1a:91:7f:
                    42:aa:bd:15:96:35:13:80:b9:c9:ca:9a:cf:f3:5c:
                    dc:25:0c:3c:26:b5:30:69:73:1d:e1:bb:0b:47:6f:
                    e8:e4:d9:28:26:06:71:e9:a4:32:34:6e:eb:8e:5d:
                    89:d6:98:c9:70:c7:88:97:a0:18:90:91:61:51:39:
                    93:6a:92:dc:d8:8b:f5:c2:ae:ac:4f:1e:3c:cc:7f:
                    72:b7:c6:94:8d:81:29:f3:2e:8b:88:67:42:80:1b:
                    c9:04:29:ba:eb:58:9f:8b:4a:86:57:30:37:cd:4e:
                    6c:9a:c3:85:23:de:8b:92:2e:a4:c2:1c:20:ab:db:
                    83:e3:e3:f3:8a:2c:5e:d9:ea:4b:26:1d:c7:60:3e:
                    3d:53:c3:de:16:59:77:77:f9:35:ff:0a:95:22:3c:
                    35:83:72:fe:5f:a9:a0:e3:c9:fd:29:3c:18:cc:0e:
                    56:04:68:28:d6:ee:4d:59:ef:59:a6:39:d2:84:fe:
                    0b:1f:df:76:41:2b:11:d2:7c:e5:e2:81:9f:29:7a:
                    b6:11:5a:87:94:8d:ec:cd:e8:68:62:7d:74:59:77:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5D:9D:29:3D:DD:8C:7D:A8:70:E8:BE:91:56:97:A4:5E:A6:D4:0F
            X509v3 Authority Key Identifier:
                keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/323430363a663138303a3a2f33322d3332203d3e20313335343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f180::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:fe:d1:dd:68:a2:65:0c:25:f6:ea:f4:bc:69:f3:3c:21:
         30:8d:a5:d6:26:15:82:d3:db:9d:5f:98:c1:fb:fe:ae:01:92:
         b9:b2:4b:5a:a1:d8:72:e4:ad:de:e4:04:b3:62:e1:4f:24:b0:
         c5:1b:d0:91:f3:66:1f:fd:6b:37:84:10:89:fb:65:0e:8c:71:
         37:24:e6:23:e6:29:56:80:47:a5:de:7d:a2:87:3c:58:67:11:
         a4:e3:ac:fe:b7:45:1c:3a:7b:12:75:e2:22:e7:b3:9e:c7:20:
         34:f1:a3:31:6f:f6:02:f4:9d:c0:d3:3b:a9:d3:63:95:b7:4c:
         ba:bf:33:b8:ae:6e:ba:17:80:da:85:8b:82:d2:6c:2d:d0:4f:
         19:48:a7:03:5d:10:de:e6:59:b5:ec:89:83:6e:f5:b2:a5:e4:
         9f:df:84:c1:cd:65:81:04:23:65:47:b1:83:c6:47:6d:27:45:
         d6:59:29:c4:eb:6a:e2:30:00:5f:cc:39:69:dd:80:be:22:cb:
         1f:79:74:c6:32:34:c4:8d:fc:60:62:a3:c6:36:c7:0f:e2:da:
         bb:23:e1:39:fb:ec:06:a0:54:46:64:a0:05:1f:cf:24:ea:76:
         91:ee:bf:6f:85:e6:bc:b1:3c:b0:e7:14:3d:16:15:b3:d1:cc:
         db:63:ad:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:32 2025 by rpki-client