Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/323430343a366430303a3a2f33322d3438203d3e203435323934.roa
File:                     323430343a366430303a3a2f33322d3438203d3e203435323934.roa (raw, json)
Hash identifier:          sXpqmxuNw5KFGHbUuElptIHnlBHgbhE4oyCC4/bbR5g=
Subject key identifier:   6B:13:85:7B:FD:ED:BF:CF:9C:23:09:DE:92:FE:F9:D4:F3:92:64:34
Certificate issuer:       /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
Certificate serial:       015A54F2D424E652B57E260AF33272A457698121
Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/323430343a366430303a3a2f33322d3438203d3e203435323934.roa
Signing time:             Mon 02 Jun 2025 02:05:11 +0000
ROA not before:           Mon 02 Jun 2025 02:00:11 +0000
ROA not after:            Mon 01 Jun 2026 02:05:11 +0000
asID:                     45294
IP address blocks:        2404:6d00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl
                          rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5a:54:f2:d4:24:e6:52:b5:7e:26:0a:f3:32:72:a4:57:69:81:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
        Validity
            Not Before: Jun  2 02:00:11 2025 GMT
            Not After : Jun  1 02:05:11 2026 GMT
        Subject: CN=6B13857BFDEDBFCF9C2309DE92FEF9D4F3926434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:81:5b:fc:45:37:b6:eb:71:88:77:59:f3:
                    c4:5c:d3:06:43:5b:79:8f:5e:13:de:4f:7e:28:af:
                    fc:28:8d:9c:2c:63:61:66:c5:ac:e1:4a:d4:ee:30:
                    84:f6:e9:ba:b0:e2:c8:0d:a7:e7:05:f8:a7:cb:07:
                    d5:39:a8:aa:cb:93:76:cf:fa:86:47:f6:ed:ab:5f:
                    b3:ba:65:c7:77:5b:5b:1a:50:9e:68:b4:bf:9a:30:
                    61:e1:b9:16:2d:f7:fd:72:cc:e7:75:6a:6c:d6:e7:
                    bc:b4:47:53:09:5b:6e:7b:90:02:ae:08:5e:d2:2f:
                    e1:b4:f1:12:ca:1f:6d:c0:65:5b:88:4d:cc:ef:5e:
                    da:9d:d5:32:91:82:84:4c:e5:cd:05:62:2d:c8:9f:
                    60:0e:99:5b:7b:c3:f6:0c:39:15:c8:12:04:fe:5c:
                    72:64:38:fe:9e:ff:88:c9:1c:88:0a:57:49:78:40:
                    41:59:dc:c1:1b:2b:c3:da:28:da:4a:69:9f:7a:16:
                    9f:73:79:7e:88:0f:32:ac:aa:1b:4a:77:3d:89:96:
                    95:60:ad:6b:3e:2c:86:74:ef:ad:87:fe:ce:0e:14:
                    8a:e4:12:f8:dd:b5:80:57:ef:6f:f9:f0:a4:8b:aa:
                    a8:5a:76:7f:28:35:d4:59:b8:77:5a:fa:d2:6e:cc:
                    50:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:13:85:7B:FD:ED:BF:CF:9C:23:09:DE:92:FE:F9:D4:F3:92:64:34
            X509v3 Authority Key Identifier:
                keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/323430343a366430303a3a2f33322d3438203d3e203435323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:6d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:6d:ed:73:87:1e:20:85:86:ce:91:a9:e1:e0:27:1b:73:b9:
         86:aa:89:16:b1:5d:63:88:5a:a9:18:e3:ae:22:de:42:2c:f5:
         1f:02:4d:a0:7e:95:9d:d3:60:58:42:47:51:5f:ad:76:4a:00:
         82:73:3b:be:f7:66:ec:24:ca:6b:21:d7:84:f5:d8:f9:9a:e6:
         53:ef:15:dc:c0:a9:06:1d:47:0b:d3:46:a8:45:c4:07:3d:50:
         91:02:61:04:76:7b:96:a2:2d:25:04:1c:ac:ff:d6:1a:20:f0:
         ca:26:fc:0f:33:a0:24:4b:f9:e3:07:59:8d:e6:20:13:d4:9e:
         61:d1:72:a3:5d:93:19:ed:7d:5f:a4:6a:3d:36:42:41:4d:14:
         de:45:fb:3b:3f:ea:51:77:98:03:c6:8c:ce:42:4d:fa:98:50:
         92:e3:56:b9:76:97:26:30:38:8f:79:67:c2:5b:a5:eb:97:a7:
         18:84:0b:fe:60:a1:96:28:92:8c:ff:9d:13:4a:f9:0a:e3:c7:
         5e:79:c9:8c:1a:f9:0e:47:04:3c:e6:60:50:62:6d:6c:d2:1b:
         bd:8f:56:23:f7:02:ac:4d:fb:a4:26:e2:a8:b7:e7:d4:33:a3:
         83:6e:d7:84:e0:ec:35:fa:36:07:75:54:f4:4f:b4:63:b1:49:
         b6:17:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:01:46 2025 by rpki-client