Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a383030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a383030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          t0uY6WVSlaZMNaHwQlUGDmd2Ym25Dxoh1WokfhPtO+M=
Subject key identifier:   14:A4:E7:A5:7F:D7:35:7B:B2:26:8D:F2:E6:A4:D1:C8:AF:29:95:3B
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       24A7FF44AE516C34E4503BE85CF094B774090590
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a383030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Fri 06 Dec 2024 13:26:03 +0000
ROA not before:           Fri 06 Dec 2024 13:21:03 +0000
ROA not after:            Fri 05 Dec 2025 13:26:03 +0000
asID:                     137316
IP address blocks:        2402:7ac0:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 09:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a7:ff:44:ae:51:6c:34:e4:50:3b:e8:5c:f0:94:b7:74:09:05:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Dec  6 13:21:03 2024 GMT
            Not After : Dec  5 13:26:03 2025 GMT
        Subject: CN=14A4E7A57FD7357BB2268DF2E6A4D1C8AF29953B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:56:3a:ad:1c:b1:de:98:23:dd:0d:69:84:
                    c4:8f:4a:6b:2f:a0:9b:33:8f:99:1d:ce:78:3f:c1:
                    bc:c0:5d:25:77:76:27:df:44:e4:b6:8c:c4:6c:d7:
                    19:70:1f:75:d6:34:3e:65:56:c0:ec:d7:c0:78:dd:
                    2a:a6:bd:08:06:34:48:e0:db:d4:3a:3a:9d:ce:31:
                    26:30:4d:d1:4c:4e:a5:04:36:de:51:44:2f:3a:b3:
                    bd:4b:78:56:a9:2c:04:18:ea:61:63:8b:6c:dc:31:
                    f6:5c:98:2d:ac:07:6d:07:ec:35:0a:90:ea:76:9b:
                    63:64:86:62:fb:7d:bb:c7:d7:65:d5:7b:99:ad:93:
                    85:fd:35:80:88:11:5b:2a:fe:ec:d2:40:28:a6:89:
                    df:35:4b:a6:7e:6f:8f:0a:cf:d9:c4:9c:a3:e0:20:
                    05:53:6b:dd:8d:f2:2a:0e:a4:f4:f7:2b:c8:43:8c:
                    f8:77:92:08:a2:69:3d:ff:6c:a2:3b:70:79:24:c8:
                    2e:70:02:12:5e:af:06:4e:d0:7b:b0:a3:ee:32:f2:
                    ac:26:58:ab:1f:7f:c8:e0:c3:a8:af:bf:3b:59:b3:
                    4a:0c:6b:33:2b:90:e3:2a:95:cb:8e:17:3f:44:a7:
                    25:34:ad:d6:0b:ca:e5:ec:49:21:75:be:e6:a2:0d:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A4:E7:A5:7F:D7:35:7B:B2:26:8D:F2:E6:A4:D1:C8:AF:29:95:3B
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a383030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:7f:23:ae:e6:d3:42:78:29:5d:f8:ba:6a:57:97:1b:ff:19:
         c2:7e:27:8d:2b:8b:c6:2e:3d:20:b9:ea:74:4a:a0:76:05:12:
         9d:b5:ef:c2:11:bd:41:15:db:eb:eb:bb:77:a9:d0:e4:41:b2:
         90:c8:4b:d2:2d:ad:22:66:37:17:a2:87:2d:01:6b:23:d2:a5:
         f7:72:0b:5b:57:ff:60:54:c7:87:76:39:49:87:37:f5:f5:8a:
         fc:10:db:b8:22:d5:3a:3b:14:fc:7f:0c:1d:a9:3d:63:18:db:
         5d:bd:ed:57:87:eb:27:30:a8:45:f7:0e:78:80:00:0d:94:f0:
         eb:b1:1e:36:0e:74:76:54:37:c7:01:d1:32:1a:32:83:65:2e:
         b6:89:f0:ae:14:fa:5b:b4:63:12:c9:e8:ae:cc:f7:ac:15:b6:
         ca:32:ce:44:25:d5:c8:4f:88:42:da:ce:91:70:2b:dc:f5:71:
         87:05:39:79:d4:77:41:d7:d1:9e:87:bc:5a:23:d8:95:a0:e7:
         6e:cc:1b:61:80:17:e3:99:dc:53:5b:01:25:87:1a:47:00:1d:
         10:b7:c2:4e:0a:39:04:d7:87:e8:a7:cd:d0:9f:f8:84:11:65:
         cb:10:3b:de:de:f5:7c:d5:fc:c4:54:2b:cf:52:ee:c0:11:2e:
         28:39:9b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:16:32 2025 by rpki-client