Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/323430373a366634303a3a2f33322d3438203d3e203538383230.roa
File:                     323430373a366634303a3a2f33322d3438203d3e203538383230.roa (raw, json)
Hash identifier:          907swenfI16Aft6qzAi5dpyEs6BxfNg+Ndea03NJnvc=
Subject key identifier:   F6:A2:B4:42:1D:1F:89:A8:A3:C6:4A:92:31:57:2C:55:22:91:05:14
Certificate issuer:       /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE
Certificate serial:       096D5E8A340A43897E3A6BD5775CAC0AF13A3278
Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/323430373a366634303a3a2f33322d3438203d3e203538383230.roa
Signing time:             Thu 13 Feb 2025 16:00:01 +0000
ROA not before:           Thu 13 Feb 2025 15:55:01 +0000
ROA not after:            Thu 12 Feb 2026 16:00:01 +0000
asID:                     58820
IP address blocks:        2407:6f40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl
                          rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 00:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6d:5e:8a:34:0a:43:89:7e:3a:6b:d5:77:5c:ac:0a:f1:3a:32:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE
        Validity
            Not Before: Feb 13 15:55:01 2025 GMT
            Not After : Feb 12 16:00:01 2026 GMT
        Subject: CN=F6A2B4421D1F89A8A3C64A9231572C5522910514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:94:a6:5d:29:91:62:ab:c1:fb:b2:7e:b3:
                    20:78:c8:d0:e5:26:25:8e:58:9b:a0:88:44:f1:8b:
                    f2:bd:53:7a:77:01:8e:7c:c1:e4:48:6b:90:ea:6f:
                    37:56:e5:6a:c2:2c:29:72:93:32:0a:f1:8f:e6:e3:
                    08:e5:a8:1b:76:3a:a4:8f:0d:6e:78:ce:10:c1:38:
                    3a:14:69:59:af:4e:fa:ce:6f:be:17:70:dd:11:95:
                    77:14:cf:f5:a5:61:90:ef:b0:bd:6e:71:38:c7:b4:
                    57:0f:b5:37:1f:f9:a4:10:c3:87:36:58:05:82:9d:
                    00:2b:11:6d:89:9b:a2:a4:95:15:ee:24:b5:c8:4c:
                    37:0a:5d:10:79:9f:ff:04:10:e4:0b:68:70:d7:82:
                    79:54:bf:91:55:48:47:a9:2e:d3:6c:92:1f:fc:80:
                    5c:7d:7b:66:c2:f7:18:6c:af:ba:34:32:50:ba:c0:
                    89:47:8c:cb:a4:94:a0:bf:ee:7e:c2:e3:27:e2:c6:
                    ac:0f:53:ff:62:d8:66:fe:78:03:53:31:c4:6c:00:
                    a3:97:5e:7f:0b:bb:5f:40:6b:62:fe:71:01:d8:b7:
                    22:ea:19:19:80:e4:86:a9:11:11:e2:20:01:76:63:
                    ad:6a:a4:ad:7c:59:88:84:c7:9c:d1:4c:a3:fd:ab:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A2:B4:42:1D:1F:89:A8:A3:C6:4A:92:31:57:2C:55:22:91:05:14
            X509v3 Authority Key Identifier:
                keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/323430373a366634303a3a2f33322d3438203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:7f:91:4b:05:87:a6:ef:c2:2f:b0:a6:92:e5:7d:57:45:56:
         80:31:17:1e:33:a2:76:8c:b2:d6:2b:ba:33:5c:58:b9:90:5e:
         06:0e:ab:7d:44:62:92:df:9a:76:b7:b7:bc:8c:11:13:05:a7:
         5f:bc:d3:ea:f4:42:85:66:33:54:d1:68:ec:e8:b2:64:3d:60:
         96:86:f9:4a:eb:90:c4:41:de:d0:4f:38:ea:06:a6:c2:b9:31:
         10:6a:31:26:bb:4d:39:08:cc:da:2d:c7:01:27:13:bc:cd:71:
         18:8c:a6:a6:de:87:e0:28:dc:29:3a:b3:11:96:cf:d9:47:96:
         48:b6:f4:7f:6c:cc:fe:70:65:4e:8e:0b:0e:7e:d7:05:40:3d:
         a3:17:03:48:b5:82:70:22:de:20:57:06:2f:59:eb:40:62:fd:
         bf:01:82:ce:3e:72:56:1a:06:bf:8b:8e:e6:a8:46:68:72:0a:
         fb:89:ca:24:33:91:b6:f4:50:96:39:88:3f:34:6d:6d:38:a2:
         b0:5b:c9:c8:ff:39:8c:55:87:94:11:8b:b3:7f:e3:e8:2d:58:
         0f:75:0f:2c:61:7c:1d:69:3b:b0:d8:15:70:85:f5:4b:fd:f3:
         a6:15:c7:31:37:1c:e8:f4:f0:91:5d:c0:00:5c:ee:bf:34:79:
         6d:73:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:25 2025 by rpki-client