Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a3a2f33322d3332203d3e203338353234.roa
File:                     323430313a646538303a3a2f33322d3332203d3e203338353234.roa (raw, json)
Hash identifier:          Xglh51Fugy7e+fAsCHmO0jrLYlbPw6IyAchfCdSv5Kw=
Subject key identifier:   AE:D0:DF:A6:E0:B5:31:61:3B:37:D5:30:D4:5C:06:E4:A8:6B:F1:8A
Certificate issuer:       /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial:       3C818ED6E163FEE97E824C2C7EBC6AB771A5A6D8
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a3a2f33322d3332203d3e203338353234.roa
Signing time:             Mon 02 Jun 2025 02:02:46 +0000
ROA not before:           Mon 02 Jun 2025 01:57:46 +0000
ROA not after:            Mon 01 Jun 2026 02:02:46 +0000
asID:                     38524
IP address blocks:        2401:de80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
                          rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 03:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:81:8e:d6:e1:63:fe:e9:7e:82:4c:2c:7e:bc:6a:b7:71:a5:a6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
        Validity
            Not Before: Jun  2 01:57:46 2025 GMT
            Not After : Jun  1 02:02:46 2026 GMT
        Subject: CN=AED0DFA6E0B531613B37D530D45C06E4A86BF18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d5:07:c1:9e:a1:19:16:f3:8a:79:e5:be:98:
                    ea:14:33:70:ee:5a:9a:26:64:9b:ac:bc:f5:da:d6:
                    50:f6:eb:5a:43:38:18:65:0c:ba:bf:2f:53:97:a9:
                    0a:a3:ab:2b:66:df:8e:fc:9c:27:e5:8c:51:bf:fd:
                    7f:5a:7b:18:eb:f5:e8:56:36:65:d4:59:22:3b:bf:
                    39:59:fb:c1:0e:51:8d:22:1a:60:39:38:35:ff:43:
                    74:6a:3d:50:a2:7d:f2:b5:d7:c8:d7:2d:73:7a:48:
                    fe:67:35:2c:74:8c:7c:b3:8f:53:50:18:b7:a5:da:
                    30:d0:74:cb:b8:43:3d:d2:c9:35:41:f5:68:b5:9a:
                    04:63:7b:58:ff:39:16:b7:97:8a:3b:02:f7:70:93:
                    f7:69:b8:e3:00:10:68:4e:be:93:fe:98:26:23:14:
                    5d:a1:49:72:69:8c:07:82:dc:1e:57:11:44:62:30:
                    52:28:ee:6c:0e:e9:ab:2f:0b:39:47:83:80:0b:6d:
                    10:7f:48:42:5b:72:b3:5c:c8:f1:09:3a:93:98:f9:
                    3d:23:78:b9:7c:e9:d2:e1:e1:05:44:28:a8:26:55:
                    fe:6b:f4:38:03:b0:0e:8b:09:68:1a:d3:60:89:28:
                    69:50:2e:3e:7f:f5:e3:31:9a:3c:25:bb:48:76:06:
                    75:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D0:DF:A6:E0:B5:31:61:3B:37:D5:30:D4:5C:06:E4:A8:6B:F1:8A
            X509v3 Authority Key Identifier:
                keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a3a2f33322d3332203d3e203338353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:de80::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:be:0e:7b:bc:17:93:5e:31:b7:dc:fd:81:9f:f3:cf:3c:c2:
         40:05:18:3a:f5:5b:33:ce:f2:01:26:ad:6e:8f:d6:e0:8f:af:
         e4:d0:43:24:22:fa:9a:e9:2b:09:83:29:61:34:de:33:75:2a:
         32:74:40:21:02:46:17:76:14:8b:fb:53:a0:3a:83:f4:85:c1:
         62:73:7a:d2:e4:fb:29:ff:a5:be:92:20:35:cd:c2:ca:a0:12:
         07:11:9b:9a:34:d1:e9:5a:c7:5f:0c:c5:e6:ec:28:81:46:f9:
         0c:02:31:11:80:0b:b8:d9:e4:43:6e:6f:b1:4a:f4:86:26:97:
         af:80:40:08:ac:4a:61:66:32:1e:0d:6a:b8:24:df:21:17:c4:
         9b:57:88:17:27:5d:6c:d0:eb:a0:33:39:f6:2b:fe:6d:07:04:
         34:04:57:00:5d:77:31:2e:0b:81:db:b8:97:96:f6:44:e4:a3:
         dd:8c:bf:18:77:71:82:dd:01:c6:6a:85:15:6a:2d:c2:fc:50:
         00:47:81:ea:42:3c:05:98:86:08:85:25:a5:2a:64:4a:84:fb:
         0a:1e:6a:4a:dd:b2:5b:19:c6:7d:d3:ec:50:1f:4d:bc:8a:49:
         a0:96:87:46:8f:fe:39:dd:81:c7:05:fc:df:f8:e1:95:96:e6:
         cb:68:96:56
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUPIGO1uFj/ul+gkwsfrxqt3GlptgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD
RDI4M0U5QTAeFw0yNTA2MDIwMTU3NDZaFw0yNjA2MDEwMjAyNDZaMDMxMTAvBgNV
BAMTKEFFRDBERkE2RTBCNTMxNjEzQjM3RDUzMEQ0NUMwNkU0QTg2QkYxOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz1QfBnqEZFvOKeeW+mOoUM3Du
WpomZJusvPXa1lD261pDOBhlDLq/L1OXqQqjqytm3478nCfljFG//X9aexjr9ehW
NmXUWSI7vzlZ+8EOUY0iGmA5ODX/Q3RqPVCiffK118jXLXN6SP5nNSx0jHyzj1NQ
GLel2jDQdMu4Qz3SyTVB9Wi1mgRje1j/ORa3l4o7Avdwk/dpuOMAEGhOvpP+mCYj
FF2hSXJpjAeC3B5XEURiMFIo7mwO6asvCzlHg4ALbRB/SEJbcrNcyPEJOpOY+T0j
eLl86dLh4QVEKKgmVf5r9DgDsA6LCWga02CJKGlQLj5/9eMxmjwlu0h2BnV1AgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUrtDfpuC1MWE7N9Uw1FwG5Khr8YowHwYDVR0j
BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0
NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4
M0U5QS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04
NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMzMzgzNTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAd6AMA0GCSqGSIb3
DQEBCwUAA4IBAQAQvg57vBeTXjG33P2Bn/PPPMJABRg69VszzvIBJq1uj9bgj6/k
0EMkIvqa6SsJgylhNN4zdSoydEAhAkYXdhSL+1OgOoP0hcFic3rS5Psp/6W+kiA1
zcLKoBIHEZuaNNHpWsdfDMXm7CiBRvkMAjERgAu42eRDbm+xSvSGJpevgEAIrEph
ZjIeDWq4JN8hF8SbV4gXJ11s0OugMzn2K/5tBwQ0BFcAXXcxLguB27iXlvZE5KPd
jL8Yd3GC3QHGaoUVai3C/FAAR4HqQjwFmIYIhSWlKmRKhPsKHmpK3bJbGcZ90+xQ
H028ikmglodGj/453YHHBfzf+OGVlubLaJZW
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:04 2025 by rpki-client