Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333031303a3a2f34382d3438203d3e203535363835.roa
File:                     323430343a653130303a333031303a3a2f34382d3438203d3e203535363835.roa (raw, json)
Hash identifier:          N/718sXgpeZ2iyzooIUuwRgvb0V8HtQmOs01XKkqODY=
Subject key identifier:   F3:7F:D3:6C:31:ED:BB:3F:FF:49:EB:F0:81:0C:B6:3D:F0:41:C3:8D
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       3EA57EEF12CD1DB0B415BB497927159562010C21
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333031303a3a2f34382d3438203d3e203535363835.roa
Signing time:             Tue 26 Aug 2025 07:02:07 +0000
ROA not before:           Tue 26 Aug 2025 06:57:07 +0000
ROA not after:            Tue 25 Aug 2026 07:02:07 +0000
asID:                     55685
IP address blocks:        2404:e100:3010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 16:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a5:7e:ef:12:cd:1d:b0:b4:15:bb:49:79:27:15:95:62:01:0c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Aug 26 06:57:07 2025 GMT
            Not After : Aug 25 07:02:07 2026 GMT
        Subject: CN=F37FD36C31EDBB3FFF49EBF0810CB63DF041C38D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:cd:b4:07:f9:c1:ab:5a:51:70:f0:52:7b:
                    54:b1:7c:9d:51:53:13:73:eb:1a:70:58:e4:05:e7:
                    f0:01:b1:3e:6a:ad:31:ad:5c:41:dd:59:52:90:cf:
                    a2:f9:28:75:c3:9e:64:46:f7:2a:a2:09:aa:f9:47:
                    e6:be:76:ca:e0:9a:52:45:9c:db:d8:d8:a5:e0:e3:
                    70:ce:0d:6a:d8:07:43:20:8f:82:82:2c:de:59:96:
                    d6:0a:14:bf:6f:48:9e:b2:d7:f9:a9:1f:f5:5b:7c:
                    63:10:00:2d:5a:17:2a:b1:4e:a3:d2:4c:38:db:44:
                    68:87:73:d7:2b:56:06:f1:c7:9b:8e:89:e1:69:24:
                    10:a6:89:b4:29:24:91:86:a3:05:b4:0d:9b:99:cd:
                    6a:13:16:51:7f:d6:b7:55:ef:61:c5:cd:7e:48:cb:
                    e1:10:47:b6:d8:14:51:b8:18:50:4e:61:0b:96:f4:
                    f6:ea:54:f3:15:c8:02:b0:6e:7e:5e:e1:d1:69:df:
                    3a:58:62:5e:d2:c4:4e:73:be:86:a0:7b:b0:12:21:
                    d6:f2:f8:2c:23:1a:4a:56:00:e1:f5:c2:12:3e:b3:
                    21:2e:89:66:3a:30:62:30:bd:1b:a9:3c:f8:58:b4:
                    8a:9b:df:97:17:b4:29:91:6f:66:cd:12:11:b8:29:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7F:D3:6C:31:ED:BB:3F:FF:49:EB:F0:81:0C:B6:3D:F0:41:C3:8D
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333031303a3a2f34382d3438203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:e100:3010::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:52:a7:a0:43:32:39:c1:ed:71:a6:19:bc:2c:93:df:16:48:
         d6:e8:99:04:cd:32:88:8e:93:f2:15:df:bf:59:81:b8:9a:c9:
         4a:c0:67:0e:a5:2d:eb:63:a2:de:b7:f7:4b:92:57:45:35:f3:
         0c:a3:55:5f:ec:63:e2:e0:42:8a:d1:44:a0:ff:a5:fe:d3:d3:
         89:b8:92:25:55:28:d7:a2:f5:1e:d6:e4:96:15:a3:29:a5:c8:
         50:d2:0f:23:a6:c8:4a:01:12:75:c0:15:ce:5b:69:28:ef:29:
         92:ac:c7:55:f8:de:cd:7c:34:d0:38:70:e7:29:a8:6e:4d:4e:
         25:fc:c8:dc:bc:39:ac:fa:a3:c9:01:93:48:61:fe:b6:f4:f2:
         51:71:a0:20:12:ca:ea:d4:c9:a5:d4:b8:da:60:d6:8c:90:46:
         e5:36:01:1f:95:b6:dd:9f:0c:91:75:e2:b1:d0:73:bf:de:af:
         d4:8e:9e:19:da:3e:d1:16:55:08:0c:32:c0:39:48:0a:2f:e0:
         32:7c:44:9a:b8:24:82:a3:34:85:77:f2:4f:4f:2e:c8:09:cb:
         40:35:b5:1c:69:27:8f:58:80:7a:c6:b2:73:5f:de:f8:a3:04:
         e5:53:bf:fa:30:51:15:1d:cd:b0:b6:c4:d7:1d:58:c0:dd:1b:
         07:8d:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:46:27 2025 by rpki-client