Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a343030303a3a2f33342d3334203d3e203633353031.roa
File:                     323430333a666338303a343030303a3a2f33342d3334203d3e203633353031.roa (raw, json)
Hash identifier:          zHHMz32Wh+n+2u4MNkl1iW+HvK1Rdbgl3v4kn6ORq9U=
Subject key identifier:   C9:6E:63:FA:DA:78:7E:83:F1:FE:6B:01:F3:E8:DE:8D:3A:34:46:F5
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       06C031884FE571A8433C0246048BFFFED0F29564
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a343030303a3a2f33342d3334203d3e203633353031.roa
Signing time:             Thu 05 Jun 2025 02:02:54 +0000
ROA not before:           Thu 05 Jun 2025 01:57:54 +0000
ROA not after:            Thu 04 Jun 2026 02:02:54 +0000
asID:                     63501
IP address blocks:        2403:fc80:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 02:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c0:31:88:4f:e5:71:a8:43:3c:02:46:04:8b:ff:fe:d0:f2:95:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jun  5 01:57:54 2025 GMT
            Not After : Jun  4 02:02:54 2026 GMT
        Subject: CN=C96E63FADA787E83F1FE6B01F3E8DE8D3A3446F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:05:66:80:58:a6:f7:0a:a3:03:0b:95:72:
                    7b:8c:58:74:04:57:c5:5c:14:30:f6:71:88:01:2c:
                    7e:d7:17:ca:7b:4e:db:e5:a7:37:a5:a4:0e:c8:15:
                    6b:c0:04:cb:3d:0f:64:b4:c9:09:b1:e2:b3:c3:ec:
                    2d:f7:1a:1e:1d:60:b0:7f:1e:33:40:1a:4c:40:4c:
                    0f:14:9b:ae:b0:d7:bc:f8:1e:a1:8b:54:4c:cf:11:
                    c5:57:1e:6c:17:64:96:5c:ee:56:f2:d0:9e:df:54:
                    a2:0a:ea:7a:e5:c1:1a:17:ca:36:5c:49:d8:29:6c:
                    73:2e:78:47:16:a5:55:d5:e2:82:27:a4:26:ef:f3:
                    6d:32:4b:51:c7:a5:d9:ef:8f:b8:8b:85:97:23:fe:
                    72:26:33:a4:65:85:c7:0f:16:44:4c:2b:af:a0:63:
                    86:85:c4:ba:28:18:08:38:8c:b4:44:c4:c2:22:cc:
                    e6:56:54:53:94:6d:15:f9:51:ad:57:d6:d3:4f:28:
                    47:01:0a:7d:fd:83:6b:39:37:c1:b1:dd:a8:4c:df:
                    d1:2b:85:0b:7d:ce:c9:5e:4f:08:2c:29:bc:3d:0b:
                    de:80:6a:4e:f3:19:4d:ec:a1:0d:66:3f:26:c6:b2:
                    99:82:ff:36:8b:9e:72:cc:da:a9:c5:f3:36:27:02:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6E:63:FA:DA:78:7E:83:F1:FE:6B:01:F3:E8:DE:8D:3A:34:46:F5
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a343030303a3a2f33342d3334203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:09:24:5f:d0:7a:8c:b9:eb:cd:d3:b6:d2:0e:bd:bc:33:44:
         e4:9d:35:80:30:1d:e0:d4:07:37:e3:61:30:cf:46:fd:fc:c4:
         51:58:75:a7:2b:e3:83:5f:f0:5c:06:4b:64:02:1f:3a:25:28:
         49:34:bd:80:59:b1:c7:c6:0d:82:34:68:1c:fb:d0:65:10:00:
         46:86:dd:f2:7f:23:cc:ef:06:da:2c:36:9b:db:d6:c0:43:d5:
         51:6a:14:3a:ef:17:4d:8a:2a:3d:7d:19:7d:04:d6:95:c5:aa:
         33:a9:c1:e5:41:31:50:8d:5d:cf:ff:5d:54:13:7f:17:d3:67:
         25:7b:a2:42:91:e5:10:f5:31:e4:b1:72:59:b0:36:2f:ae:9c:
         69:08:63:6b:ba:a1:84:2a:99:ba:7c:25:5d:dc:eb:08:91:3f:
         85:f8:48:59:91:98:4c:63:ab:0c:14:d3:19:79:9e:42:82:c6:
         55:a7:14:f4:03:fb:b8:c1:3a:a6:7b:cf:63:f1:eb:6c:24:26:
         aa:90:fc:d5:71:a4:8f:94:d6:2d:74:bc:ae:60:5d:c9:d2:6d:
         73:cf:1e:55:ae:fd:71:79:ca:2f:9e:78:14:8a:17:f6:dd:e5:
         8f:38:b7:51:d2:17:91:ac:05:c5:5e:aa:94:e9:f9:b3:6b:da:
         d0:ca:47:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:05:54 2025 by rpki-client