Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33322d3332203d3e203633353031.roa
File:                     323430333a666338303a3a2f33322d3332203d3e203633353031.roa (raw, json)
Hash identifier:          Q/RsRX8i7WhRynidtM9vkDe+JbBl3vcKmm5GmcuQCUQ=
Subject key identifier:   09:03:E3:DE:43:C7:4D:2F:12:B3:CD:99:82:7C:C3:62:12:50:8A:4F
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       75A0FAE3F5AA576D0A8891633030A9C64C2AC5FF
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33322d3332203d3e203633353031.roa
Signing time:             Thu 05 Jun 2025 02:02:53 +0000
ROA not before:           Thu 05 Jun 2025 01:57:53 +0000
ROA not after:            Thu 04 Jun 2026 02:02:53 +0000
asID:                     63501
IP address blocks:        2403:fc80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 10:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a0:fa:e3:f5:aa:57:6d:0a:88:91:63:30:30:a9:c6:4c:2a:c5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jun  5 01:57:53 2025 GMT
            Not After : Jun  4 02:02:53 2026 GMT
        Subject: CN=0903E3DE43C74D2F12B3CD99827CC36212508A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:66:f8:dc:77:63:9a:d1:2e:40:4d:be:2c:
                    9d:61:41:a1:72:57:49:55:8b:ab:23:78:42:0b:94:
                    9c:19:2b:7b:06:03:9a:bb:30:39:65:23:1e:5b:be:
                    b4:47:2e:38:aa:c0:1b:11:64:ab:28:f2:06:53:ef:
                    f9:7b:03:37:38:7c:40:6c:67:57:2a:6a:10:94:b5:
                    09:85:da:d3:d8:d8:37:6e:2f:69:52:c2:05:aa:da:
                    13:21:87:bc:e3:b6:1b:54:3d:ee:f2:4a:13:68:a5:
                    89:f6:5f:f2:65:f5:0f:9f:a4:7b:3a:d0:d8:fb:43:
                    7b:bc:99:a3:48:04:aa:45:9b:a4:b5:0d:dc:d3:4a:
                    a8:cc:4b:8f:dd:25:31:cc:e2:d5:da:77:a3:5c:ec:
                    47:dc:52:63:15:6b:29:97:d5:5c:ae:83:60:a5:64:
                    d0:af:a9:37:0a:af:e3:34:c4:61:aa:13:94:7d:f5:
                    02:6f:59:f8:d3:c5:4c:86:fe:73:c2:5f:e6:13:76:
                    f5:a5:b5:fd:28:38:8c:7c:f4:07:02:85:84:4a:25:
                    e1:38:cb:d7:29:34:81:04:b6:99:86:a9:60:24:5a:
                    56:15:5c:3a:d1:f5:27:22:be:7b:82:9f:cc:9b:d1:
                    97:d7:37:93:63:ec:01:91:20:cc:2c:76:9d:91:b7:
                    71:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:03:E3:DE:43:C7:4D:2F:12:B3:CD:99:82:7C:C3:62:12:50:8A:4F
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33322d3332203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:ba:98:1f:e0:37:9b:de:61:42:c7:28:37:cb:d8:aa:d1:18:
         ff:ff:d9:19:2f:2a:02:25:c3:a3:c2:37:7f:fc:94:37:4e:f8:
         a0:23:f8:2d:8d:0a:a3:8e:da:28:c4:09:89:21:8b:fc:c8:52:
         9b:99:19:8d:95:8c:27:ba:a0:0d:f2:d3:4b:81:27:fe:37:cb:
         18:6b:ce:ed:62:14:ee:1b:77:90:f7:06:5f:b7:92:bd:8d:bc:
         89:17:34:06:31:b0:98:2f:3f:5d:15:0f:13:1e:77:ba:88:a4:
         ca:a4:39:5b:00:cc:3e:5a:ec:d7:fe:2a:ef:e5:17:8e:01:18:
         c8:3c:0e:e5:43:e3:d1:13:79:01:0c:1c:03:cd:69:35:50:fe:
         d8:e3:26:76:c4:cb:53:cb:72:9b:d5:31:cf:9c:85:f5:85:a2:
         c9:e0:d5:35:2c:b5:f3:7c:dd:16:b1:62:5e:98:eb:2b:fc:38:
         6a:01:77:04:19:f7:32:9c:21:7d:17:f4:9e:da:47:5c:05:07:
         56:b8:39:54:ad:e9:f9:9b:57:af:bf:34:37:a0:82:03:4d:22:
         5b:3e:ae:62:f7:ff:56:c5:58:8d:5d:7f:a6:08:1e:cd:ca:2b:
         b7:11:a3:31:44:3c:b3:6c:29:2f:99:50:aa:60:bd:7f:12:29:
         a1:73:38:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:05:09 2025 by rpki-client