Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33332d3333203d3e203633353031.roa
File:                     323430333a666338303a3a2f33332d3333203d3e203633353031.roa (raw, json)
Hash identifier:          1tl51btakO1tmF3fruOX88w5ei0Cmv3tz+8xpKBuz2U=
Subject key identifier:   AF:BE:FE:CB:CD:DE:1A:28:07:56:38:30:6A:1F:F0:91:67:61:08:0A
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       351AF6DEBBA2FEC3FAE9CE9D83F3441E27CBA1AA
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33332d3333203d3e203633353031.roa
Signing time:             Thu 05 Jun 2025 02:02:53 +0000
ROA not before:           Thu 05 Jun 2025 01:57:53 +0000
ROA not after:            Thu 04 Jun 2026 02:02:53 +0000
asID:                     63501
IP address blocks:        2403:fc80::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 02:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1a:f6:de:bb:a2:fe:c3:fa:e9:ce:9d:83:f3:44:1e:27:cb:a1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jun  5 01:57:53 2025 GMT
            Not After : Jun  4 02:02:53 2026 GMT
        Subject: CN=AFBEFECBCDDE1A28075638306A1FF0916761080A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0b:55:81:9e:96:de:d7:8a:70:2a:5f:a3:55:
                    20:54:d4:2e:4c:68:8e:67:5e:66:d0:92:19:f4:98:
                    d1:dc:1a:25:4f:33:1f:5e:5f:b2:79:72:31:60:96:
                    52:a4:7f:83:dc:cb:fc:5e:b5:b2:da:0b:ac:f9:70:
                    78:f1:a9:35:7a:eb:87:bb:6a:c1:2d:f8:09:91:5d:
                    6f:23:8d:7e:65:66:f0:45:18:38:33:85:9a:92:70:
                    1c:f7:e9:d0:d8:cf:6f:7e:26:b1:1c:7e:a4:24:d0:
                    6b:4c:3b:2c:2c:86:25:f3:2b:42:5d:0e:5b:96:6b:
                    9d:13:70:83:9d:2f:a0:0c:a5:03:19:31:7e:08:10:
                    ee:d5:0a:77:90:6d:0b:4b:36:ba:a9:05:1c:73:c7:
                    60:58:ad:a7:e8:0e:03:6c:b2:2f:46:18:66:2c:c6:
                    c0:13:c3:e0:44:47:ac:6c:c6:51:18:40:07:24:3e:
                    45:a9:1d:db:fb:b2:f9:87:45:02:b6:37:d6:d1:43:
                    9e:61:43:3a:a2:df:5d:c3:d2:23:49:bf:95:94:94:
                    0d:36:08:6e:0f:4d:90:cd:6a:a9:12:c0:18:17:d2:
                    b8:05:d9:cf:c5:fa:cd:87:9d:4d:d4:61:e2:6b:e3:
                    44:23:88:e0:9b:74:fc:9c:52:c4:7e:d3:b5:ee:e9:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BE:FE:CB:CD:DE:1A:28:07:56:38:30:6A:1F:F0:91:67:61:08:0A
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33332d3333203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80::/33

    Signature Algorithm: sha256WithRSAEncryption
         77:3a:05:82:77:0b:11:d4:c3:58:49:87:45:a8:51:78:14:80:
         db:8d:6b:e2:f8:8a:2a:a5:5e:1e:9b:18:f1:fc:f7:08:08:34:
         6e:fc:2d:34:de:8d:52:02:26:ac:06:8d:20:02:38:a6:d6:f6:
         45:bc:83:d2:ca:19:b7:5c:df:1f:c9:68:8e:0b:44:85:17:c6:
         af:d3:96:07:c2:5d:28:af:15:9d:21:8f:23:c5:85:f2:66:9a:
         26:53:32:34:1b:b3:65:fa:04:20:ed:be:e5:9e:b8:7d:df:05:
         07:88:8d:e3:d4:65:0a:2e:a2:75:46:ad:1d:53:bd:72:9c:32:
         0f:ff:ec:94:a3:b7:86:35:33:10:2f:e3:51:1b:4c:ed:b9:5e:
         ea:da:19:b8:af:5a:1d:0d:53:ce:25:07:e1:b8:65:77:1d:a0:
         1d:97:48:c4:d4:1e:a6:44:9d:52:45:c4:74:a7:5a:f3:54:17:
         a8:f3:4f:6a:de:9c:a4:7d:06:e0:aa:1a:81:5a:94:f5:68:0b:
         0c:d9:c3:3a:aa:cc:70:bf:9c:fd:54:10:3c:17:c7:46:54:10:
         22:84:da:e6:c4:4d:1a:e7:59:16:96:a1:6e:33:66:c0:3b:e1:
         d8:f1:34:b2:28:32:ca:16:91:97:27:b4:cc:2a:44:04:fc:43:
         6b:96:98:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:05:50 2025 by rpki-client