Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33342d3334203d3e203633353031.roa
File:                     323430333a666338303a3a2f33342d3334203d3e203633353031.roa (raw, json)
Hash identifier:          gioPA1tL1I5R2uSvArjjITDaHxq2LcT9RBmDMoaTZfs=
Subject key identifier:   7B:66:D6:9C:10:E9:ED:A4:47:A6:5B:F7:6F:66:16:6A:CA:1E:75:39
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       71FAC870B4EF761C6412389BC5457A5C8D21156B
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33342d3334203d3e203633353031.roa
Signing time:             Thu 05 Jun 2025 01:00:01 +0000
ROA not before:           Thu 05 Jun 2025 00:55:01 +0000
ROA not after:            Thu 04 Jun 2026 01:00:01 +0000
asID:                     63501
IP address blocks:        2403:fc80::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 10:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fa:c8:70:b4:ef:76:1c:64:12:38:9b:c5:45:7a:5c:8d:21:15:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jun  5 00:55:01 2025 GMT
            Not After : Jun  4 01:00:01 2026 GMT
        Subject: CN=7B66D69C10E9EDA447A65BF76F66166ACA1E7539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:00:e4:59:32:6e:c4:37:00:c1:4f:63:2c:
                    5b:46:3f:35:4d:f0:d5:86:15:a6:d7:88:cb:6d:b8:
                    26:31:22:42:17:d9:66:31:96:64:5e:04:90:83:80:
                    3c:1a:93:4b:9e:30:fb:39:a4:5a:8b:20:62:20:7b:
                    cc:25:f9:17:bb:4c:a7:d9:f9:7f:2f:26:50:3c:21:
                    e2:52:44:ef:53:c2:6c:70:1c:a6:b9:ab:f9:5c:59:
                    c1:e5:4c:8f:51:d5:aa:52:42:da:14:73:40:58:4d:
                    66:7c:57:8a:da:fb:bf:c3:88:f6:52:30:58:09:58:
                    1f:12:83:41:bf:be:5e:87:e9:7c:d1:49:84:bf:8c:
                    af:74:a0:cf:a6:95:ea:5f:6d:3e:db:61:6f:0f:33:
                    eb:75:ce:6b:33:be:68:e4:2f:e2:c8:a4:61:4f:3a:
                    33:e7:8d:19:6f:c4:72:7c:31:93:ac:a3:89:85:ef:
                    56:04:19:90:b7:53:2b:53:54:e3:49:bf:9a:ee:a6:
                    24:82:40:fe:a9:e7:da:c8:ec:c9:b2:b3:0c:65:f5:
                    2e:aa:57:c4:ee:b9:04:f7:a9:67:d0:f5:c4:55:07:
                    c4:dd:66:ad:d6:dd:ef:bc:9b:71:2a:b6:9b:7f:46:
                    eb:04:e8:4c:b4:37:c4:f6:40:e5:72:81:4d:e1:2f:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:66:D6:9C:10:E9:ED:A4:47:A6:5B:F7:6F:66:16:6A:CA:1E:75:39
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33342d3334203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80::/34

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:20:3b:38:76:bc:e6:fe:54:04:c8:f1:3d:66:44:9e:10:
         3f:31:7f:f9:47:ed:4d:e6:db:1c:65:dd:24:dc:9c:79:5a:a6:
         e8:53:aa:b2:58:03:c1:f5:3a:2f:a8:22:09:00:11:77:22:6a:
         18:71:a1:08:a6:92:d0:68:2a:e3:32:a8:1a:f1:f3:a1:fd:e3:
         cd:62:fe:94:03:c4:77:0a:3a:c0:62:7f:5d:19:6b:5f:1a:e4:
         9e:11:be:49:8e:e5:9b:be:82:29:1e:d0:4e:e7:54:27:1d:50:
         96:62:47:66:de:6f:24:f8:5a:85:28:3b:2e:08:fb:0e:92:42:
         f4:55:9f:4e:0c:d9:33:b6:b5:3e:0c:e4:62:47:e5:75:1f:a8:
         de:87:c4:65:1c:03:2c:75:51:40:b0:32:a3:5a:08:77:07:42:
         a9:19:6a:89:78:80:41:72:49:86:b9:30:5f:61:b6:b4:ec:26:
         a8:e4:85:3b:a5:29:b4:0a:75:ed:22:81:cb:0b:58:33:ca:39:
         7d:e0:c4:18:c2:c7:89:50:0e:76:52:c8:f4:3c:d0:bd:cc:00:
         21:01:95:90:de:c8:03:d3:92:bc:15:32:09:6c:57:b3:64:c2:
         60:95:5d:7c:e8:24:6e:13:a2:14:54:b0:7f:0f:f4:a4:80:dd:
         d5:92:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:00:35 2025 by rpki-client