Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a633030303a3a2f33342d3334203d3e203633353031.roa
File:                     323430333a666338303a633030303a3a2f33342d3334203d3e203633353031.roa (raw, json)
Hash identifier:          NXaEo37N/6r6HnF6VCxvms5WsOrIaz0jS79Aj/Fy1Oc=
Subject key identifier:   E7:85:73:0C:FF:7F:F1:22:D0:2E:96:BB:71:46:D6:2B:3F:12:88:44
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       7F93C3E9957D719E5A8B4CCBB62AD0A8AFBAE84A
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a633030303a3a2f33342d3334203d3e203633353031.roa
Signing time:             Thu 05 Jun 2025 02:02:53 +0000
ROA not before:           Thu 05 Jun 2025 01:57:53 +0000
ROA not after:            Thu 04 Jun 2026 02:02:53 +0000
asID:                     63501
IP address blocks:        2403:fc80:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 10:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:93:c3:e9:95:7d:71:9e:5a:8b:4c:cb:b6:2a:d0:a8:af:ba:e8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jun  5 01:57:53 2025 GMT
            Not After : Jun  4 02:02:53 2026 GMT
        Subject: CN=E785730CFF7FF122D02E96BB7146D62B3F128844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:b5:cb:0e:9c:e8:ad:7b:20:4a:1e:2e:b0:
                    6f:8a:f2:97:27:a5:e3:7e:da:88:0c:22:59:2f:87:
                    b2:af:ab:b0:51:1c:79:56:2e:95:b1:b5:72:4b:4d:
                    cb:79:3b:d5:8b:72:3f:3d:e1:99:d1:d6:a7:94:7e:
                    0d:9a:43:b6:5c:b9:8a:c2:4b:af:27:d0:98:6d:7a:
                    4c:9f:7e:91:80:d3:70:88:a2:91:70:8e:15:d8:7e:
                    80:1c:6d:c1:5a:90:8b:ae:ac:2d:3f:30:de:80:63:
                    b2:9d:33:18:56:80:de:54:22:47:6f:7f:12:3f:02:
                    61:1f:0b:1d:5a:81:8b:2c:d9:63:f8:3e:fc:bd:37:
                    77:12:6a:35:87:e3:ff:c4:27:d8:4b:27:a5:da:4d:
                    18:ef:80:f7:ff:3f:23:75:18:27:9e:65:09:bb:41:
                    de:a5:49:b1:12:01:25:b3:09:3e:bf:b5:c1:af:1e:
                    63:be:7b:2a:7d:9b:94:37:7e:78:e3:2d:87:1f:0d:
                    d3:77:a3:2f:0d:cd:ef:99:e9:9b:9b:14:55:f4:c6:
                    a6:fa:de:ac:57:24:0f:8f:9a:fb:06:ab:1f:3c:0a:
                    fa:34:e9:c0:56:ee:cf:44:7a:7f:ee:f6:7d:97:f2:
                    6a:f5:61:f9:83:08:af:98:12:62:2f:ca:95:83:de:
                    54:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:85:73:0C:FF:7F:F1:22:D0:2E:96:BB:71:46:D6:2B:3F:12:88:44
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a633030303a3a2f33342d3334203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         78:62:66:30:a1:01:ae:fb:5e:13:18:65:5b:fa:42:f2:e9:fa:
         eb:bb:3d:e1:2b:cb:88:26:21:34:cd:43:af:48:7c:8f:c1:95:
         ed:61:d0:5b:a8:98:44:8f:3f:23:d6:10:5b:78:eb:a0:2e:a7:
         d4:de:ae:bb:7a:29:a7:59:24:7a:41:9b:c3:7f:49:7d:58:e1:
         02:1d:86:f1:b3:bc:da:e0:12:aa:db:15:56:cc:85:f7:ea:ec:
         15:ef:91:aa:54:fb:6a:60:2c:30:fd:df:67:08:c2:b3:1b:0f:
         56:ea:38:35:89:fb:1f:3c:7b:83:e6:e7:97:25:ba:45:1f:77:
         2e:e0:85:d3:34:c2:59:d1:7d:07:0d:d6:c7:e7:25:82:73:80:
         a1:3d:3e:f3:ef:9f:c2:4d:d1:9f:3e:58:3f:64:10:5d:c5:d4:
         96:7e:e0:5b:dc:bb:02:62:94:15:4f:b2:a8:7c:db:96:c0:74:
         a4:85:07:6f:55:50:74:27:ee:00:f8:46:d1:97:8b:64:f8:c8:
         09:22:09:59:f3:76:9b:98:6b:2e:57:34:2c:5e:89:3d:5e:fb:
         14:61:ac:55:95:73:44:41:fd:30:55:59:04:70:0b:d0:77:65:
         84:30:a2:d3:56:97:a6:1c:5a:3c:0a:82:d4:37:75:c1:25:b2:
         35:50:18:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:06:01 2025 by rpki-client