Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa
File:                     323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa (raw, json)
Hash identifier:          wQ5s1z2AdYlcJThfcBR2RUp7JW/nVYYistipQnAGWOk=
Subject key identifier:   0C:F1:80:85:3A:29:46:BD:8D:34:DB:DF:FC:7C:31:39:9C:FF:A7:CC
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       2BB25994B212EC1F45E9F09CD08F84585A380EBE
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa
Signing time:             Thu 05 Jun 2025 14:00:01 +0000
ROA not before:           Thu 05 Jun 2025 13:55:01 +0000
ROA not after:            Thu 04 Jun 2026 14:00:01 +0000
asID:                     138887
IP address blocks:        2405:c40:f000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b2:59:94:b2:12:ec:1f:45:e9:f0:9c:d0:8f:84:58:5a:38:0e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: Jun  5 13:55:01 2025 GMT
            Not After : Jun  4 14:00:01 2026 GMT
        Subject: CN=0CF180853A2946BD8D34DBDFFC7C31399CFFA7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:e3:b6:05:ff:3f:0c:5b:d0:2f:b0:1c:81:
                    6a:0d:72:72:40:48:1d:63:5d:7a:6a:e2:bc:e3:47:
                    68:c6:db:9e:ba:a9:e7:21:c0:a9:37:a4:26:3f:57:
                    a1:74:fb:a5:d6:8a:3d:23:56:d8:d3:f1:6d:bc:16:
                    3f:ad:a4:e3:a2:ab:c2:ab:1d:b8:fb:2a:2e:3f:ff:
                    96:af:90:12:31:b9:77:80:37:d0:01:fe:b1:0e:87:
                    aa:d8:85:50:be:9b:07:56:0f:7d:25:52:23:b6:34:
                    9b:6c:70:8f:b3:6e:ff:16:c8:ab:16:98:6e:4b:d6:
                    42:6f:00:da:43:85:ea:d4:5b:ff:22:bb:e6:b9:4b:
                    6b:4d:5d:5d:d9:05:05:88:3d:be:d3:68:57:8c:58:
                    d4:ff:dd:a6:c0:f7:7f:69:d1:52:7d:92:a8:f8:24:
                    9b:67:99:e5:fc:b3:ae:eb:5a:5c:70:5d:95:ce:6f:
                    91:69:aa:c9:65:e2:c2:f1:d8:c7:30:01:75:00:d5:
                    9a:1d:1a:fe:8b:29:55:cc:0c:d0:32:d3:d7:9f:89:
                    14:e5:c9:66:c9:77:83:fb:02:bc:70:21:ba:48:60:
                    fe:9c:da:e3:8d:77:43:1b:5b:34:cf:fc:d2:fc:f7:
                    be:25:4f:8f:b1:01:ef:64:64:da:ac:f2:13:1e:de:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F1:80:85:3A:29:46:BD:8D:34:DB:DF:FC:7C:31:39:9C:FF:A7:CC
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c40:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:8b:86:b9:1b:7e:c1:e1:b0:78:b4:fb:2d:ec:61:50:a9:19:
         2f:3a:15:3f:8a:44:dd:1c:ff:23:ed:9e:0a:ed:18:67:aa:d6:
         bf:27:1b:3e:68:1a:9f:ad:3f:37:4f:32:fd:a2:97:1d:cc:3e:
         21:83:06:73:44:e7:7d:49:ed:50:18:8d:d4:1a:81:40:35:08:
         dc:e7:6b:8b:bb:44:3c:25:d5:a2:7f:15:56:0d:39:90:49:14:
         bf:f4:8b:9f:f5:5b:d6:73:a8:82:e1:f4:a0:6b:61:7c:0d:c5:
         ab:ae:f0:fa:9e:95:c5:bb:5e:26:26:7c:09:c5:a6:7e:0d:7d:
         c2:49:1a:b4:9e:47:65:5c:ba:32:d2:ee:b7:1a:c6:65:61:6a:
         99:e2:0c:d3:ec:d0:80:8c:ac:85:53:fb:52:df:00:1e:9a:5a:
         a9:0c:0e:e2:a4:d8:55:8d:c1:c7:5d:ea:c5:1f:ea:22:c1:20:
         10:2d:f6:60:77:bd:67:20:7a:4f:80:8a:64:5a:25:3a:0c:60:
         3f:8f:e8:de:e0:aa:75:51:67:19:93:d0:f7:cb:1f:9f:58:ac:
         fc:8c:cd:54:b8:50:4f:0b:4c:aa:bd:56:d9:dc:46:3a:fe:8b:
         65:07:e3:5f:ff:84:56:ce:17:94:21:26:4d:32:35:04:d3:10:
         7a:da:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:39 2025 by rpki-client