Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383735303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383735303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          zYAXur9ldilUrFeoHXvzbhzTQw/GD5JsjJgzAMlc0kU=
Subject key identifier:   C8:C2:EA:79:09:46:31:30:46:B6:CC:7D:A0:8D:80:FB:FD:04:F1:EB
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       76D6800180A36F3227A377CB9351853F28DD42A1
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383735303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Tue 26 Aug 2025 11:16:10 +0000
ROA not before:           Tue 26 Aug 2025 11:11:10 +0000
ROA not after:            Tue 25 Aug 2026 11:16:10 +0000
asID:                     133798
IP address blocks:        2402:5680:8750::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Sep 2025 00:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d6:80:01:80:a3:6f:32:27:a3:77:cb:93:51:85:3f:28:dd:42:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Aug 26 11:11:10 2025 GMT
            Not After : Aug 25 11:16:10 2026 GMT
        Subject: CN=C8C2EA790946313046B6CC7DA08D80FBFD04F1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:cf:76:e1:98:39:64:7c:21:4c:86:b2:18:
                    15:44:06:d6:a5:c3:ae:22:fd:a8:49:98:80:ff:1e:
                    da:55:35:b6:f1:b2:f3:65:3a:00:96:d2:79:88:d9:
                    7f:a9:d1:bb:57:ed:3b:cf:4c:18:81:59:8f:ee:73:
                    8d:6c:e6:2f:a6:5d:07:2d:a2:69:bd:c8:fe:8a:9c:
                    2c:c8:98:7b:3c:56:4c:e2:94:e1:83:a4:b9:32:c3:
                    7d:00:fd:b1:3c:7a:ca:05:5a:b1:d1:6f:ea:b9:52:
                    e2:c8:17:20:88:a1:d0:31:5c:83:d7:a4:29:27:58:
                    4b:64:f9:70:a5:7b:af:75:b0:51:f5:71:d1:0e:42:
                    77:7f:be:c0:32:3d:79:63:93:f1:0b:27:d6:be:df:
                    ac:cb:89:09:f8:d3:98:72:88:86:93:24:1c:45:40:
                    6e:da:64:be:b5:97:da:97:bd:f1:21:17:b6:dc:93:
                    a2:9f:b9:9e:8a:28:49:78:35:41:ff:8b:c9:73:a0:
                    aa:7e:d9:b3:b7:a3:96:f6:5d:88:ca:55:1b:7c:6d:
                    61:ff:c6:4f:66:9b:b5:49:94:0d:0d:3a:ce:c8:b1:
                    b3:eb:94:bd:ee:df:b5:40:64:90:ac:b7:dd:93:84:
                    ab:ef:a6:19:d4:a2:8f:be:d4:78:e8:20:ed:aa:e8:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C2:EA:79:09:46:31:30:46:B6:CC:7D:A0:8D:80:FB:FD:04:F1:EB
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383735303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8750::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:ca:58:e8:e1:0c:5e:23:d8:ed:6c:c5:ed:2e:f2:06:29:c4:
         ee:03:8e:e7:e4:fb:0c:3e:c7:b3:d1:b1:33:ef:61:9d:f9:34:
         97:97:2b:96:2b:f1:4f:b0:c8:f6:f6:2b:d3:37:34:e4:2c:20:
         69:03:48:0b:f9:43:23:1d:de:07:dc:8e:4d:47:60:08:71:e7:
         81:1b:57:ed:65:30:d8:d7:fd:28:12:c4:ca:c6:ff:ff:01:91:
         e1:42:4b:88:a1:7f:34:4f:59:44:18:3f:9f:bd:7b:13:d7:12:
         e7:09:c4:78:95:2e:75:21:cf:2b:2c:c6:8f:b5:dd:61:aa:6e:
         ff:03:5a:ee:51:0f:ce:da:34:bc:1f:a1:81:ca:20:e4:12:fd:
         a2:7e:35:55:cc:e4:4d:1d:6c:76:ad:e3:e6:f0:55:74:73:7c:
         d2:30:1a:d1:30:a7:0f:f1:71:02:62:97:d9:fc:00:62:d9:bb:
         99:07:5d:e9:8f:47:21:3a:8a:eb:52:44:0a:aa:42:16:0c:2c:
         1b:e4:98:54:31:d3:f5:77:f6:73:aa:95:4c:17:cc:fb:7b:97:
         5c:40:de:5f:07:26:06:bf:ba:3f:01:9f:b8:f2:0d:43:63:f8:
         62:38:6f:dc:20:7b:df:2d:21:4b:99:ba:71:5c:9f:f2:07:9e:
         e9:f7:6a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 1 02:04:31 2025 by rpki-client