Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383934303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a383934303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          7ngjFrzezXPpku7jB5oXM+a8lu+KPA8FxEkDs2MinYM=
Subject key identifier:   9D:B8:05:62:76:A8:67:1F:89:A9:48:3F:6E:CD:D9:97:8F:03:33:9A
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       3C4312B4687CFF2BD6BF21BD8298B66ED016378A
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383934303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Wed 27 Aug 2025 07:29:44 +0000
ROA not before:           Wed 27 Aug 2025 07:24:44 +0000
ROA not after:            Wed 26 Aug 2026 07:29:44 +0000
asID:                     133798
IP address blocks:        2402:5680:8940::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Sep 2025 00:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:43:12:b4:68:7c:ff:2b:d6:bf:21:bd:82:98:b6:6e:d0:16:37:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Aug 27 07:24:44 2025 GMT
            Not After : Aug 26 07:29:44 2026 GMT
        Subject: CN=9DB8056276A8671F89A9483F6ECDD9978F03339A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:ae:20:fe:d7:9d:13:2b:27:b4:e8:0a:b3:
                    61:2c:ae:df:39:8c:7b:c9:87:fa:82:cf:b9:fd:d8:
                    e6:92:e9:b4:32:3f:e4:3f:da:71:77:d2:46:64:cb:
                    30:8c:91:d7:23:79:05:64:cd:39:3d:57:f2:05:cf:
                    cb:7a:c9:5d:59:ea:81:bd:be:87:53:54:f3:06:99:
                    a4:a5:ce:30:fc:b9:2c:2b:6d:aa:b8:c7:4c:e7:e8:
                    bb:d8:ab:60:91:01:e0:00:27:fe:51:a3:c8:e7:8f:
                    d0:43:f8:61:0d:f7:0a:d1:f9:a3:4d:a1:41:a9:41:
                    ef:1e:11:f4:8b:0a:e2:66:b8:93:e4:36:d4:4c:e5:
                    a7:24:b4:ef:bc:3b:d7:a1:7f:05:2c:d0:2d:4e:87:
                    fc:42:35:37:52:93:6a:5d:03:da:ba:e7:7e:28:d0:
                    89:c2:98:5c:73:bc:dd:bb:61:a1:6f:d4:9e:52:8e:
                    3d:8a:98:8c:ea:4a:09:b1:e4:4e:69:75:86:52:cf:
                    a8:00:36:4d:8c:33:40:1f:5d:cd:bb:ee:09:06:82:
                    b8:72:0b:a3:8f:d6:45:f7:09:50:f1:1b:44:bf:ba:
                    47:da:cb:f6:b1:ab:2f:06:1f:6f:6a:30:9b:16:b7:
                    d4:ca:ed:32:1a:ce:fd:7b:df:21:10:78:d4:18:28:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B8:05:62:76:A8:67:1F:89:A9:48:3F:6E:CD:D9:97:8F:03:33:9A
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383934303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:8940::/44

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:98:f5:27:1c:5a:de:ce:ca:21:fb:53:26:c4:c0:13:f4:
         0b:e2:bf:24:75:b5:76:13:a6:8a:bd:65:6e:b8:e2:67:80:1d:
         bb:66:e2:31:da:64:42:24:99:95:ee:f3:6e:c2:35:58:ba:33:
         3f:7c:fa:48:6f:29:d5:a4:60:ff:b0:82:0f:d8:bf:c1:52:2b:
         62:74:04:b4:8a:0f:35:b4:0b:6b:b6:0b:15:37:54:fa:8d:95:
         a7:7d:79:a9:bc:f1:86:0f:62:f8:c6:6c:62:f2:89:65:86:3d:
         fe:ea:c2:15:11:c2:0d:e2:f8:20:52:8e:34:f9:3f:1a:99:c4:
         0d:14:14:c7:93:54:6e:46:2b:cf:0d:6d:76:0a:eb:66:5f:25:
         76:88:d8:e0:7c:60:8d:3b:2a:6a:33:f7:44:d3:1c:37:c2:d5:
         5c:e8:08:ca:25:78:39:0f:0f:a9:6a:cc:62:17:d2:06:63:16:
         19:d1:66:f4:a5:b3:54:c2:10:b0:a5:09:6c:4b:13:06:39:3c:
         32:ad:ad:bd:dd:5d:bd:fc:09:fa:1c:4b:cb:52:d8:85:84:42:
         fc:b0:44:23:a9:1a:30:82:ed:d9:2c:be:37:dc:d4:21:a6:19:
         9e:cc:b5:97:4a:46:e1:80:9b:13:4d:db:7a:7f:6c:1f:bb:37:
         b1:40:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 1 02:05:40 2025 by rpki-client