Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393965303a3a2f34342d3434203d3e20313333373938.roa
File:                     323430323a353638303a393965303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier:          0pZUq1JgDnp4L7juz8rGvrx0H/5RYB+T8l5wmVM/rR8=
Subject key identifier:   F9:06:2C:48:AB:30:13:FA:A2:6A:94:06:36:26:A3:AA:9E:02:C4:F2
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       74DAE5D5746DE7DB034B887C80B426EF47A48333
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393965303a3a2f34342d3434203d3e20313333373938.roa
Signing time:             Tue 26 Aug 2025 11:12:37 +0000
ROA not before:           Tue 26 Aug 2025 11:07:37 +0000
ROA not after:            Tue 25 Aug 2026 11:12:37 +0000
asID:                     133798
IP address blocks:        2402:5680:99e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Sep 2025 00:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:da:e5:d5:74:6d:e7:db:03:4b:88:7c:80:b4:26:ef:47:a4:83:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Aug 26 11:07:37 2025 GMT
            Not After : Aug 25 11:12:37 2026 GMT
        Subject: CN=F9062C48AB3013FAA26A94063626A3AA9E02C4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:03:56:f6:f7:5d:dc:17:91:4a:46:fb:98:
                    06:98:1d:8a:97:21:dd:8b:d8:cd:79:c9:ce:af:6f:
                    2c:7c:4a:1d:83:12:13:88:2d:5d:44:ca:b9:d9:be:
                    8e:14:fc:8e:8c:48:ba:e8:bb:ff:56:5f:6e:b5:af:
                    59:1a:49:ad:54:4e:4b:8b:3d:36:69:0c:cf:4d:35:
                    73:1e:d8:bf:46:a1:ad:5e:40:69:21:83:e7:25:74:
                    62:72:84:5d:a2:e8:67:ba:4c:0c:b3:3a:63:36:77:
                    3d:f5:4b:5a:3a:38:82:0c:89:9a:7a:bb:64:9d:69:
                    eb:ca:a6:6d:a9:cb:28:ea:2c:58:d3:a9:aa:c1:95:
                    6b:0e:fb:b5:7d:8f:6e:7d:cd:00:ab:fc:f0:b5:49:
                    68:1f:54:07:cf:b6:a0:a5:b2:82:0e:8d:23:a9:fa:
                    1b:6d:3d:b6:c8:95:48:76:3c:8b:aa:1c:aa:51:a0:
                    58:a2:eb:2d:98:a2:a3:ce:fa:98:bb:af:de:0f:63:
                    67:35:1a:84:e5:5d:ad:0f:07:a5:6b:01:d3:50:4d:
                    02:55:99:a0:6f:85:38:0d:75:90:71:fe:a9:ed:67:
                    ac:50:23:c7:08:45:1e:01:f5:58:43:18:dd:53:ca:
                    2b:06:7e:d7:99:9b:4f:ed:b4:01:37:cb:2d:ae:f3:
                    7b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:06:2C:48:AB:30:13:FA:A2:6A:94:06:36:26:A3:AA:9E:02:C4:F2
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393965303a3a2f34342d3434203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:99e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:40:68:d9:7e:b4:85:52:f9:27:7c:a1:a2:46:21:7c:97:50:
         6f:03:76:b4:5e:69:f1:ba:94:66:de:23:3e:16:fb:ce:55:06:
         ad:b8:b9:2b:46:3f:3a:25:3f:c8:99:81:5f:45:f3:1f:78:bd:
         e8:63:e5:9c:db:51:0f:12:47:0b:5b:68:f4:7c:96:f0:1f:a5:
         91:a3:8b:45:6c:a7:80:e3:b0:d0:b6:8b:66:b7:fe:57:18:f7:
         08:9e:79:6e:0b:6a:cb:d6:1b:a4:b5:3c:01:b2:42:eb:2f:69:
         c4:70:cf:f3:42:ff:0d:4f:3a:47:4c:9c:d4:0b:7d:c5:ed:70:
         15:07:f3:1c:01:71:05:43:3b:71:38:ac:8a:32:41:4b:b2:28:
         bb:83:0c:0f:77:7e:ed:ed:cb:f1:cc:93:dc:62:3c:30:8b:ca:
         4c:37:fd:95:02:b2:6e:79:9a:b5:c4:2f:6c:63:65:9f:20:f6:
         a6:d1:d4:94:90:67:b4:ff:b1:85:01:0b:ae:41:f4:b4:22:b2:
         1e:05:cf:1f:82:49:93:fa:6c:63:6f:c1:9a:68:6a:d8:15:f4:
         70:71:f3:7b:4f:3e:7d:6d:7b:c6:07:e8:d3:d9:4e:08:87:40:
         cc:d5:f4:c7:c1:58:1a:08:80:f0:73:95:7f:0a:00:9a:4d:d8:
         22:41:83:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 1 02:07:13 2025 by rpki-client