Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a3a2f34382d3438203d3e20313431363735.roa
File:                     323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (raw, json)
Hash identifier:          AS7ErBWYOh3ltpqaacXCmV2CVPom+cE/4rFVdqtAK+c=
Subject key identifier:   6E:D8:04:6C:A4:9B:D4:57:DC:87:9B:8A:7C:7C:C7:FB:F7:0E:1B:4D
Certificate issuer:       /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial:       7C0BB7420F1E039E50671352E6F342BCEF1005ED
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a3a2f34382d3438203d3e20313431363735.roa
Signing time:             Thu 15 May 2025 02:41:26 +0000
ROA not before:           Thu 15 May 2025 02:36:26 +0000
ROA not after:            Thu 14 May 2026 02:41:26 +0000
asID:                     141675
IP address blocks:        2406:aec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
                          rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 13:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0b:b7:42:0f:1e:03:9e:50:67:13:52:e6:f3:42:bc:ef:10:05:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
        Validity
            Not Before: May 15 02:36:26 2025 GMT
            Not After : May 14 02:41:26 2026 GMT
        Subject: CN=6ED8046CA49BD457DC879B8A7C7CC7FBF70E1B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:9a:f5:8f:71:19:fc:52:cf:f1:41:34:47:
                    f3:2f:8d:42:e6:df:36:1c:f7:3b:b4:15:d2:53:ec:
                    16:f0:cd:fd:f1:eb:df:04:ee:ab:97:22:86:9d:0d:
                    00:9b:04:23:3b:95:f1:99:ca:55:90:93:65:96:20:
                    db:eb:d1:c0:78:5e:68:57:f4:c8:8f:45:8c:ec:0a:
                    62:9d:d9:55:81:ac:e8:18:0c:eb:15:2a:5a:76:62:
                    03:f6:08:6b:bc:f1:36:56:c1:c8:2e:8c:9b:2d:f6:
                    2d:f4:4b:60:cf:05:90:52:83:98:43:13:c5:a1:b4:
                    d6:79:30:3e:aa:dc:47:af:92:73:f7:6d:c8:bb:46:
                    b6:33:19:f5:4d:06:27:ac:fb:c0:02:d6:8d:8b:aa:
                    42:13:b4:12:b5:a9:cf:00:fe:56:a8:3f:fc:15:f8:
                    9c:1f:23:fb:e0:1d:db:b6:55:e5:2a:05:74:c6:48:
                    1b:2b:28:51:bf:9f:cf:61:a6:c5:8c:cb:85:43:9e:
                    28:e6:67:04:e7:78:b2:29:d2:0c:9d:d0:4d:18:d6:
                    ec:7d:c5:2c:c6:b2:be:bd:b9:b8:76:a0:bb:26:60:
                    6b:74:12:be:ae:d6:f0:0e:60:c8:aa:96:66:b5:86:
                    97:d9:e4:98:d3:0e:df:b7:a0:bb:32:8d:e2:dc:80:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D8:04:6C:A4:9B:D4:57:DC:87:9B:8A:7C:7C:C7:FB:F7:0E:1B:4D
            X509v3 Authority Key Identifier:
                keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a3a2f34382d3438203d3e20313431363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:aec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:77:48:18:5a:c0:3d:16:e2:6c:a0:52:b1:1e:b7:28:bc:86:
         a5:2e:39:cd:24:62:7b:c9:68:bd:39:94:e6:2e:89:4e:59:58:
         6f:09:3e:04:03:05:77:dd:78:4d:97:27:e8:ea:34:eb:77:1e:
         b7:b5:88:38:b3:20:cd:5a:dd:97:be:bf:e7:90:98:ff:c0:d1:
         36:09:21:6d:5e:74:ff:ea:0e:4f:5e:72:78:bd:1d:fb:51:d9:
         53:13:d5:a2:f7:5c:f3:fc:dd:10:f9:b6:52:96:90:23:e4:5c:
         ff:05:e6:d7:05:51:4d:a0:67:2f:e9:26:b4:75:76:9c:53:1b:
         bb:be:b9:cf:d5:9e:8c:0e:b1:53:3f:11:82:26:77:b1:17:5f:
         3f:ae:76:11:fb:b0:5f:f7:28:1d:e5:56:3e:d5:6b:c3:db:fe:
         5f:86:10:e0:da:da:63:f2:6e:05:2f:39:a0:b5:bb:65:94:a5:
         49:b1:fc:c5:d1:b1:b0:e7:de:bd:c2:fc:04:5c:04:70:f1:3c:
         bd:82:af:fd:7f:9b:eb:ee:2d:f1:8e:e6:6b:16:bf:cd:80:83:
         07:f1:8c:f1:99:47:d9:2a:30:07:ed:09:92:9a:23:6e:ab:63:
         8d:df:44:61:53:9a:fb:3b:68:bd:be:da:c5:74:9b:1b:ed:59:
         f4:46:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:46:39 2025 by rpki-client