Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/323430373a343630303a3a2f33322d3438203d3e203435323935.roa
File:                     323430373a343630303a3a2f33322d3438203d3e203435323935.roa (raw, json)
Hash identifier:          4LpQRgrp7oBVnTYb85mIa1GKQ4oBc22IhdekLi1TA6c=
Subject key identifier:   93:31:C5:66:B4:0C:A9:9C:AB:70:06:EC:96:93:A0:A3:26:A0:70:A4
Certificate issuer:       /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Certificate serial:       7485EFB1E80BB80F8672C65872EB0027654CC292
Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/323430373a343630303a3a2f33322d3438203d3e203435323935.roa
Signing time:             Mon 02 Jun 2025 02:04:01 +0000
ROA not before:           Mon 02 Jun 2025 01:59:01 +0000
ROA not after:            Mon 01 Jun 2026 02:04:01 +0000
asID:                     45295
IP address blocks:        2407:4600::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl
                          rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 19:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:85:ef:b1:e8:0b:b8:0f:86:72:c6:58:72:eb:00:27:65:4c:c2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
        Validity
            Not Before: Jun  2 01:59:01 2025 GMT
            Not After : Jun  1 02:04:01 2026 GMT
        Subject: CN=9331C566B40CA99CAB7006EC9693A0A326A070A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:9b:34:74:fa:87:d7:b4:b1:85:54:ba:eb:
                    50:45:5a:86:d3:57:90:eb:c2:f8:24:37:82:24:f5:
                    bd:23:d8:39:06:82:9b:8a:88:ae:b6:30:92:43:ab:
                    95:dd:f3:e6:e0:4c:d8:13:70:2f:ad:59:be:e6:d5:
                    de:52:be:e3:15:0d:73:8f:b5:5b:20:f8:97:77:17:
                    e8:16:f8:b2:8a:f7:23:5b:1a:d8:b7:bf:7e:34:93:
                    5f:74:aa:17:38:07:0b:40:2e:a1:00:fd:33:8b:98:
                    87:77:e7:66:5a:28:29:e7:ca:09:25:d3:09:64:e9:
                    48:a1:3f:4a:16:7e:73:fc:b4:41:e2:a5:91:da:49:
                    8e:9d:a5:94:7e:34:a7:de:af:07:9f:01:f7:0a:ff:
                    45:b8:8b:bf:c6:cd:a8:01:af:ca:4f:eb:87:4b:83:
                    55:71:08:ee:a8:fa:2f:f9:be:07:5e:4a:38:2c:d4:
                    d2:e1:26:71:71:d9:98:5c:5c:b4:f4:c9:79:5c:e7:
                    eb:fa:3c:83:c8:3e:e4:a3:d3:b6:6c:db:c1:27:2e:
                    3c:10:20:49:3d:42:f1:69:18:a8:4b:3b:ea:e0:ea:
                    22:50:67:e0:8c:97:20:89:8e:25:b9:2f:70:d8:f3:
                    0f:13:30:b9:66:b0:dc:00:e2:e2:ff:ac:2e:34:c1:
                    2d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:31:C5:66:B4:0C:A9:9C:AB:70:06:EC:96:93:A0:A3:26:A0:70:A4
            X509v3 Authority Key Identifier:
                keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/323430373a343630303a3a2f33322d3438203d3e203435323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:a6:35:b7:8b:2f:45:87:ae:1d:d3:98:e1:82:6f:34:b2:bb:
         17:01:83:db:ca:5e:c4:ab:94:79:23:14:4c:cd:f2:b6:50:fb:
         c1:4c:fd:02:3a:19:aa:9a:77:82:de:0e:ad:a2:40:15:d4:bf:
         c7:4f:6d:48:85:f4:e1:08:81:ac:d6:9a:8f:5c:fc:9c:c6:d1:
         0f:30:f7:aa:3b:92:42:5a:0d:ad:83:19:4b:b7:ed:66:bf:c3:
         40:ef:ad:97:1b:3c:71:3e:b2:93:8b:97:43:f1:07:de:7b:4f:
         03:47:8a:65:83:24:66:e1:57:d3:57:b4:09:77:cb:48:81:62:
         93:d3:29:bb:25:b9:13:0d:44:ba:d1:ce:79:dc:33:84:87:7d:
         06:de:38:0e:ca:ef:0b:5c:4f:36:36:00:f9:20:fd:2d:d4:e8:
         4c:8e:7b:5e:14:7d:7b:c2:f4:3f:c4:b5:f2:58:41:07:d3:ea:
         0f:ed:8c:a7:3d:25:23:11:74:c9:97:9d:35:6e:69:8e:ee:37:
         0a:ef:40:65:c3:01:d5:a2:18:b9:33:73:40:ef:a1:e2:46:5d:
         6f:18:f8:43:c4:cc:10:84:7d:e0:a2:d3:a3:ac:b6:13:e6:4e:
         4d:51:19:80:27:5b:9c:72:60:19:48:e6:0f:68:0a:1f:a9:28:
         fb:56:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:57:52 2025 by rpki-client