Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031323a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031323a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          FkhOzPnoFrcCZubvBVT394qOAl2mj8IVdys7W8Wo4eI=
Subject key identifier:   69:05:15:78:FB:1F:5C:69:72:E1:70:7D:5A:5D:16:C3:25:34:9D:4A
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       2488B9A6DBC3B436AF2D0508E5B83903E77FEF46
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031323a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 26 Feb 2025 02:00:03 +0000
ROA not before:           Wed 26 Feb 2025 01:55:03 +0000
ROA not after:            Wed 25 Feb 2026 02:00:03 +0000
asID:                     38526
IP address blocks:        2405:3740:9012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 10:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:88:b9:a6:db:c3:b4:36:af:2d:05:08:e5:b8:39:03:e7:7f:ef:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Feb 26 01:55:03 2025 GMT
            Not After : Feb 25 02:00:03 2026 GMT
        Subject: CN=69051578FB1F5C6972E1707D5A5D16C325349D4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:23:f0:f7:35:1d:c5:d4:92:fc:01:be:78:d4:
                    07:f0:63:73:ee:e6:40:dc:e4:55:50:58:da:ac:2e:
                    32:5b:76:f6:4c:82:57:7a:68:47:60:7d:83:f1:12:
                    8e:92:f0:2d:a8:47:3b:e4:a8:90:2b:61:e3:48:67:
                    39:c8:27:d4:c9:14:1f:78:97:6f:e1:45:26:af:84:
                    7d:03:2a:4c:74:17:6a:7c:e0:09:80:f4:c3:f3:f4:
                    8f:47:88:bd:46:03:9d:9b:6c:7c:07:a0:2a:16:65:
                    38:a3:e5:c4:76:bd:39:d7:d4:f1:9b:5e:6b:7f:81:
                    14:4d:83:a1:eb:5a:2e:14:0e:5e:b5:60:ee:82:3a:
                    74:51:ec:b5:73:6d:f4:4d:0d:65:1e:f4:24:60:b7:
                    8d:96:0d:20:45:f3:f0:99:1d:37:59:98:57:da:e6:
                    e9:65:ba:ce:9a:40:22:c2:03:13:27:c5:4c:05:53:
                    2f:a8:8d:e7:a7:bf:4a:ce:f7:b2:f7:44:57:8f:26:
                    39:a9:22:fe:71:e8:1a:66:25:c1:d7:67:30:c1:0b:
                    32:16:20:7e:ff:01:a1:40:da:a2:51:a2:15:59:fa:
                    4d:5f:d9:4e:ff:f7:9b:43:30:33:06:52:e7:0d:a8:
                    bf:e8:79:5f:91:7c:ce:57:66:64:0c:c1:4d:b4:99:
                    d4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:05:15:78:FB:1F:5C:69:72:E1:70:7D:5A:5D:16:C3:25:34:9D:4A
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031323a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9012::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:5d:1a:13:93:02:da:7d:01:83:0d:3c:7d:69:0d:bd:5a:e1:
         39:60:93:97:54:59:65:b9:66:38:53:47:ee:2b:d6:69:f3:83:
         34:c8:60:d8:f1:5e:83:a8:a6:d9:91:0d:d4:41:16:dd:98:15:
         b4:a7:63:63:61:14:8f:ca:3d:3f:de:c6:34:5c:f6:29:23:0e:
         7b:93:3e:bb:24:6c:46:97:5e:b8:48:50:a1:93:d7:cb:13:a8:
         24:94:3b:1e:1c:f4:4c:78:29:8c:4d:f1:b4:63:64:dd:a4:4b:
         8b:e6:a5:dd:01:7a:2e:fe:62:de:ba:ad:4b:eb:d4:ed:a0:14:
         58:6d:4e:00:48:f5:cb:3a:cf:62:26:58:66:2d:4e:f9:10:8c:
         da:9e:84:9c:21:1c:92:88:af:ef:1f:9f:df:55:c8:24:d1:6d:
         25:b5:a2:bf:d6:ac:84:7b:67:ed:07:7b:f6:46:89:6d:a8:cc:
         40:cf:f2:9a:04:90:e4:22:ad:df:7e:a1:3a:86:f0:b3:1c:8f:
         a2:9d:ed:92:21:0c:dc:3e:c2:ef:29:23:79:9a:33:8c:37:e7:
         d1:c9:9b:30:19:01:f8:be:96:81:02:b7:b0:41:23:d7:ed:c3:
         be:23:dd:fc:cc:c2:8a:c8:87:e3:ef:fe:58:a8:bc:95:1e:e1:
         12:65:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:37:07 2025 by rpki-client