Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33342d3438203d3e20313430343233.roa
File:                     323430363a323063303a383030303a3a2f33342d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          GSJJdggvfFwB9qLe1PFp+cO6i4bwj+P0URv6ycjDyRI=
Subject key identifier:   5E:0F:E1:AB:77:02:F8:A8:12:56:A7:ED:D2:9E:71:C0:80:F1:AE:CC
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       712FF5C6E1F159F9BD509581A0041E533A5ABD10
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33342d3438203d3e20313430343233.roa
Signing time:             Sun 03 Aug 2025 08:00:00 +0000
ROA not before:           Sun 03 Aug 2025 07:55:00 +0000
ROA not after:            Sun 02 Aug 2026 08:00:00 +0000
asID:                     140423
IP address blocks:        2406:20c0:8000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
                          rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 03:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2f:f5:c6:e1:f1:59:f9:bd:50:95:81:a0:04:1e:53:3a:5a:bd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Aug  3 07:55:00 2025 GMT
            Not After : Aug  2 08:00:00 2026 GMT
        Subject: CN=5E0FE1AB7702F8A81256A7EDD29E71C080F1AECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:38:e6:8d:4f:32:78:94:6e:3b:0b:d5:70:49:
                    e5:11:ad:28:25:96:50:0a:6f:25:9c:db:e7:99:61:
                    df:84:0d:bc:d7:de:9e:b0:88:6c:85:bd:bd:50:56:
                    03:47:d1:82:0a:64:b2:3f:17:72:bc:df:9a:c0:ff:
                    57:ba:37:9c:5c:6c:9b:ba:96:6c:0b:cd:3d:32:6a:
                    d2:72:56:f3:80:f3:96:f9:89:79:0a:af:73:36:1c:
                    30:f2:0d:d5:81:52:88:94:7c:3d:fa:45:c4:2d:4e:
                    1a:63:02:28:fd:75:0e:84:af:07:8d:48:bb:b8:11:
                    70:92:4c:bc:15:7d:65:b2:02:0c:75:1e:3e:fc:e8:
                    37:59:8a:ce:cf:6b:55:7b:27:96:6d:60:96:0a:95:
                    3c:85:1b:d2:58:80:d9:30:33:12:db:72:1b:5b:e1:
                    9a:f8:c4:54:16:6b:28:d1:ee:60:91:8b:31:f7:88:
                    bd:b9:e9:db:86:9f:a6:78:88:b0:f3:1a:6b:83:2e:
                    44:be:78:b4:59:87:e8:5b:6e:0e:44:77:34:05:65:
                    38:4a:32:5f:6c:69:47:8f:8f:94:6a:b7:12:13:01:
                    24:6f:7f:c7:a0:8e:8a:c0:65:6c:84:6b:44:c2:55:
                    a1:b4:4d:ff:70:b7:e2:4a:06:5c:35:5b:5e:92:17:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0F:E1:AB:77:02:F8:A8:12:56:A7:ED:D2:9E:71:C0:80:F1:AE:CC
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33342d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         31:90:dc:2e:90:be:2e:cf:79:36:39:5c:7d:94:98:e8:cd:1f:
         d1:f1:ba:78:73:17:d7:0c:27:e7:2d:03:e6:7f:05:4b:3f:23:
         dd:dc:ba:2d:4d:d1:3c:2d:0d:a9:28:ba:d4:61:37:9c:39:9f:
         ed:db:ad:cd:60:52:59:85:45:c0:00:40:9b:ea:a7:b2:ef:02:
         ea:ae:e1:62:64:9c:0a:0d:5c:c9:a4:cf:b6:23:2c:de:cf:37:
         17:0e:c7:67:df:ae:f3:5a:11:16:65:f0:d4:c8:5f:ba:9c:de:
         6c:52:54:7e:ed:ac:69:9b:56:38:42:a6:61:97:fc:29:ba:b0:
         ce:8f:4c:3e:28:cf:98:e1:f7:5d:b3:a6:cb:f6:31:af:f4:d0:
         fc:f4:a9:07:f8:e5:cd:b4:f2:da:0e:9e:c1:ad:e9:64:ca:9d:
         d7:9a:1a:31:3a:0e:95:a0:52:db:dd:7c:07:76:22:fb:95:35:
         b7:50:19:18:1a:cb:74:13:75:13:a4:bb:15:48:21:42:fe:d3:
         a0:84:64:9b:fc:3b:43:7b:40:14:47:5f:99:c4:d7:a6:ed:36:
         ea:a6:1d:df:17:b9:91:a6:2e:92:c0:65:95:55:14:34:26:06:
         97:72:5f:5d:da:fb:eb:50:8d:e1:ac:6b:ce:c9:d9:f3:6b:cf:
         23:cd:aa:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:39 2025 by rpki-client