Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/323430363a663138303a3a2f33322d3332203d3e20313335343734.roa
File:                     323430363a663138303a3a2f33322d3332203d3e20313335343734.roa (raw, json)
Hash identifier:          44GqV7+aifA6Y8Xw0PSqLbP9VTgKoGRYNbouCHxnZKc=
Subject key identifier:   51:D5:24:AD:35:AC:F5:79:EE:B3:BC:DA:30:D3:60:34:88:48:3D:F6
Certificate issuer:       /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial:       7E5870A4A904C7AE39B26B4508B45B0258511969
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/323430363a663138303a3a2f33322d3332203d3e20313335343734.roa
Signing time:             Sun 06 Jul 2025 09:00:00 +0000
ROA not before:           Sun 06 Jul 2025 08:55:00 +0000
ROA not after:            Sun 05 Jul 2026 09:00:00 +0000
asID:                     135474
IP address blocks:        2406:f180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl
                          rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:58:70:a4:a9:04:c7:ae:39:b2:6b:45:08:b4:5b:02:58:51:19:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
        Validity
            Not Before: Jul  6 08:55:00 2025 GMT
            Not After : Jul  5 09:00:00 2026 GMT
        Subject: CN=51D524AD35ACF579EEB3BCDA30D3603488483DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2f:0c:3e:05:78:af:22:19:41:fb:c4:c8:db:
                    67:92:01:72:5c:ac:1d:88:07:3e:78:4a:1d:3e:6f:
                    bc:a4:a1:63:df:38:6e:94:2a:7f:71:77:db:28:ea:
                    f8:71:53:20:c8:f7:28:89:75:74:cf:f8:f1:46:35:
                    3a:2e:6a:75:cc:62:d3:7a:24:9c:26:3b:c7:81:32:
                    de:44:52:6a:b1:d7:67:25:e2:9a:e3:82:8d:bd:9f:
                    60:e1:9a:9c:04:e8:83:e8:d9:b2:54:a3:58:13:e5:
                    65:43:8d:fb:8d:87:db:04:b3:cd:70:de:1b:f1:0d:
                    fa:23:91:82:05:90:17:d0:3b:60:e2:8e:e2:0d:0c:
                    57:7d:36:d1:4d:e1:cd:06:47:61:07:c4:ef:62:70:
                    d5:dc:0d:87:11:74:a0:87:72:e8:7f:b4:34:05:ee:
                    44:1d:1f:5c:b1:fa:8a:66:f4:c8:a8:30:5d:df:2f:
                    15:29:10:cd:c1:83:23:1d:40:90:ca:33:a7:01:52:
                    4e:2a:50:11:ef:27:73:82:df:17:82:5d:e3:ca:d1:
                    47:15:12:23:2f:30:0e:3d:c9:8a:ec:99:74:fd:f4:
                    ed:af:c5:e5:5b:a7:ab:70:ca:59:00:c3:52:96:c7:
                    73:1a:1b:92:78:aa:cc:2d:94:ba:63:6c:c6:67:ee:
                    ff:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D5:24:AD:35:AC:F5:79:EE:B3:BC:DA:30:D3:60:34:88:48:3D:F6
            X509v3 Authority Key Identifier:
                keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/323430363a663138303a3a2f33322d3332203d3e20313335343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f180::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:32:6d:2a:75:b2:dd:fe:01:71:65:b9:14:84:e1:2f:ee:86:
         41:9f:b9:6c:82:0d:1e:28:59:8e:28:4c:ed:1e:e5:e6:d6:85:
         0f:fb:25:73:21:da:a3:d8:55:48:74:04:51:f5:a0:09:94:d9:
         c9:26:d7:d5:af:27:f5:2f:ca:59:b0:a5:38:63:b1:da:05:29:
         1d:fb:13:96:34:3c:18:ca:c4:46:fa:c1:0c:2a:ee:5b:d3:23:
         e2:3a:0a:d4:71:ec:cc:1c:57:67:92:0c:d2:3c:5c:b4:69:d0:
         3b:77:1f:52:7a:81:9a:9e:4a:d9:86:c3:fa:ba:d7:e6:45:bc:
         28:eb:36:5e:8c:19:be:2b:e8:43:a3:b0:a9:0c:56:94:dc:c8:
         ca:e5:c5:60:cd:b7:f3:70:f7:b7:35:c4:2d:93:38:74:c0:8c:
         20:03:ad:18:7b:d8:28:6d:27:48:59:95:ef:7c:42:44:87:8c:
         ae:c4:a1:44:74:23:46:88:33:9b:f1:49:37:92:19:e5:91:bf:
         38:fb:ec:5e:4c:19:da:99:a7:e4:f6:2e:14:39:fb:26:1a:49:
         f2:28:fb:de:59:ce:74:ca:2f:88:28:9e:f7:43:87:24:6f:fc:
         e8:43:ce:9a:ea:b4:de:e2:b7:8d:9d:31:4e:4d:b2:6e:6a:71:
         6d:76:16:c6
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUflhwpKkEx645smtFCLRbAlhRGWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAxRjgwRjVCNkM0MTIxMENBMDM3MEFFRUZDOTc5NEVG
MEYwNjQ0QTAeFw0yNTA3MDYwODU1MDBaFw0yNjA3MDUwOTAwMDBaMDMxMTAvBgNV
BAMTKDUxRDUyNEFEMzVBQ0Y1NzlFRUIzQkNEQTMwRDM2MDM0ODg0ODNERjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfLww+BXivIhlB+8TI22eSAXJc
rB2IBz54Sh0+b7ykoWPfOG6UKn9xd9so6vhxUyDI9yiJdXTP+PFGNTouanXMYtN6
JJwmO8eBMt5EUmqx12cl4prjgo29n2DhmpwE6IPo2bJUo1gT5WVDjfuNh9sEs81w
3hvxDfojkYIFkBfQO2DijuINDFd9NtFN4c0GR2EHxO9icNXcDYcRdKCHcuh/tDQF
7kQdH1yx+opm9MioMF3fLxUpEM3BgyMdQJDKM6cBUk4qUBHvJ3OC3xeCXePK0UcV
EiMvMA49yYrsmXT99O2vxeVbp6twylkAw1KWx3MaG5J4qswtlLpjbMZn7v8RAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUUdUkrTWs9Xnus7zaMNNgNIhIPfYwHwYDVR0j
BBgwFoAU4B+A9bbEEhDKA3Cu78l5TvDwZEowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
M2M4ZjRkNy1lNGIzLTRiNDEtYTY4NS01MTQ5NDBmZWM4MTkvMC9FMDFGODBGNUI2
QzQxMjEwQ0EwMzcwQUVFRkM5Nzk0RUYwRjA2NDRBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTAxRjgwRjVCNkM0MTIxMENBMDM3MEFFRUZDOTc5NEVGMEYw
NjQ0QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzYzhmNGQ3LWU0YjMtNGI0MS1h
Njg1LTUxNDk0MGZlYzgxOS8wLzMyMzQzMDM2M2E2NjMxMzgzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzNTM0MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQG8YAwDQYJKoZI
hvcNAQELBQADggEBAIwybSp1st3+AXFluRSE4S/uhkGfuWyCDR4oWY4oTO0e5ebW
hQ/7JXMh2qPYVUh0BFH1oAmU2ckm19WvJ/UvylmwpThjsdoFKR37E5Y0PBjKxEb6
wQwq7lvTI+I6CtRx7MwcV2eSDNI8XLRp0Dt3H1J6gZqeStmGw/q61+ZFvCjrNl6M
Gb4r6EOjsKkMVpTcyMrlxWDNt/Nw97c1xC2TOHTAjCADrRh72ChtJ0hZle98QkSH
jK7EoUR0I0aIM5vxSTeSGeWRvzj77F5MGdqZp+T2LhQ5+yYaSfIo+95ZznTKL4go
nvdDhyRv/OhDzprqtN7it42dMU5Nsm5qcW12FsY=
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:13 2025 by rpki-client