Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f34382d3438203d3e20313336303739.roa
File:                     323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (raw, json)
Hash identifier:          u07NQFdDkw9uQJyKvseE8BXy1l4340TGYboFy4isKRg=
Subject key identifier:   08:07:EA:4A:26:49:07:6F:91:95:5C:22:9F:EC:20:2A:3C:4F:BC:D5
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       1B5BCF7B2C9ED319A900104C10DF1F4682942BA7
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f34382d3438203d3e20313336303739.roa
Signing time:             Tue 15 Jul 2025 02:00:02 +0000
ROA not before:           Tue 15 Jul 2025 01:55:02 +0000
ROA not after:            Tue 14 Jul 2026 02:00:02 +0000
asID:                     136079
IP address blocks:        2405:2cc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
                          rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 20:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5b:cf:7b:2c:9e:d3:19:a9:00:10:4c:10:df:1f:46:82:94:2b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: Jul 15 01:55:02 2025 GMT
            Not After : Jul 14 02:00:02 2026 GMT
        Subject: CN=0807EA4A2649076F91955C229FEC202A3C4FBCD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:0a:12:49:81:e6:a5:04:e9:6a:42:39:b7:
                    1c:23:e6:7e:2f:5a:af:04:f9:8b:40:ca:91:de:b7:
                    1f:fa:58:28:7c:33:98:9a:9e:9c:c1:18:20:e8:ea:
                    f4:c3:19:ff:d9:05:9f:31:54:d2:de:c5:52:97:32:
                    c2:55:c2:01:8f:b7:a3:fe:06:95:f8:02:c1:f3:28:
                    a0:d1:23:dd:26:fe:2d:0a:04:22:a1:27:02:38:ed:
                    18:5d:8b:86:94:46:a9:76:65:3c:08:39:d2:ee:dd:
                    00:b6:d0:3e:fe:84:9e:6e:ad:54:90:85:09:3d:01:
                    95:84:37:66:92:d9:f9:c4:86:9e:9f:99:a1:16:7d:
                    3e:52:9b:37:54:ae:0d:ab:fa:90:19:50:84:5d:77:
                    94:da:ef:32:a2:57:0f:81:9d:1b:8e:25:41:f0:f8:
                    8a:0a:18:3d:2f:29:81:34:1f:a0:e2:53:ee:d7:5e:
                    03:0f:7c:ab:52:62:af:9f:d2:f2:bd:9b:88:3b:f2:
                    82:86:51:6b:c6:b1:98:47:98:7b:2c:30:50:c6:91:
                    4b:bc:8a:78:c1:c1:a9:8c:cc:d4:33:43:0a:49:02:
                    a8:5c:a1:55:b0:44:69:bc:91:36:da:88:68:c0:a7:
                    fd:5b:01:61:ca:cc:cf:55:ee:20:a3:8c:a3:67:86:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:07:EA:4A:26:49:07:6F:91:95:5C:22:9F:EC:20:2A:3C:4F:BC:D5
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f34382d3438203d3e20313336303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:f9:4b:71:9d:cd:04:1d:be:52:1c:0f:60:bd:36:cf:01:b0:
         36:39:ac:88:3e:6c:fa:77:1f:69:e8:11:8b:9b:93:8a:15:06:
         85:be:ca:31:2d:4f:5e:c4:44:3c:8a:7b:76:c0:1d:6f:40:cc:
         ca:83:ff:b1:d7:2d:c0:04:bc:8a:fd:d4:58:7f:96:cc:23:17:
         c5:5b:3c:e3:30:4b:bc:a6:14:15:e8:88:23:8a:b2:ff:f5:cc:
         46:a3:27:8c:46:97:6c:33:74:63:05:21:ae:72:89:62:6b:9e:
         4f:82:9a:ef:ea:3f:27:e5:ef:e4:a4:3a:eb:77:2c:9f:4b:79:
         18:00:4f:38:94:93:ba:7e:8d:6e:c4:85:cb:98:4f:49:06:bc:
         7d:49:33:16:fb:c1:3a:70:3c:24:cd:17:b3:2b:d1:d9:87:4a:
         a2:c8:8c:d5:d2:aa:55:89:74:57:9e:89:28:38:68:38:da:41:
         b8:ee:84:e8:ad:53:69:6e:97:ae:cc:6a:64:5c:26:f5:ee:3e:
         e5:f5:8c:3e:89:91:68:27:dd:7a:ae:2e:5a:af:25:61:69:0f:
         30:a6:6e:3c:91:8c:63:b2:6c:d2:6d:14:08:9e:ba:9e:92:3d:
         e2:9d:c4:85:ac:5c:e7:95:12:94:40:6f:bb:d2:ac:94:f7:74:
         65:0c:8b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:29 2025 by rpki-client