Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa
File:                     323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa (raw, json)
Hash identifier:          Hd3gLKDXIGhO0eZdSkUfCdbmWITohfzJx+eKqy99LCw=
Subject key identifier:   3E:55:9A:C4:2B:49:20:F4:7E:44:3D:8D:94:16:B3:2E:A4:5A:8B:F6
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       7E84E7AD2C5D0C7A8A9FDDA81AF8BE58D8198872
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa
Signing time:             Thu 05 Jun 2025 01:00:01 +0000
ROA not before:           Thu 05 Jun 2025 00:55:01 +0000
ROA not after:            Thu 04 Jun 2026 01:00:01 +0000
asID:                     63501
IP address blocks:        2403:fc80:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 10:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:84:e7:ad:2c:5d:0c:7a:8a:9f:dd:a8:1a:f8:be:58:d8:19:88:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jun  5 00:55:01 2025 GMT
            Not After : Jun  4 01:00:01 2026 GMT
        Subject: CN=3E559AC42B4920F47E443D8D9416B32EA45A8BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:cb:69:77:70:f9:29:c8:c2:06:bf:09:4d:
                    52:c4:96:3e:1f:9b:c6:46:06:6b:d2:1a:ee:14:64:
                    a1:ca:a7:60:f0:81:03:1d:b5:69:f1:8e:f9:32:df:
                    55:25:b8:4b:e6:29:91:6e:73:b9:17:fe:1e:45:e6:
                    37:86:d1:4e:63:93:cd:ee:46:0f:ae:1d:35:a6:c6:
                    e5:c6:d5:6b:a4:fd:50:61:e8:4c:23:6d:8a:e2:f2:
                    37:a7:8b:23:e5:b4:8e:72:85:6c:7c:0c:06:fa:28:
                    07:56:a5:0b:53:11:2f:be:46:fd:03:7c:e6:32:e6:
                    ad:a1:e7:48:98:fd:8a:6e:11:2f:0d:7c:44:de:93:
                    ce:10:d9:6a:48:e2:96:8f:78:95:3b:e2:b7:60:00:
                    81:9a:01:f3:63:70:2a:07:1f:bc:26:90:18:97:ce:
                    51:bb:78:55:86:7a:1a:57:b7:84:67:ef:7d:35:c8:
                    23:d2:be:5a:76:93:b8:cd:a1:04:1b:20:8d:5d:c5:
                    64:2b:ed:2a:be:7c:dc:81:60:2f:e7:b7:25:28:a5:
                    21:09:a9:cc:8f:02:8e:1a:0d:09:cd:8b:71:93:71:
                    c0:05:8d:2b:40:f4:e6:59:00:35:69:48:b5:1b:21:
                    76:24:d8:dc:fc:c4:f7:c1:f4:2a:f9:0c:d8:05:ff:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:55:9A:C4:2B:49:20:F4:7E:44:3D:8D:94:16:B3:2E:A4:5A:8B:F6
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         10:80:79:44:b7:c8:08:de:05:0b:10:6e:c7:f6:8e:0b:5e:0e:
         b4:8d:cc:e2:e0:47:ce:eb:50:28:82:e8:05:7e:4d:e1:dc:6a:
         d7:3c:1d:14:c5:8a:15:4e:5f:07:5e:e6:7c:fb:e9:8e:9d:ad:
         39:9e:d6:35:1b:c7:a1:b6:f7:32:93:fc:51:e6:b0:5a:bb:41:
         8a:ce:1f:9c:b7:5d:56:10:fe:0c:55:e9:c1:b6:48:db:63:77:
         8a:88:e7:e5:a1:4f:26:7c:7a:f1:3c:c7:6c:dc:d0:8f:6e:1d:
         3f:d9:cb:7d:cb:13:b6:59:85:19:ca:87:de:f4:19:2b:4f:d0:
         2c:1d:7b:0e:87:73:47:a2:e1:52:ed:01:67:7c:09:5c:13:b1:
         f6:4a:2b:7d:33:41:4d:d6:84:9d:88:10:0d:53:33:63:0d:b7:
         38:b4:2b:ab:c7:15:73:95:fd:2c:9a:f0:2d:ec:77:4a:37:9f:
         83:4c:b4:4c:db:90:90:38:f8:d9:32:38:ed:a1:99:a3:c8:89:
         b2:db:87:18:d2:6f:42:9b:60:dc:d3:d7:9b:29:35:b4:c5:f5:
         97:67:91:b9:ba:1c:f2:9f:82:9b:b1:07:40:49:fd:48:5d:10:
         04:99:4c:a1:d4:ba:a2:f8:1e:d6:e3:1f:10:1d:55:01:42:b2:
         df:1f:ec:7c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfoTnrSxdDHqKn92oGvi+WNgZiHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4
NTVBMThFMTAeFw0yNTA2MDUwMDU1MDFaFw0yNjA2MDQwMTAwMDFaMDMxMTAvBgNV
BAMTKDNFNTU5QUM0MkI0OTIwRjQ3RTQ0M0Q4RDk0MTZCMzJFQTQ1QThCRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYYMtpd3D5KcjCBr8JTVLElj4f
m8ZGBmvSGu4UZKHKp2DwgQMdtWnxjvky31UluEvmKZFuc7kX/h5F5jeG0U5jk83u
Rg+uHTWmxuXG1Wuk/VBh6EwjbYri8jeniyPltI5yhWx8DAb6KAdWpQtTES++Rv0D
fOYy5q2h50iY/YpuES8NfETek84Q2WpI4paPeJU74rdgAIGaAfNjcCoHH7wmkBiX
zlG7eFWGehpXt4Rn7301yCPSvlp2k7jNoQQbII1dxWQr7Sq+fNyBYC/ntyUopSEJ
qcyPAo4aDQnNi3GTccAFjStA9OZZADVpSLUbIXYk2Nz8xPfB9Cr5DNgF/+KXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPlWaxCtJIPR+RD2NlBazLqRai/YwHwYDVR0j
BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG
NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB
MThFMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMyMzQzMDMzM2E2NjYzMzgzMDNhMzgzMDMwMzAz
YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzNjMzMzUzMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJAP8
gIAwDQYJKoZIhvcNAQELBQADggEBABCAeUS3yAjeBQsQbsf2jgteDrSNzOLgR87r
UCiC6AV+TeHcatc8HRTFihVOXwde5nz76Y6drTme1jUbx6G29zKT/FHmsFq7QYrO
H5y3XVYQ/gxV6cG2SNtjd4qI5+WhTyZ8evE8x2zc0I9uHT/Zy33LE7ZZhRnKh970
GStP0Cwdew6Hc0ei4VLtAWd8CVwTsfZKK30zQU3WhJ2IEA1TM2MNtzi0K6vHFXOV
/Sya8C3sd0o3n4NMtEzbkJA4+NkyOO2hmaPIibLbhxjSb0KbYNzT15spNbTF9Zdn
kbm6HPKfgpuxB0BJ/UhdEASZTKHUuqL4HtbjHxAdVQFCst8f7Hw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:52:32 2025 by rpki-client