Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/323430363a343634303a3a2f33322d3332203d3e20313430343637.roa
File:                     323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (raw, json)
Hash identifier:          QGKtavih0+s5gXHFp46nHoGFZ6NC2NvnCwfjyI4NIwM=
Subject key identifier:   C6:94:B2:B7:C3:03:43:F7:E1:C6:DD:2C:B4:2C:E1:C4:F2:47:25:C0
Certificate issuer:       /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Certificate serial:       6A1002D7BD6006887EF688732066C84D74F18189
Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/323430363a343634303a3a2f33322d3332203d3e20313430343637.roa
Signing time:             Mon 06 Apr 2026 09:00:00 +0000
ROA not before:           Mon 06 Apr 2026 08:55:00 +0000
ROA not after:            Mon 05 Apr 2027 09:00:00 +0000
asID:                     140467
IP address blocks:        2406:4640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
                          rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 03:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:10:02:d7:bd:60:06:88:7e:f6:88:73:20:66:c8:4d:74:f1:81:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
        Validity
            Not Before: Apr  6 08:55:00 2026 GMT
            Not After : Apr  5 09:00:00 2027 GMT
        Subject: CN=C694B2B7C30343F7E1C6DD2CB42CE1C4F24725C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:c1:78:b3:9b:59:3d:2b:7e:92:81:d5:f5:
                    c2:e4:f4:ae:3d:95:37:d9:0e:88:d6:5b:a4:61:a9:
                    31:31:e7:3a:e5:7c:05:ca:84:bd:68:97:ee:1e:2d:
                    26:1a:e1:b5:17:28:24:6e:65:e6:1c:d4:ec:99:3d:
                    63:4d:62:24:04:aa:1f:5d:f6:b4:24:57:6b:94:7a:
                    3e:2d:a1:ef:be:60:29:2e:3b:41:7f:2e:98:49:bd:
                    98:df:34:1c:ab:de:3c:3b:b5:b5:44:f0:15:90:0c:
                    20:12:5a:75:ea:a3:7f:8f:5d:3a:2f:d7:0f:f3:c4:
                    45:7d:08:cd:a6:73:9d:d1:5f:27:cd:0c:e7:ea:48:
                    aa:98:15:ce:ae:d8:17:6e:90:bf:57:8d:9e:6a:b2:
                    6b:d6:d5:b9:d3:47:3f:4d:33:b8:ac:02:e4:a4:57:
                    16:e1:ca:9b:aa:2a:81:b2:7f:54:72:1d:ec:07:bb:
                    f8:ff:15:d3:9b:f7:a4:7e:0b:1f:28:64:30:ab:a3:
                    42:87:63:0d:cc:5b:c1:0b:81:55:0a:18:8f:47:14:
                    d7:54:67:2c:ef:f8:27:60:0a:2b:fd:2b:4f:22:ec:
                    c4:f6:de:c1:c6:53:fe:e7:36:a9:06:86:0c:52:d6:
                    0b:ca:6b:bc:a1:7f:e4:8c:e6:1a:3e:24:9a:1e:b1:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:94:B2:B7:C3:03:43:F7:E1:C6:DD:2C:B4:2C:E1:C4:F2:47:25:C0
            X509v3 Authority Key Identifier:
                keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/323430363a343634303a3a2f33322d3332203d3e20313430343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:4640::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:3c:3c:76:0b:92:0e:61:46:66:93:f0:57:70:9e:0c:34:c8:
         3b:02:79:23:cc:a7:db:0c:3a:a0:4d:46:8b:f8:32:6a:e2:78:
         d8:46:59:5c:f4:7a:38:eb:3c:a1:51:8d:41:e1:38:17:d8:8e:
         d0:26:7f:50:72:33:d6:78:f7:05:52:ab:02:bf:35:6f:5c:3b:
         30:9a:b5:56:dd:95:45:35:52:c6:17:f1:1f:0b:45:ce:34:ce:
         17:6a:c9:69:ec:3e:68:28:60:34:e6:45:4c:f2:2c:b1:42:cd:
         8f:96:81:36:24:88:ba:7b:30:15:ed:39:3d:86:38:19:bb:38:
         cd:96:83:58:ab:5f:3a:c8:3d:ba:04:11:e4:f3:5e:dc:95:74:
         9b:f1:af:ea:4b:e4:55:4b:a2:83:e5:e5:76:fd:e3:30:71:5f:
         d2:5e:cd:ed:32:d8:8f:d8:26:4a:a9:6f:0e:43:06:e2:3f:49:
         54:2c:da:22:0e:88:be:53:c4:05:f9:4a:9d:b7:78:e0:b9:6e:
         e8:18:ba:f4:51:94:71:a3:7a:5e:14:83:93:9f:45:db:ec:23:
         15:99:42:41:d6:33:98:bb:1f:3b:64:de:55:cf:b5:c7:71:2c:
         c3:a2:89:df:2e:6b:c7:53:ca:eb:81:b4:5e:a1:1e:2c:a5:e2:
         15:2b:a9:29
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUahAC171gBoh+9ohzIGbITXTxgYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4
NjA4RUUxOTAeFw0yNjA0MDYwODU1MDBaFw0yNzA0MDUwOTAwMDBaMDMxMTAvBgNV
BAMTKEM2OTRCMkI3QzMwMzQzRjdFMUM2REQyQ0I0MkNFMUM0RjI0NzI1QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcMF4s5tZPSt+koHV9cLk9K49
lTfZDojWW6RhqTEx5zrlfAXKhL1ol+4eLSYa4bUXKCRuZeYc1OyZPWNNYiQEqh9d
9rQkV2uUej4toe++YCkuO0F/LphJvZjfNByr3jw7tbVE8BWQDCASWnXqo3+PXTov
1w/zxEV9CM2mc53RXyfNDOfqSKqYFc6u2BdukL9XjZ5qsmvW1bnTRz9NM7isAuSk
VxbhypuqKoGyf1RyHewHu/j/FdOb96R+Cx8oZDCro0KHYw3MW8ELgVUKGI9HFNdU
Zyzv+CdgCiv9K08i7MT23sHGU/7nNqkGhgxS1gvKa7yhf+SM5ho+JJoesfv1AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUxpSyt8MDQ/fhxt0stCzhxPJHJcAwHwYDVR0j
BBgwFoAUR8utGmSHFcXoZ/Gi7TVYaIYI7hkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NDk1NjUwNS1kNmIzLTQzZGMtOTA3MC1kNGRiZGI3Y2Y5NjMvMC80N0NCQUQxQTY0
ODcxNUM1RTg2N0YxQTJFRDM1NTg2ODg2MDhFRTE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4NjA4
RUUxOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0OTU2NTA1LWQ2YjMtNDNkYy05
MDcwLWQ0ZGJkYjdjZjk2My8wLzMyMzQzMDM2M2EzNDM2MzQzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzQzMDM0MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGRkAwDQYJKoZI
hvcNAQELBQADggEBAAg8PHYLkg5hRmaT8Fdwngw0yDsCeSPMp9sMOqBNRov4Mmri
eNhGWVz0ejjrPKFRjUHhOBfYjtAmf1ByM9Z49wVSqwK/NW9cOzCatVbdlUU1UsYX
8R8LRc40zhdqyWnsPmgoYDTmRUzyLLFCzY+WgTYkiLp7MBXtOT2GOBm7OM2Wg1ir
XzrIPboEEeTzXtyVdJvxr+pL5FVLooPl5Xb94zBxX9Jeze0y2I/YJkqpbw5DBuI/
SVQs2iIOiL5TxAX5Sp23eOC5bugYuvRRlHGjel4Ug5OfRdvsIxWZQkHWM5i7Hztk
3lXPtcdxLMOiid8ua8dTyuuBtF6hHiyl4hUrqSk=
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:00:53 2026 by rpki-client