Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/323430323a633330303a3a2f33322d3438203d3e203535363533.roa
File:                     323430323a633330303a3a2f33322d3438203d3e203535363533.roa (raw, json)
Hash identifier:          bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=
Subject key identifier:   50:E9:56:67:AA:49:57:27:6E:C5:23:67:44:E9:75:B7:7D:21:D4:E3
Certificate issuer:       /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial:       53980BECF116B58846C1B72DB3B77BFBFA29BACF
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/323430323a633330303a3a2f33322d3438203d3e203535363533.roa
Signing time:             Mon 02 Jun 2025 02:04:06 +0000
ROA not before:           Mon 02 Jun 2025 01:59:06 +0000
ROA not after:            Mon 01 Jun 2026 02:04:06 +0000
asID:                     55653
IP address blocks:        2402:c300::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
                          rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 08:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:98:0b:ec:f1:16:b5:88:46:c1:b7:2d:b3:b7:7b:fb:fa:29:ba:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
        Validity
            Not Before: Jun  2 01:59:06 2025 GMT
            Not After : Jun  1 02:04:06 2026 GMT
        Subject: CN=50E95667AA4957276EC5236744E975B77D21D4E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:36:31:97:f7:d5:4b:f3:e4:82:16:54:ae:
                    7f:6e:ca:e3:07:9b:9e:e7:20:f5:80:64:36:14:a1:
                    16:ec:51:fa:7a:e1:80:1c:6e:9a:37:2b:c2:e9:0e:
                    ed:b6:09:41:4a:ea:0e:73:0b:dd:15:96:0b:54:75:
                    97:05:78:64:29:25:c3:28:ce:cf:97:5a:18:50:56:
                    73:4d:ee:06:e3:68:41:85:e5:60:e0:31:20:a5:d0:
                    f9:c0:1b:4a:d5:db:f5:54:70:e0:af:ce:a1:49:97:
                    6d:46:d4:85:db:2d:bb:50:c4:36:88:dd:a9:73:07:
                    fd:b3:5a:4f:c5:9d:fd:05:1e:9c:df:37:1f:3c:3b:
                    8b:55:9e:8a:a1:59:34:1c:25:a2:ef:6a:71:26:f2:
                    51:c6:2e:43:4c:27:8f:19:5f:57:25:56:b7:0f:f4:
                    00:e7:b0:46:9b:e6:6c:22:0d:d9:96:cb:9d:a1:1a:
                    91:d8:fd:0d:1e:62:f8:de:45:74:5d:8a:41:34:62:
                    21:2a:9e:10:ea:ff:8d:eb:7e:c2:62:81:df:30:df:
                    cb:91:67:91:1b:c3:6d:a5:43:2c:3b:0f:7e:87:e2:
                    4d:8f:69:9a:90:da:20:dd:1d:c1:81:6f:45:35:08:
                    f0:5c:e7:38:f9:60:d0:f4:1e:da:89:d0:7a:2c:4c:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E9:56:67:AA:49:57:27:6E:C5:23:67:44:E9:75:B7:7D:21:D4:E3
            X509v3 Authority Key Identifier:
                keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/323430323a633330303a3a2f33322d3438203d3e203535363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c300::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:f9:11:ff:38:93:e2:ea:ec:7f:c9:0e:cc:63:32:99:09:df:
         72:9d:33:50:61:c6:40:04:bb:2e:d7:a0:f1:71:cf:67:d4:ec:
         54:ca:db:40:db:e6:c8:de:53:f5:9f:5b:47:d6:8d:db:8d:d9:
         75:1b:6c:08:79:d1:22:4e:6b:6f:07:82:35:38:ea:08:6e:43:
         5b:cd:53:b8:36:c1:1a:e3:72:fd:10:37:76:c3:79:8e:0d:66:
         00:6e:b3:89:c2:fa:83:bb:8e:ac:2c:2d:ac:aa:ef:99:7d:40:
         d1:e9:a7:51:b9:d4:e6:ea:ec:78:66:7c:5d:99:64:e1:c6:eb:
         1b:b4:e5:92:d9:39:46:b5:ee:57:2d:74:f9:f0:7f:da:dd:fc:
         14:7a:8b:b3:64:4e:be:09:ca:dd:f7:30:a6:57:d2:86:ba:06:
         98:2f:bb:d0:3f:78:48:ab:db:f7:68:96:cc:2b:cf:d2:e9:28:
         b7:d8:31:77:a1:b3:2d:b5:99:a5:4b:17:88:4f:5c:8f:59:1e:
         09:35:e0:bd:ff:54:14:3c:5d:b7:67:be:ec:03:0b:d2:db:33:
         2e:45:53:63:55:2f:d2:93:00:81:5a:22:ba:1c:6c:0f:bc:0c:
         81:de:f1:e9:aa:24:be:0e:eb:6e:e9:5b:5a:22:16:a4:0d:d4:
         55:f0:43:6b
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUU5gL7PEWtYhGwbcts7d7+/opus8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1
MzU3RTZBMzAeFw0yNTA2MDIwMTU5MDZaFw0yNjA2MDEwMjA0MDZaMDMxMTAvBgNV
BAMTKDUwRTk1NjY3QUE0OTU3Mjc2RUM1MjM2NzQ0RTk3NUI3N0QyMUQ0RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5DYxl/fVS/PkghZUrn9uyuMH
m57nIPWAZDYUoRbsUfp64YAcbpo3K8LpDu22CUFK6g5zC90VlgtUdZcFeGQpJcMo
zs+XWhhQVnNN7gbjaEGF5WDgMSCl0PnAG0rV2/VUcOCvzqFJl21G1IXbLbtQxDaI
3alzB/2zWk/Fnf0FHpzfNx88O4tVnoqhWTQcJaLvanEm8lHGLkNMJ48ZX1clVrcP
9ADnsEab5mwiDdmWy52hGpHY/Q0eYvjeRXRdikE0YiEqnhDq/43rfsJigd8w38uR
Z5Ebw22lQyw7D36H4k2PaZqQ2iDdHcGBb0U1CPBc5zj5YND0HtqJ0HosTJRDAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUUOlWZ6pJVyduxSNnROl1t30h1OMwHwYDVR0j
BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2
ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3
RTZBMy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5NzQ2NWUzLTc4YTAtNDk2NS1h
ZTE0LWU0Y2I0ZDBmYzE4NS8wLzMyMzQzMDMyM2E2MzMzMzAzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDM1MzUzNjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAsMAMA0GCSqGSIb3
DQEBCwUAA4IBAQAk+RH/OJPi6ux/yQ7MYzKZCd9ynTNQYcZABLsu16Dxcc9n1OxU
yttA2+bI3lP1n1tH1o3bjdl1G2wIedEiTmtvB4I1OOoIbkNbzVO4NsEa43L9EDd2
w3mODWYAbrOJwvqDu46sLC2squ+ZfUDR6adRudTm6ux4ZnxdmWThxusbtOWS2TlG
te5XLXT58H/a3fwUeouzZE6+Ccrd9zCmV9KGugaYL7vQP3hIq9v3aJbMK8/S6Si3
2DF3obMttZmlSxeIT1yPWR4JNeC9/1QUPF23Z77sAwvS2zMuRVNjVS/SkwCBWiK6
HGwPvAyB3vHpqiS+Dutu6VtaIhakDdRV8ENr
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:34:04 2025 by rpki-client