Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630323a3a2f34382d3438203d3e203538343935.roa
File:                     323430343a326638303a666630323a3a2f34382d3438203d3e203538343935.roa (raw, json)
Hash identifier:          xKzGCbJVIAvbgJ/YtZICGoqvaDWaJ6OOYNUGjLwkNyY=
Subject key identifier:   AC:E1:A8:B4:14:54:A7:AD:6B:E8:17:32:06:F3:84:11:30:31:15:22
Certificate issuer:       /CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6
Certificate serial:       5821F13CA609CF47B5B372B1095DE40B70AC1FBE
Authority key identifier: 6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630323a3a2f34382d3438203d3e203538343935.roa
Signing time:             Thu 30 Oct 2025 09:02:24 +0000
ROA not before:           Thu 30 Oct 2025 08:57:24 +0000
ROA not after:            Thu 29 Oct 2026 09:02:24 +0000
asID:                     58495
IP address blocks:        2404:2f80:ff02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl
                          rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 08:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:21:f1:3c:a6:09:cf:47:b5:b3:72:b1:09:5d:e4:0b:70:ac:1f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6
        Validity
            Not Before: Oct 30 08:57:24 2025 GMT
            Not After : Oct 29 09:02:24 2026 GMT
        Subject: CN=ACE1A8B41454A7AD6BE8173206F3841130311522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fd:4a:4f:45:73:0e:2b:e9:e4:43:af:86:3e:
                    6d:eb:dd:84:79:8c:67:11:76:6b:d5:59:0b:7f:45:
                    2c:05:58:0b:66:79:58:14:1a:cd:28:ff:53:80:db:
                    24:46:e7:bb:41:78:92:10:b0:73:db:10:13:3b:cc:
                    98:68:2b:bf:34:8e:14:ff:e5:e5:f2:71:18:9f:30:
                    82:d2:62:b3:48:33:da:69:18:27:f0:1a:a6:11:0f:
                    e8:78:63:1e:eb:0a:10:ad:fd:ee:cb:ee:7b:fc:f1:
                    20:d0:2a:43:49:1e:a9:71:1a:dd:b9:c9:68:1f:a3:
                    66:43:6d:b3:bb:c2:5a:2d:57:22:60:99:9e:0c:80:
                    04:45:96:8e:2e:6c:c4:9d:d6:72:ef:e2:09:d6:54:
                    73:07:7a:d5:3d:d3:4b:60:44:43:b7:1e:91:6d:ee:
                    22:04:cb:2d:24:cb:87:35:b2:44:9e:8e:d4:9b:58:
                    55:6b:3a:88:ee:dd:ea:c4:6a:f8:bc:7c:e7:f6:1d:
                    5c:1f:17:43:6a:b5:e3:46:b5:2c:e1:d6:76:b0:d2:
                    12:a7:b1:28:3b:be:18:75:64:e4:a4:50:c5:50:45:
                    49:4e:24:08:a6:c4:42:05:c7:8c:60:31:2f:5d:33:
                    9b:0c:9f:81:23:66:a3:d7:71:18:54:97:08:4b:f7:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E1:A8:B4:14:54:A7:AD:6B:E8:17:32:06:F3:84:11:30:31:15:22
            X509v3 Authority Key Identifier:
                keyid:6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630323a3a2f34382d3438203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:2f80:ff02::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:0e:16:ff:82:1f:cd:a0:5f:f3:44:b0:d5:69:85:1a:08:05:
         08:83:36:dc:ee:ed:cd:c1:d9:9c:fc:a1:a4:de:f8:ff:c7:8d:
         06:0a:25:5f:e9:e1:21:88:3d:35:54:72:15:83:f7:3b:d5:de:
         49:dd:75:6d:ac:c6:87:f1:8d:9a:da:d5:a3:ac:52:92:de:6d:
         3f:2d:f6:22:79:28:72:53:b6:db:3f:25:3d:5c:79:13:0f:3d:
         0f:78:56:8f:31:14:59:1b:fd:e2:70:0e:19:a6:8f:1e:51:f4:
         a0:4c:ad:38:71:b8:19:b0:84:93:a1:27:4f:a4:bc:0e:b2:ab:
         a7:a2:5d:a8:c6:0b:54:1b:e1:8b:10:6a:30:50:72:2b:14:b5:
         6d:42:9a:4c:49:3f:2a:7b:85:ec:34:d6:57:25:31:e3:ec:bb:
         7b:e2:c2:34:e9:c7:45:31:c8:8f:88:81:eb:48:a4:24:85:6a:
         32:9a:0f:41:4b:8f:48:50:7b:5a:b2:63:79:13:48:0e:ef:9a:
         3e:18:af:e8:2c:71:35:6b:80:e1:a9:b2:60:d5:f9:f2:63:88:
         ca:a6:d7:2f:5a:e1:ee:c9:8e:f5:f9:d1:94:45:ce:81:60:50:
         75:5d:fc:13:a7:4e:ef:e8:7a:53:e4:e1:4e:55:8f:97:d5:19:
         c0:85:c5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:40:09 2025 by rpki-client