Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a3a2f33322d3332203d3e203634333030.roa
File:                     323430363a343563303a3a2f33322d3332203d3e203634333030.roa (raw, json)
Hash identifier:          bUSsrxVSpx0QU4u2uNBA7y70+DlmrDl9YAKqMzKuk/Y=
Subject key identifier:   9C:87:B7:1A:B3:32:FD:4E:ED:E2:44:45:2F:4A:16:F3:97:83:D2:BF
Certificate issuer:       /CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
Certificate serial:       349B5B180E9A6BF472939EF6B4B260CDA9180DE0
Authority key identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a3a2f33322d3332203d3e203634333030.roa
Signing time:             Thu 12 Jun 2025 19:00:01 +0000
ROA not before:           Thu 12 Jun 2025 18:55:01 +0000
ROA not after:            Thu 11 Jun 2026 19:00:01 +0000
asID:                     64300
IP address blocks:        2406:45c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl
                          rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 08:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9b:5b:18:0e:9a:6b:f4:72:93:9e:f6:b4:b2:60:cd:a9:18:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
        Validity
            Not Before: Jun 12 18:55:01 2025 GMT
            Not After : Jun 11 19:00:01 2026 GMT
        Subject: CN=9C87B71AB332FD4EEDE244452F4A16F39783D2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f0:5d:01:f1:7f:20:49:ec:a2:84:3c:d9:cb:
                    cf:3d:f9:9e:0a:f6:b8:57:27:78:b2:56:d2:d5:1e:
                    57:0b:d6:f7:03:9b:97:82:6b:d1:07:82:50:ad:f5:
                    52:ea:07:ea:b3:a1:37:32:75:11:72:af:16:dd:2d:
                    aa:8d:7b:f2:77:93:28:a3:8f:61:0b:0e:e8:a8:8e:
                    c8:5b:e4:c2:3b:4d:ff:78:49:1d:da:3e:b7:e2:8e:
                    16:a1:c6:82:08:91:05:50:dd:73:45:59:dc:55:b7:
                    88:18:15:ba:98:52:6a:98:ac:49:40:1e:8e:cb:00:
                    6c:7e:7f:57:45:c5:4f:75:61:12:15:06:41:e8:39:
                    78:6b:87:0e:08:2c:bb:f2:75:e8:30:ef:87:76:2a:
                    0e:46:d5:16:d7:ad:92:9d:8d:c1:5a:d0:dc:82:1f:
                    46:32:6a:0f:b7:aa:d2:d0:5d:90:67:17:25:48:c9:
                    fd:7e:97:c9:ff:07:8a:60:05:1b:88:99:01:97:11:
                    1d:34:21:60:d0:34:1c:28:06:8d:18:cc:b7:78:c4:
                    f5:b2:e2:95:50:9c:1c:69:50:45:98:24:c5:2a:4a:
                    af:37:9d:ca:14:5e:cc:c3:69:9f:13:b9:48:6c:8b:
                    c0:97:36:a1:87:73:c3:c9:df:e0:ac:c7:2d:84:e8:
                    5a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:87:B7:1A:B3:32:FD:4E:ED:E2:44:45:2F:4A:16:F3:97:83:D2:BF
            X509v3 Authority Key Identifier:
                keyid:92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a3a2f33322d3332203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:45c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:4c:ee:f6:85:ae:ed:ec:6f:e0:b6:88:a6:f1:86:e2:41:3c:
         7f:24:9a:23:78:02:0c:0e:2a:37:0e:e5:7d:8d:e0:d5:c5:58:
         25:c7:33:cf:3e:f0:61:c5:47:f4:62:6f:ec:ea:42:08:9e:c2:
         20:62:55:fc:38:0f:43:df:65:92:ed:27:c4:52:7b:a9:39:70:
         4e:25:a2:bc:a7:75:75:ff:b1:00:65:36:cf:93:90:92:01:95:
         d5:3d:ea:63:31:4f:a3:4a:d9:83:b2:85:62:2d:13:d7:d9:87:
         80:90:0d:3b:d4:c0:dd:ed:44:cd:40:5b:1d:fd:42:0d:66:98:
         3d:a0:ff:0e:be:16:3a:ca:46:2a:e4:64:ba:26:6e:d3:02:e1:
         6f:4b:92:65:57:72:f7:79:49:bc:a0:64:f1:a9:00:35:43:81:
         6f:02:c6:c9:a6:40:ee:c5:bb:35:a9:9f:09:96:2c:8b:91:e3:
         fb:82:09:71:36:4e:57:c2:d1:c8:7c:a7:18:6d:6a:34:54:2d:
         47:3c:9f:99:6c:2c:0b:8d:3f:5c:46:2b:1d:7f:e0:a4:49:86:
         9a:ff:3c:16:21:b7:4b:a2:bb:98:be:61:e9:2a:4c:82:1b:c7:
         ac:77:d7:03:8f:b2:d6:87:c0:58:59:34:76:b5:a0:10:75:bc:
         cc:42:eb:98
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUNJtbGA6aa/Ryk572tLJgzakYDeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUzRTBE
RTE0RkQ4OTAeFw0yNTA2MTIxODU1MDFaFw0yNjA2MTExOTAwMDFaMDMxMTAvBgNV
BAMTKDlDODdCNzFBQjMzMkZENEVFREUyNDQ0NTJGNEExNkYzOTc4M0QyQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY8F0B8X8gSeyihDzZy889+Z4K
9rhXJ3iyVtLVHlcL1vcDm5eCa9EHglCt9VLqB+qzoTcydRFyrxbdLaqNe/J3kyij
j2ELDuiojshb5MI7Tf94SR3aPrfijhahxoIIkQVQ3XNFWdxVt4gYFbqYUmqYrElA
Ho7LAGx+f1dFxU91YRIVBkHoOXhrhw4ILLvydegw74d2Kg5G1RbXrZKdjcFa0NyC
H0Yyag+3qtLQXZBnFyVIyf1+l8n/B4pgBRuImQGXER00IWDQNBwoBo0YzLd4xPWy
4pVQnBxpUEWYJMUqSq83ncoUXszDaZ8TuUhsi8CXNqGHc8PJ3+Csxy2E6FqxAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUnIe3GrMy/U7t4kRFL0oW85eD0r8wHwYDVR0j
BBgwFoAUkubKaDr6GOoDGd7Bfd9T4N4U/YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NDMwNGI2NC0yODk5LTQ4MzAtOWMzYy0zNzU4NGEzMjdlMWUvMC85MkU2Q0E2ODNB
RkExOEVBMDMxOURFQzE3RERGNTNFMERFMTRGRDg5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUzRTBERTE0
RkQ4OS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0MzA0YjY0LTI4OTktNDgzMC05
YzNjLTM3NTg0YTMyN2UxZS8wLzMyMzQzMDM2M2EzNDM1NjMzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDM2MzQzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBkXAMA0GCSqGSIb3
DQEBCwUAA4IBAQBETO72ha7t7G/gtoim8YbiQTx/JJojeAIMDio3DuV9jeDVxVgl
xzPPPvBhxUf0Ym/s6kIInsIgYlX8OA9D32WS7SfEUnupOXBOJaK8p3V1/7EAZTbP
k5CSAZXVPepjMU+jStmDsoViLRPX2YeAkA071MDd7UTNQFsd/UINZpg9oP8OvhY6
ykYq5GS6Jm7TAuFvS5JlV3L3eUm8oGTxqQA1Q4FvAsbJpkDuxbs1qZ8JliyLkeP7
gglxNk5XwtHIfKcYbWo0VC1HPJ+ZbCwLjT9cRisdf+CkSYaa/zwWIbdLoruYvmHp
KkyCG8esd9cDj7LWh8BYWTR2taAQdbzMQuuY
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:59:27 2025 by rpki-client