Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa
File:                     323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (raw, json)
Hash identifier:          vAIjmbx3dVuW8GpN3/fZq5ol916CeS6StRg+6uf/1t0=
Subject key identifier:   15:53:42:8B:CA:06:61:FD:EA:C8:6D:43:A9:70:71:3E:0D:12:63:75
Certificate issuer:       /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Certificate serial:       0B72A70B56EEABB786378BBC562856A19333979C
Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa
Signing time:             Tue 10 Jun 2025 10:00:00 +0000
ROA not before:           Tue 10 Jun 2025 09:55:00 +0000
ROA not after:            Tue 09 Jun 2026 10:00:00 +0000
asID:                     141621
IP address blocks:        2001:df0:f540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
                          rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 15:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:72:a7:0b:56:ee:ab:b7:86:37:8b:bc:56:28:56:a1:93:33:97:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
        Validity
            Not Before: Jun 10 09:55:00 2025 GMT
            Not After : Jun  9 10:00:00 2026 GMT
        Subject: CN=1553428BCA0661FDEAC86D43A970713E0D126375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:65:4d:f5:df:36:b3:37:37:71:ba:cf:f6:
                    a5:73:ad:43:6b:89:cb:e9:76:20:ee:56:4c:61:4d:
                    34:6c:06:3c:9d:00:a7:fe:5c:55:3b:50:d4:e1:1a:
                    13:d5:b6:06:9a:ca:c8:d8:2b:bf:7a:33:df:00:fd:
                    a4:57:d7:b1:87:96:f8:e4:8e:90:a1:3c:a3:ee:f6:
                    dc:d2:a6:0e:b5:69:9a:7b:c4:14:9b:91:3c:0d:fe:
                    b2:bd:1f:e2:06:bb:c2:7f:e3:df:d4:65:28:4d:dd:
                    27:e6:48:64:68:06:b0:e0:ad:75:ed:84:ee:16:ab:
                    f0:4a:65:5f:8d:e3:e9:9e:48:01:9d:0d:7d:91:5a:
                    49:a6:c4:2b:e3:57:13:ca:b8:25:69:be:5f:8d:f7:
                    35:a4:8c:15:7b:cc:98:b8:ec:90:8c:74:75:4f:52:
                    f1:9d:d8:c8:e7:14:ec:78:d4:53:d1:2f:f3:37:1e:
                    c6:79:62:7c:ac:0f:55:32:e0:2e:f6:35:4f:25:71:
                    f3:ae:80:4d:ff:cc:cb:f2:8e:a9:1d:b8:82:2c:e5:
                    a0:dc:67:70:e6:5e:23:7a:01:94:6c:29:52:1f:55:
                    b9:fe:7b:47:30:ca:88:a4:c1:36:2c:2b:7f:04:36:
                    8a:67:38:1d:c5:48:87:2d:b5:b6:2c:4e:7e:d8:14:
                    d7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:53:42:8B:CA:06:61:FD:EA:C8:6D:43:A9:70:71:3E:0D:12:63:75
            X509v3 Authority Key Identifier:
                keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:f540::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:a8:82:5b:a1:f0:a8:06:17:21:03:41:d9:1a:05:80:c5:f0:
         f8:70:2e:91:76:72:85:3d:97:c9:62:e1:96:93:93:40:3a:0f:
         ce:dc:97:b7:2b:26:09:84:0f:a2:dd:8a:63:ef:05:30:6b:92:
         8f:9b:33:79:cd:9e:ef:d8:87:93:be:30:93:46:de:68:ce:74:
         a7:b6:22:ef:c4:ce:56:77:92:c6:5e:88:9e:60:80:4a:03:ca:
         b8:b4:4f:0c:14:71:5d:da:18:a7:bb:8f:f9:22:4d:aa:5e:b2:
         10:02:b9:b2:fe:8e:44:e7:d3:bc:cb:62:0f:99:a4:17:db:3b:
         02:b5:84:cc:7e:6e:5d:bd:ec:33:0f:b0:b6:2c:1e:60:05:a6:
         eb:67:48:5d:87:ee:02:8c:db:2c:6b:0a:8e:67:e0:eb:86:ca:
         98:7d:8d:fa:34:de:97:b1:38:8b:1b:b8:48:6a:7f:db:aa:58:
         9e:c1:ef:b4:e1:27:46:b5:5a:06:ad:b8:bc:50:63:dc:b2:ff:
         b5:6b:cb:d8:80:11:11:ae:5b:67:78:4c:2d:a4:77:72:e8:89:
         a4:3e:0c:09:f2:60:c7:34:b6:96:d3:60:92:e4:90:66:58:30:
         21:23:b1:64:2d:bf:71:da:2d:20:9c:3b:74:fd:4b:97:ee:2e:
         46:3c:e9:68
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUC3KnC1buq7eGN4u8VihWoZMzl5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz
OTE3OTJFQTAeFw0yNTA2MTAwOTU1MDBaFw0yNjA2MDkxMDAwMDBaMDMxMTAvBgNV
BAMTKDE1NTM0MjhCQ0EwNjYxRkRFQUM4NkQ0M0E5NzA3MTNFMEQxMjYzNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdvWVN9d82szc3cbrP9qVzrUNr
icvpdiDuVkxhTTRsBjydAKf+XFU7UNThGhPVtgaaysjYK796M98A/aRX17GHlvjk
jpChPKPu9tzSpg61aZp7xBSbkTwN/rK9H+IGu8J/49/UZShN3SfmSGRoBrDgrXXt
hO4Wq/BKZV+N4+meSAGdDX2RWkmmxCvjVxPKuCVpvl+N9zWkjBV7zJi47JCMdHVP
UvGd2MjnFOx41FPRL/M3HsZ5YnysD1Uy4C72NU8lcfOugE3/zMvyjqkduIIs5aDc
Z3DmXiN6AZRsKVIfVbn+e0cwyoikwTYsK38ENopnOB3FSIcttbYsTn7YFNc9AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUFVNCi8oGYf3qyG1DqXBxPg0SY3UwHwYDVR0j
BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0
N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3
OTJFQS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1MTdmZTk4LThmNTgtNDk3Zi1i
ZTU3LTg2NjVhN2EwNGJiMC8wLzMyMzAzMDMxM2E2NDY2MzAzYTY2MzUzNDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzYzMjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8PVAMA0GCSqGSIb3DQEBCwUAA4IBAQCtqIJbofCoBhchA0HZGgWAxfD4cC6RdnKF
PZfJYuGWk5NAOg/O3Je3KyYJhA+i3Ypj7wUwa5KPmzN5zZ7v2IeTvjCTRt5oznSn
tiLvxM5Wd5LGXoieYIBKA8q4tE8MFHFd2hinu4/5Ik2qXrIQArmy/o5E59O8y2IP
maQX2zsCtYTMfm5dvewzD7C2LB5gBabrZ0hdh+4CjNssawqOZ+DrhsqYfY36NN6X
sTiLG7hIan/bqliewe+04SdGtVoGrbi8UGPcsv+1a8vYgBERrltneEwtpHdy6Imk
PgwJ8mDHNLaW02CS5JBmWDAhI7FkLb9x2i0gnDt0/UuX7i5GPOlo
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:52:40 2025 by rpki-client