Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/323430313a333334303a3a2f33322d3438203d3e203435373232.roa
File:                     323430313a333334303a3a2f33322d3438203d3e203435373232.roa (raw, json)
Hash identifier:          tUFNikuzZ5Dxu83zUyF9psB1ZAXrbnO+JVBeZVWaO4g=
Subject key identifier:   8C:0B:00:F9:E4:B4:33:55:EC:2E:8A:F4:39:3B:32:34:B4:BC:60:F5
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       644AA0BE0C497AD23BD687BD242DD2E34B4B418B
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/323430313a333334303a3a2f33322d3438203d3e203435373232.roa
Signing time:             Mon 02 Jun 2025 02:02:50 +0000
ROA not before:           Mon 02 Jun 2025 01:57:50 +0000
ROA not after:            Mon 01 Jun 2026 02:02:50 +0000
asID:                     45722
IP address blocks:        2401:3340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 09:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4a:a0:be:0c:49:7a:d2:3b:d6:87:bd:24:2d:d2:e3:4b:4b:41:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jun  2 01:57:50 2025 GMT
            Not After : Jun  1 02:02:50 2026 GMT
        Subject: CN=8C0B00F9E4B43355EC2E8AF4393B3234B4BC60F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9f:bb:87:29:be:75:ab:00:b5:75:40:db:0c:
                    37:bd:d4:8d:f0:78:f3:0a:53:4a:53:9d:ce:69:ff:
                    c1:b1:cd:7f:bb:77:f6:57:10:cd:3d:86:de:75:14:
                    0f:d0:03:c2:21:8d:5d:97:cb:04:c1:06:0a:1b:aa:
                    51:86:07:f5:25:0b:7a:5a:0e:8c:20:5a:9a:51:c9:
                    36:38:88:ba:06:ed:74:a4:c7:ad:86:83:7d:c9:01:
                    30:a4:62:53:de:ea:7a:76:f8:83:2b:cc:4d:7b:e5:
                    b5:65:af:6d:32:0b:60:a9:ef:46:0d:bf:72:d5:bb:
                    22:a1:94:f1:eb:c1:65:53:67:44:1e:e2:ba:88:2d:
                    a0:93:55:6a:84:1e:14:62:83:ad:bd:f4:29:ed:40:
                    71:09:aa:cc:cf:ab:8c:90:84:d4:fd:20:73:09:05:
                    e2:b4:df:09:dd:14:fb:44:ee:00:44:6c:4e:01:62:
                    7d:5e:97:22:34:86:5d:9e:29:14:79:d2:11:d0:04:
                    b2:4c:1d:33:2a:5f:0e:d3:59:93:0e:e5:ec:d3:67:
                    d7:14:49:dc:e5:e6:2a:2a:53:2c:75:df:8d:dd:9e:
                    af:96:7e:7b:0e:7d:87:ef:4d:bc:47:03:00:3f:33:
                    5a:e0:8b:9f:1c:49:b4:01:11:a3:b6:df:d4:42:bc:
                    eb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0B:00:F9:E4:B4:33:55:EC:2E:8A:F4:39:3B:32:34:B4:BC:60:F5
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/323430313a333334303a3a2f33322d3438203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3340::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:4c:18:c8:5f:0d:90:4d:65:a2:82:33:7b:3c:a6:d1:8f:fb:
         04:a7:9a:d7:61:51:75:57:52:ec:06:d7:92:6f:6c:4d:e0:10:
         4d:95:f8:15:a8:2e:0b:61:fc:02:3b:95:2a:b7:0f:5e:69:21:
         91:77:b1:ac:6b:e0:40:e7:fc:28:4a:76:44:b0:7c:6e:61:ae:
         13:bd:ea:fa:8b:59:4b:d0:21:f7:6f:f3:94:fb:61:8a:0a:2c:
         a9:70:4b:0d:d1:44:37:6c:78:ef:2f:44:2f:45:c5:f5:a1:b0:
         1b:5b:95:e9:31:33:07:2a:e6:fd:e0:56:51:20:5f:a4:f8:f8:
         c1:6b:3b:f0:1d:fc:f3:85:29:ad:59:6b:21:9e:a1:03:25:f2:
         7f:31:e4:9d:e4:7b:5e:df:8b:a0:dd:05:a8:d8:55:8a:0f:f7:
         f6:bb:07:a6:21:a5:43:b0:6e:65:f6:86:e3:51:4d:67:bb:a8:
         7f:d9:6f:48:6a:4b:5c:a1:51:7e:9d:fc:2f:aa:bc:60:0a:e0:
         20:3d:18:3a:18:e2:a9:a2:93:2a:f0:92:17:72:ac:95:5a:75:
         5f:16:0e:41:66:90:a6:6f:a2:54:e7:50:28:0f:9c:fc:6a:16:
         af:84:9c:c5:2c:8a:98:91:07:32:08:11:a5:e6:c4:5e:7c:4e:
         2a:f6:57:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:06:12 2025 by rpki-client