Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33322d3438203d3e20313430343233.roa
File:                     323430363a323063303a3a2f33322d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          asOMw8IReWSdKeOQbCj1mbbh/oBy9IjQ8OQ4TmSDmuA=
Subject key identifier:   08:F0:D9:B4:9A:E4:9D:30:02:D4:E5:81:6E:83:49:1F:89:27:5F:5D
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       7D96E751AECDDCAEECFAF0E64BB8A25F06ECC693
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33322d3438203d3e20313430343233.roa
Signing time:             Sun 03 Aug 2025 08:00:00 +0000
ROA not before:           Sun 03 Aug 2025 07:55:00 +0000
ROA not after:            Sun 02 Aug 2026 08:00:00 +0000
asID:                     140423
IP address blocks:        2406:20c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
                          rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 10:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:96:e7:51:ae:cd:dc:ae:ec:fa:f0:e6:4b:b8:a2:5f:06:ec:c6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Aug  3 07:55:00 2025 GMT
            Not After : Aug  2 08:00:00 2026 GMT
        Subject: CN=08F0D9B49AE49D3002D4E5816E83491F89275F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:3c:3a:26:66:20:68:ed:fe:39:a5:cb:a8:
                    9d:3d:24:81:b8:fd:24:72:c9:58:81:18:aa:17:90:
                    94:ed:e9:7f:b0:ff:59:aa:77:8d:12:3c:93:f4:fc:
                    12:77:86:0f:ff:9d:54:c6:0a:1f:46:df:84:38:2a:
                    ff:b7:65:ae:3b:2e:41:5e:fa:c0:cf:10:cf:57:a6:
                    45:3e:ff:ac:2d:63:3c:6f:6c:51:00:1b:b8:80:e0:
                    74:e5:da:fc:01:a7:f7:16:e0:b2:df:b4:d8:de:12:
                    01:69:be:b4:3d:f9:88:96:3c:de:a9:f8:22:36:b4:
                    f3:8b:f8:31:ae:15:a2:e6:0f:10:0b:c1:2a:c2:1c:
                    a6:1d:4d:09:f0:59:a1:89:f6:26:72:7e:79:07:de:
                    df:fa:9e:56:2e:e6:7f:a7:d3:91:31:b1:e4:9e:2e:
                    11:75:c6:47:02:ed:f4:fc:37:7e:3e:f3:e0:bc:97:
                    fd:9a:cb:eb:65:dc:eb:76:a5:78:dc:aa:9e:da:9a:
                    41:e6:38:73:94:4e:da:a0:a0:cf:a8:b4:a4:a3:72:
                    20:ab:1b:22:1b:22:3b:55:d2:52:b2:46:c7:75:cc:
                    c9:ea:28:c6:0c:03:61:7a:e8:95:05:60:cb:4b:a7:
                    5b:1c:09:87:b1:4c:df:fe:65:02:45:1c:20:c1:c6:
                    b4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F0:D9:B4:9A:E4:9D:30:02:D4:E5:81:6E:83:49:1F:89:27:5F:5D
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33322d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:2c:0b:1f:d5:27:9b:25:42:a8:00:20:3c:a3:be:db:85:c2:
         ff:45:cf:2a:54:fa:6e:fb:d4:51:72:e0:84:93:a8:ed:93:90:
         cb:b3:f5:69:45:c3:69:b5:51:75:12:7c:af:e2:92:d2:5e:13:
         c3:7a:bf:c2:c3:76:06:aa:02:c9:c9:3e:02:8e:28:78:14:e7:
         b5:55:a9:df:6c:47:26:b0:7f:b9:63:c2:83:6a:dd:ae:e2:8b:
         60:be:f5:7c:91:20:dc:4f:26:2f:1c:f8:0a:c8:c7:b7:b0:53:
         34:86:c2:cb:00:c5:ff:78:af:1d:cf:51:59:45:35:29:4a:67:
         98:19:ac:48:c0:82:52:c4:74:7a:4a:84:00:4c:22:54:53:14:
         48:34:d6:e5:bf:d1:c5:1c:16:86:4d:77:82:9f:6a:e0:fd:f9:
         52:6b:3c:16:80:c1:38:6a:8e:18:38:19:ad:a4:07:11:fd:04:
         13:18:bd:7f:90:9b:f4:02:7f:a1:8f:2f:cd:f9:96:a3:61:94:
         05:58:c9:9f:b0:fc:9e:65:99:dd:58:fc:7a:a2:ff:96:46:0e:
         7b:de:89:f1:c4:6d:be:eb:2c:cc:d8:9b:da:a3:24:84:86:2b:
         f7:64:10:c2:3b:40:b3:d2:7e:4d:a5:dc:9f:53:22:ab:34:f7:
         e0:98:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:03 2025 by rpki-client