Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/323430323a333263303a3a2f33322d3332203d3e20313332363337.roa
File:                     323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (raw, json)
Hash identifier:          alekTqBBNWqAI5oX1dPM5eFA94/uemvvhURj4TPNUr4=
Subject key identifier:   AD:61:12:BF:59:CD:8F:A2:81:17:D0:4A:1D:34:35:B1:67:91:9B:13
Certificate issuer:       /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD
Certificate serial:       6E883B96554DCACE1DE092672FDFD303C3F1ECE1
Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/323430323a333263303a3a2f33322d3332203d3e20313332363337.roa
Signing time:             Thu 08 May 2025 03:00:49 +0000
ROA not before:           Thu 08 May 2025 02:55:49 +0000
ROA not after:            Thu 07 May 2026 03:00:49 +0000
asID:                     132637
IP address blocks:        2402:32c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl
                          rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 19:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:88:3b:96:55:4d:ca:ce:1d:e0:92:67:2f:df:d3:03:c3:f1:ec:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD
        Validity
            Not Before: May  8 02:55:49 2025 GMT
            Not After : May  7 03:00:49 2026 GMT
        Subject: CN=AD6112BF59CD8FA28117D04A1D3435B167919B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:63:c4:8e:73:cc:20:d6:5e:3c:5c:51:d2:
                    80:c4:6f:c5:bd:9d:20:e1:da:b8:40:55:f3:45:dc:
                    f6:ff:63:6c:a9:b3:22:db:fe:69:e4:72:78:ee:50:
                    ee:39:d0:87:5a:e7:36:ab:98:ae:93:03:0e:94:e4:
                    a3:b8:b7:5f:74:7d:1c:cd:2b:b4:43:c5:61:b2:f6:
                    25:30:9d:f0:3d:b1:c7:55:5f:35:d5:02:e7:6c:d2:
                    9d:21:3d:3d:8a:43:3f:02:b5:85:f6:d9:4a:3d:f9:
                    47:54:9f:90:50:61:ac:b8:03:00:88:8d:af:87:23:
                    5c:78:8f:a5:14:5e:c3:31:7d:51:bc:05:73:25:af:
                    3d:a8:b5:b4:9b:30:a1:64:03:42:fb:2e:f8:1f:ed:
                    86:81:58:24:2e:f4:c2:29:34:83:4b:d4:3f:8a:77:
                    97:6f:e7:e7:35:90:9e:ba:21:a4:fa:62:3e:a6:d1:
                    dd:01:b7:eb:e0:87:2b:97:10:16:35:23:5d:60:07:
                    9d:b2:b4:88:f4:c4:d3:b1:6f:d4:f7:dd:2d:c2:16:
                    e3:8a:a0:d1:2b:6f:f3:f7:3a:0a:97:a5:b9:f4:09:
                    24:b8:80:8c:83:70:45:3b:df:69:dd:b0:de:40:ef:
                    46:74:8e:36:86:82:e6:c2:ad:2c:b3:0c:d2:c5:c1:
                    1d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:61:12:BF:59:CD:8F:A2:81:17:D0:4A:1D:34:35:B1:67:91:9B:13
            X509v3 Authority Key Identifier:
                keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/323430323a333263303a3a2f33322d3332203d3e20313332363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:32c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:65:ef:6f:bf:ce:31:45:81:43:34:0f:c4:b4:08:5a:d7:72:
         fe:ad:b3:7b:c3:cf:35:c3:64:26:e1:08:56:24:1a:af:ca:01:
         73:a9:16:3c:95:eb:3d:6d:75:5e:78:2e:a0:f1:2e:0e:24:4c:
         f2:e5:aa:62:7e:b1:27:7c:ef:a3:3e:18:4a:db:50:13:e1:ae:
         f6:50:ee:61:4b:6a:9a:ee:b7:af:f0:89:4a:d9:56:3c:46:42:
         21:c8:d7:70:96:c1:8c:be:0b:65:2e:f5:94:13:74:57:d6:b1:
         6a:cc:b9:d3:f8:97:d8:3a:aa:3f:a7:cd:5e:3f:65:31:2f:17:
         94:61:1a:94:b0:ea:cc:1c:53:ff:0c:a1:2b:46:7f:2f:a1:af:
         52:1d:24:a9:4f:fa:ba:3f:32:d3:5a:df:bb:d0:06:2d:e7:ab:
         2f:e3:af:9a:a2:6f:7f:30:dd:61:51:27:3b:35:51:82:d9:61:
         88:4d:79:15:d6:44:d4:d2:4f:cb:60:55:0f:19:89:3c:96:0e:
         c8:71:10:37:63:d3:c5:90:4a:c2:ea:fc:1d:8d:11:10:fe:d9:
         69:c1:cf:f1:87:58:8e:1f:35:98:e1:88:5d:9c:39:d6:11:f2:
         a2:08:1b:b6:f8:ff:79:77:40:82:da:37:2f:59:78:99:02:50:
         90:e9:db:c9
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUbog7llVNys4d4JJnL9/TA8Px7OEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC
OEMyMURCRDAeFw0yNTA1MDgwMjU1NDlaFw0yNjA1MDcwMzAwNDlaMDMxMTAvBgNV
BAMTKEFENjExMkJGNTlDRDhGQTI4MTE3RDA0QTFEMzQzNUIxNjc5MTlCMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/i2PEjnPMINZePFxR0oDEb8W9
nSDh2rhAVfNF3Pb/Y2ypsyLb/mnkcnjuUO450Ida5zarmK6TAw6U5KO4t190fRzN
K7RDxWGy9iUwnfA9scdVXzXVAuds0p0hPT2KQz8CtYX22Uo9+UdUn5BQYay4AwCI
ja+HI1x4j6UUXsMxfVG8BXMlrz2otbSbMKFkA0L7Lvgf7YaBWCQu9MIpNINL1D+K
d5dv5+c1kJ66IaT6Yj6m0d0Bt+vghyuXEBY1I11gB52ytIj0xNOxb9T33S3CFuOK
oNErb/P3OgqXpbn0CSS4gIyDcEU732ndsN5A70Z0jjaGgubCrSyzDNLFwR2fAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUrWESv1nNj6KBF9BKHTQ1sWeRmxMwHwYDVR0j
BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1
NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy
MURCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkMDkyN2U2LThhMGEtNGZhNy04
OTY5LTlmYjlkNjk0Mzk3Yy8wLzMyMzQzMDMyM2EzMzMyNjMzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzMjM2MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCMsAwDQYJKoZI
hvcNAQELBQADggEBAIRl72+/zjFFgUM0D8S0CFrXcv6ts3vDzzXDZCbhCFYkGq/K
AXOpFjyV6z1tdV54LqDxLg4kTPLlqmJ+sSd876M+GErbUBPhrvZQ7mFLaprut6/w
iUrZVjxGQiHI13CWwYy+C2Uu9ZQTdFfWsWrMudP4l9g6qj+nzV4/ZTEvF5RhGpSw
6swcU/8MoStGfy+hr1IdJKlP+ro/MtNa37vQBi3nqy/jr5qib38w3WFRJzs1UYLZ
YYhNeRXWRNTST8tgVQ8ZiTyWDshxEDdj08WQSsLq/B2NERD+2WnBz/GHWI4fNZjh
iF2cOdYR8qIIG7b4/3l3QILaNy9ZeJkCUJDp28k=
-----END CERTIFICATE-----
Generated at Mon May 12 10:51:00 2025 by rpki-client