Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/323430333a653434303a3a2f33322d3332203d3e20313338303936.roa
File:                     323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (raw, json)
Hash identifier:          NFm2BuROSXEUux226kkrY22nGhWfXy6Nzi8qa9TvywQ=
Subject key identifier:   05:D7:19:94:30:1D:6C:AB:06:F0:66:F5:BC:AD:5A:95:19:FC:5A:15
Certificate issuer:       /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86
Certificate serial:       05EC507D3E0E37B47C14F204B7330FE4CD23002F
Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/323430333a653434303a3a2f33322d3332203d3e20313338303936.roa
Signing time:             Mon 19 May 2025 05:00:01 +0000
ROA not before:           Mon 19 May 2025 04:55:01 +0000
ROA not after:            Mon 18 May 2026 05:00:01 +0000
asID:                     138096
IP address blocks:        2403:e440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl
                          rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 08:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ec:50:7d:3e:0e:37:b4:7c:14:f2:04:b7:33:0f:e4:cd:23:00:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86
        Validity
            Not Before: May 19 04:55:01 2025 GMT
            Not After : May 18 05:00:01 2026 GMT
        Subject: CN=05D71994301D6CAB06F066F5BCAD5A9519FC5A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:72:e7:30:23:65:c1:08:cf:4c:9a:8f:5a:
                    5d:74:3b:cb:53:5d:8b:a9:eb:0e:b7:f6:db:44:d8:
                    d0:24:38:10:2c:51:f2:1b:15:f6:a0:88:4f:f7:c6:
                    63:a5:dc:70:47:8f:65:b3:28:52:66:0a:a9:e3:3b:
                    06:bc:68:ac:7b:c3:72:3c:98:2f:08:cd:09:12:cc:
                    aa:e3:fc:48:8c:c0:ec:86:b5:88:10:00:27:47:68:
                    c1:d8:a4:3c:97:41:9f:e6:79:b1:da:fb:1b:ed:b0:
                    02:a3:eb:74:17:ad:85:87:67:7c:15:79:f0:53:8c:
                    07:3d:d3:5d:23:b7:4c:49:f5:a7:b9:5b:a0:6e:91:
                    85:02:d4:4e:12:48:fa:62:4f:61:f0:64:56:39:02:
                    19:eb:91:6e:ea:42:f0:46:9c:c4:84:11:13:dd:10:
                    f8:4d:4c:f3:d2:e8:23:59:c0:ee:39:7b:7c:ab:2d:
                    c6:e2:58:3a:8e:f3:84:f8:9f:c0:df:e8:03:a7:ce:
                    0d:01:0e:05:1d:bf:f6:30:b3:f7:2e:b1:cc:f5:aa:
                    a9:79:04:b1:41:04:40:98:0f:06:46:af:ca:41:77:
                    3e:57:2a:cf:36:f9:88:b2:03:84:0f:78:79:ac:75:
                    4e:ed:3d:60:da:60:60:e8:b5:a2:08:d8:e7:d3:9a:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D7:19:94:30:1D:6C:AB:06:F0:66:F5:BC:AD:5A:95:19:FC:5A:15
            X509v3 Authority Key Identifier:
                keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/323430333a653434303a3a2f33322d3332203d3e20313338303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:e440::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:80:c0:37:0d:74:c8:03:ae:d0:bc:d2:0c:78:c8:0d:ab:59:
         20:54:ce:75:c1:1b:6c:d6:d6:e1:56:76:89:02:2b:97:5f:6e:
         ed:cc:5e:78:d0:a4:05:10:e0:33:cc:e9:22:db:2d:32:db:8e:
         5e:de:32:d0:36:4a:20:5c:06:8e:7f:e3:a0:f0:c9:71:3f:35:
         d0:a9:73:7f:ec:67:a6:10:ca:d0:f6:e0:a4:3e:33:9c:ab:2d:
         28:1e:e5:4f:57:65:b7:e6:40:22:1d:9b:f9:8e:5a:c1:62:cd:
         22:b2:95:d8:62:9b:45:0f:79:d5:2d:14:55:df:85:04:b4:c9:
         18:1c:9e:d3:2d:ff:ee:eb:fe:34:8e:45:31:d1:61:8f:09:7d:
         b2:f2:5f:ee:2a:e7:fa:f7:b3:31:ad:95:31:c4:5f:d9:99:42:
         66:a7:43:a0:c4:b8:ec:b1:59:65:65:e7:7b:df:47:d9:4f:59:
         52:f6:2e:42:06:44:56:55:d3:7f:e1:47:e4:fd:7e:86:74:5e:
         66:65:63:9a:af:74:72:2b:50:2e:2a:36:ee:c0:b2:9a:d5:30:
         41:4e:c6:83:40:93:df:5a:94:aa:6a:1d:b3:95:81:0d:7b:db:
         68:4e:0f:8e:cb:00:a2:6a:a2:5b:16:38:36:62:8f:a6:2a:55:
         55:06:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:55:32 2025 by rpki-client