Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa
File:                     323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (raw, json)
Hash identifier:          vpFjRIttE1ynRbgvXovePteATzbLktRmbZK73Q8+SsU=
Subject key identifier:   11:97:3D:19:B6:FB:6A:E8:A2:6F:5F:79:4E:3F:E6:05:6A:FC:13:FA
Certificate issuer:       /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA
Certificate serial:       1B2F51A65A24B23946DF9DD13DC13A30ED1E6E9D
Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa
Signing time:             Wed 15 Oct 2025 06:00:01 +0000
ROA not before:           Wed 15 Oct 2025 05:55:01 +0000
ROA not after:            Wed 14 Oct 2026 06:00:01 +0000
asID:                     141642
IP address blocks:        2001:df1:a40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl
                          rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 00:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2f:51:a6:5a:24:b2:39:46:df:9d:d1:3d:c1:3a:30:ed:1e:6e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA
        Validity
            Not Before: Oct 15 05:55:01 2025 GMT
            Not After : Oct 14 06:00:01 2026 GMT
        Subject: CN=11973D19B6FB6AE8A26F5F794E3FE6056AFC13FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:bb:64:d9:d3:02:31:2b:01:58:c4:18:8d:
                    6b:90:04:dd:2b:b9:81:67:f0:f2:55:88:e3:92:b5:
                    5c:58:77:68:a6:08:89:c7:5a:42:09:0d:03:e6:df:
                    76:26:3e:3c:fb:69:fe:22:0b:f6:49:4c:ee:55:2e:
                    a2:1d:6c:d9:c3:61:ed:c2:ff:62:a1:ae:99:87:2c:
                    d2:69:fe:6c:b8:62:ff:5c:b0:b8:59:9d:a8:6b:50:
                    13:50:5b:01:9c:5e:68:56:98:0a:65:e6:f5:bf:ca:
                    c3:48:4f:0e:8a:bb:f7:b0:c0:1e:02:49:98:36:6d:
                    e8:61:22:3f:47:ca:18:a9:ea:76:fb:16:33:b4:3e:
                    e9:0c:15:46:01:ac:43:d6:4d:eb:8c:3b:8d:80:e5:
                    f9:b1:fd:98:6a:ba:c9:68:26:cb:3a:d9:27:3a:b4:
                    a6:4d:24:3f:02:c8:b3:14:8f:be:03:d4:89:22:9a:
                    04:08:97:59:80:55:52:66:bb:6a:14:9e:af:72:9d:
                    ac:99:f8:07:3e:4b:1a:e9:1d:05:a7:33:38:71:71:
                    3c:a6:f5:9e:45:0a:1e:4d:a6:50:96:8c:6c:6d:37:
                    0b:80:52:3d:55:93:a6:75:bd:50:14:bf:74:c6:4b:
                    fa:19:1b:97:b0:96:05:ab:09:5a:a4:a8:9b:f0:be:
                    56:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:97:3D:19:B6:FB:6A:E8:A2:6F:5F:79:4E:3F:E6:05:6A:FC:13:FA
            X509v3 Authority Key Identifier:
                keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:c1:63:86:08:3e:bc:8d:ac:eb:3e:7c:91:37:86:18:82:11:
         92:b8:05:65:4c:20:02:fb:e0:4e:ef:5c:59:5f:c4:3d:98:55:
         be:62:1b:0e:57:37:0c:b4:60:7a:8c:6c:d4:d0:8f:61:6f:31:
         a9:4b:19:ea:28:a8:47:1a:65:ff:65:a1:bf:a1:0e:05:e5:05:
         7e:11:07:b2:b8:f0:92:e1:35:99:9c:0c:0a:6f:42:9f:f3:a4:
         6f:a2:1d:71:ac:60:24:9d:a9:d8:58:11:96:48:f4:58:ee:7f:
         02:fd:4a:1f:3e:2d:ba:7c:01:d9:fd:66:84:79:e3:c5:25:38:
         80:8c:b1:00:47:69:ae:98:21:7c:08:a1:62:4e:dd:1a:3d:b6:
         61:3d:fb:14:41:18:a6:ea:0e:d2:5a:61:b4:41:70:93:4b:21:
         96:98:e6:93:51:3b:b5:64:19:3c:f3:c2:16:17:68:c0:a3:d6:
         04:f0:09:88:71:ca:dd:7c:cc:ab:8d:51:62:23:2f:16:3e:a7:
         c9:1a:2b:f2:bb:d8:5f:70:7d:a5:29:ed:56:43:15:f8:b5:5a:
         a3:05:ee:ca:94:75:5c:bd:81:56:7c:20:5f:ed:5e:e1:b2:db:
         4d:45:94:6b:95:fa:69:55:b9:68:ba:9b:09:6b:cf:10:bf:37:
         51:21:4f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:39:08 2025 by rpki-client