Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa
File:                     323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa (raw, json)
Hash identifier:          gqoWHSegtPySb+QFxj0hQpETk33LY7+CpBWUUYn1fss=
Subject key identifier:   FB:9F:C6:F5:DA:D7:ED:23:5A:21:00:6B:FB:9E:1D:79:28:AA:63:E8
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       60BCF792950FA5F693F96D50A9577221586677C6
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa
Signing time:             Wed 18 Mar 2026 05:00:01 +0000
ROA not before:           Wed 18 Mar 2026 04:55:01 +0000
ROA not after:            Wed 17 Mar 2027 05:00:01 +0000
asID:                     38515
IP address blocks:        2402:600:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 06:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bc:f7:92:95:0f:a5:f6:93:f9:6d:50:a9:57:72:21:58:66:77:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Mar 18 04:55:01 2026 GMT
            Not After : Mar 17 05:00:01 2027 GMT
        Subject: CN=FB9FC6F5DAD7ED235A21006BFB9E1D7928AA63E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:04:35:84:23:35:a0:4d:5a:b9:88:59:1a:
                    4f:4d:32:8b:76:b9:b2:1f:e8:a4:00:1b:48:10:aa:
                    25:69:32:f2:ec:ca:a3:a5:cb:64:37:02:d3:4e:c3:
                    17:e0:46:b5:29:c7:3a:9a:c6:82:9f:2a:27:16:7b:
                    78:69:4d:dc:be:50:0f:a2:a0:22:eb:f9:d5:42:45:
                    d8:65:58:9c:83:48:99:36:eb:77:44:21:96:2a:be:
                    54:02:d4:a9:68:71:d2:a2:ac:cc:38:5b:11:95:69:
                    ce:03:9a:b2:23:2f:2d:53:ee:65:19:2a:cc:d8:e5:
                    c0:52:6a:2d:d6:20:9b:12:14:f2:3e:cf:77:5c:fe:
                    f6:2d:e6:a2:af:e5:19:71:15:39:53:d9:50:1f:c3:
                    b4:77:d8:5b:b2:83:61:0b:2a:a0:5f:8f:89:b3:8a:
                    73:cd:e4:f1:08:bb:e0:44:c5:d4:3c:8e:51:10:b2:
                    16:dd:c6:98:55:7a:62:2e:0f:08:17:8a:2a:0e:40:
                    66:bb:48:38:98:f7:f9:ff:a4:fd:2a:36:ea:a6:4c:
                    ca:cd:93:e5:f4:5f:9d:23:c0:dc:a7:84:6c:e1:2a:
                    d0:6e:f2:1d:89:82:10:12:d3:e8:0c:92:03:44:01:
                    3b:b6:d5:8a:26:d5:d7:ad:e8:81:5a:17:0d:90:9f:
                    af:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9F:C6:F5:DA:D7:ED:23:5A:21:00:6B:FB:9E:1D:79:28:AA:63:E8
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:600:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:6a:b7:e7:51:f8:a6:0c:20:7d:8b:77:66:f9:3e:a2:d8:38:
         29:b2:e3:61:87:28:8e:58:e9:37:07:9d:35:83:52:c8:2a:dd:
         9b:c1:bb:50:c6:50:34:81:69:fe:64:45:2c:5a:49:e5:2c:ed:
         22:63:03:1e:8c:5b:be:62:88:d8:04:43:1d:25:ef:1e:c2:94:
         43:25:2a:a2:4d:43:21:bb:94:06:97:1d:a0:9b:47:c1:c3:7e:
         90:8e:ab:c0:c7:65:48:14:48:c6:16:c4:67:b4:0c:67:67:3a:
         4f:e3:75:b8:a8:1b:9d:73:0b:fe:36:27:16:97:77:a3:a2:99:
         2b:77:16:0c:29:88:08:66:39:f2:75:69:e6:a0:48:cb:3f:c0:
         65:ed:35:3e:02:de:db:5d:3a:b7:73:15:11:b4:35:c8:fd:50:
         4a:fe:e4:44:fe:39:63:f4:2b:da:4e:6d:9f:db:5f:7b:8a:95:
         fe:1e:62:71:9c:38:4d:a5:09:ee:44:2c:3c:b6:7e:2e:42:5a:
         10:2f:2e:c3:0f:a0:86:59:37:09:c4:6d:a4:ed:cf:ee:41:7e:
         d4:b7:85:e4:f1:3d:2b:a2:c7:7b:68:da:3b:e5:cc:a1:81:f0:
         23:39:c0:0b:09:a1:70:29:f0:36:ba:da:86:19:11:63:52:36:
         a6:02:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:00:09 2026 by rpki-client