Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/323430323a313230303a3a2f33322d3438203d3e203234353233.roa
File:                     323430323a313230303a3a2f33322d3438203d3e203234353233.roa (raw, json)
Hash identifier:          RF31+hlg7a1h6KD8MpJ2iWEMUqzQM6jZSnJZLrwUpW8=
Subject key identifier:   C1:D8:CA:E4:8A:0C:93:ED:81:6F:F2:8A:44:3B:A4:5F:41:A9:40:8F
Certificate issuer:       /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial:       597240FAF4BE43780EA8E63C1258D41C1085678C
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/323430323a313230303a3a2f33322d3438203d3e203234353233.roa
Signing time:             Mon 02 Jun 2025 02:02:59 +0000
ROA not before:           Mon 02 Jun 2025 01:57:59 +0000
ROA not after:            Mon 01 Jun 2026 02:02:59 +0000
asID:                     24523
IP address blocks:        2402:1200::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
                          rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 05:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:72:40:fa:f4:be:43:78:0e:a8:e6:3c:12:58:d4:1c:10:85:67:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
        Validity
            Not Before: Jun  2 01:57:59 2025 GMT
            Not After : Jun  1 02:02:59 2026 GMT
        Subject: CN=C1D8CAE48A0C93ED816FF28A443BA45F41A9408F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:a9:f0:d2:63:d8:8b:5d:4a:53:5f:6f:01:
                    15:8f:8c:de:49:7b:08:a9:17:38:a5:d4:a1:98:15:
                    29:81:23:2c:8e:26:6c:22:f5:0f:a3:a3:eb:22:52:
                    13:16:d8:aa:58:05:d1:f8:ee:01:11:3a:74:27:ee:
                    74:62:8d:6e:5b:07:0d:05:1d:56:39:c0:9c:b0:ff:
                    87:3a:74:a7:07:a8:80:eb:1a:8a:4d:6b:36:6b:68:
                    fb:80:09:68:e7:20:c4:e4:59:5d:2a:36:49:e3:95:
                    6d:f2:f6:24:4d:53:63:a1:d0:4b:84:40:5f:4f:b7:
                    cd:d2:95:8c:22:7d:70:d0:de:9a:e0:8b:cc:ac:d4:
                    49:42:c5:81:9c:b2:d7:69:c9:64:7b:ee:5d:f6:48:
                    34:be:9a:62:00:a7:cf:c9:cb:cd:c9:3b:14:5b:80:
                    ac:9c:7c:1e:0e:8a:f9:7a:d5:91:db:82:e3:6c:12:
                    38:6c:da:77:0b:da:56:cc:c4:7d:2d:05:f9:83:c9:
                    9b:d3:3d:4c:3b:56:88:47:07:3e:50:b4:29:87:22:
                    c5:da:7d:1e:e5:58:c7:d3:c7:58:fd:43:07:15:ad:
                    e9:5f:1c:7a:a9:ff:18:8a:4e:58:a8:4e:c6:6e:92:
                    9e:e3:2e:1f:10:26:00:a4:e1:6a:a1:63:1c:00:64:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D8:CA:E4:8A:0C:93:ED:81:6F:F2:8A:44:3B:A4:5F:41:A9:40:8F
            X509v3 Authority Key Identifier:
                keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/323430323a313230303a3a2f33322d3438203d3e203234353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1200::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:0e:e6:77:89:6b:12:2c:09:a0:90:27:3b:e9:f6:3a:d4:79:
         68:a1:a3:38:e5:df:07:28:19:b8:7e:50:13:dc:a7:3b:f0:fb:
         2e:45:92:63:8a:08:c0:a7:15:73:b9:57:56:9f:0d:4e:49:58:
         94:57:44:b5:c1:54:c5:a5:8e:b2:99:9b:df:cb:8c:77:90:77:
         90:be:51:31:05:60:a8:06:0f:a0:5b:ba:82:64:bc:c4:58:66:
         7f:52:5f:02:56:24:65:03:be:55:2f:a2:b3:74:2e:2e:b4:b4:
         e3:f5:05:5f:ec:e1:28:bc:88:b6:21:4c:dd:f9:eb:0a:4d:7d:
         c5:45:72:45:bf:4b:28:56:2a:ed:c7:17:1f:da:24:ef:dc:ad:
         08:03:0c:7d:fa:d6:21:f5:23:0f:21:e5:2a:d9:f6:94:76:c3:
         bf:1f:bf:48:57:9f:0d:8b:11:87:6c:00:b2:3d:29:8b:ab:02:
         a7:72:e2:e0:38:14:a9:c6:0a:31:74:86:bf:b6:c0:cd:1f:5d:
         0c:c9:76:93:0e:79:c0:da:79:82:52:95:a5:3f:00:83:91:53:
         4c:a3:f4:5c:07:9f:34:ed:d5:86:02:0c:e0:a4:3a:57:82:53:
         a4:e8:c7:90:f8:b6:9c:f1:8b:9a:29:d2:d8:8e:33:3c:03:d8:
         71:a9:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:59:34 2025 by rpki-client