Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa
File:                     323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier:          2uoAvqN/FM14L5lYzO1GVcFvR0u9AsKQ/EUf68eVpD0=
Subject key identifier:   E6:7A:EB:C3:A1:BF:F0:55:6F:BB:02:1D:D4:ED:4F:81:98:39:AC:55
Certificate issuer:       /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Certificate serial:       2E9733AD2F6440C9C432EAB91E8F45BECCA048DB
Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa
Signing time:             Mon 29 Sep 2025 05:02:57 +0000
ROA not before:           Mon 29 Sep 2025 04:57:57 +0000
ROA not after:            Mon 28 Sep 2026 05:02:57 +0000
asID:                     141968
IP address blocks:        2407:6ac0:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl
                          rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 17:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:97:33:ad:2f:64:40:c9:c4:32:ea:b9:1e:8f:45:be:cc:a0:48:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
        Validity
            Not Before: Sep 29 04:57:57 2025 GMT
            Not After : Sep 28 05:02:57 2026 GMT
        Subject: CN=E67AEBC3A1BFF0556FBB021DD4ED4F819839AC55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:58:53:3e:bc:b6:9a:79:79:8b:28:7c:dc:
                    3c:a8:ed:8c:f1:41:61:38:66:fb:04:55:38:79:f9:
                    2a:b3:06:97:56:72:66:3e:1f:af:33:cb:3e:85:4d:
                    3f:b3:8b:70:45:e2:80:4a:24:d0:fa:03:71:eb:83:
                    7b:01:5b:86:3d:6b:60:43:c4:d0:45:63:4f:a5:e6:
                    34:81:2a:e1:ae:b5:3e:c1:cc:30:0d:3e:11:c6:5a:
                    26:3b:13:aa:1d:d2:bd:9f:54:84:7b:21:d6:ec:08:
                    cb:25:fe:80:0f:93:7b:1b:ac:cc:f4:e5:ba:59:cc:
                    d2:f0:47:ee:bf:5e:77:2d:a1:9d:11:3f:c9:eb:b3:
                    4e:b0:ae:6a:f2:f7:a5:99:ab:13:80:39:c6:02:9e:
                    73:c0:c0:77:34:2a:ae:be:c6:6a:6d:c6:26:d5:99:
                    15:47:09:f3:35:44:c9:13:2f:bd:63:ec:b8:0c:64:
                    6a:2c:27:bb:42:ce:ea:9f:14:d2:3d:05:4f:0d:e3:
                    43:ff:af:a0:2c:a3:51:7f:8b:2d:af:04:82:0d:3c:
                    23:d0:5e:ee:2c:34:8d:f0:dc:7f:91:0f:18:bd:a4:
                    9d:c2:62:66:36:ad:7e:ab:a4:3b:f7:8c:5c:38:43:
                    b3:53:04:9f:b4:f8:f2:f0:08:92:1d:ad:e2:f6:9f:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7A:EB:C3:A1:BF:F0:55:6F:BB:02:1D:D4:ED:4F:81:98:39:AC:55
            X509v3 Authority Key Identifier:
                keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6ac0:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:9b:f3:21:0e:82:e9:c4:b4:12:5b:8e:66:9d:25:df:10:3a:
         58:4d:5b:d2:27:79:ab:96:ae:31:2c:38:64:20:2b:6b:33:45:
         5b:8e:2b:31:44:5d:33:14:1c:c8:04:5a:b8:f7:62:f1:a4:18:
         bb:69:19:dc:78:97:a4:21:4b:57:6f:2f:44:4a:08:2c:a3:6f:
         ed:70:3a:07:7c:de:35:ce:15:97:7f:05:46:46:06:66:7f:12:
         ff:ec:64:78:3a:c4:8f:b7:7b:a0:15:e8:b6:c1:1d:9c:e0:e0:
         ba:63:fe:80:0d:cb:80:84:de:f1:10:79:72:63:7c:b5:50:cc:
         d0:26:72:d7:a5:33:7b:15:b3:81:47:2c:f9:5d:6b:bc:af:40:
         dc:65:bc:5c:9f:1c:d5:ae:c0:cf:2a:0e:fb:fa:2d:06:68:b4:
         b5:c3:39:d7:6f:44:10:b9:e2:11:f8:ea:99:d8:12:fd:26:07:
         05:65:39:c3:d8:f1:09:16:f0:4c:3f:67:95:e4:13:9c:0c:92:
         fd:60:df:5b:79:a4:4c:c6:71:9b:8f:75:56:d2:5b:69:2a:5c:
         7b:75:a1:a1:6a:1b:fc:79:b3:b6:f5:98:c5:b3:31:5c:23:16:
         3d:51:1d:40:b8:bd:0e:54:02:e7:38:5b:90:d0:9d:b0:09:4b:
         cf:d8:f4:ab
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIULpczrS9kQMnEMuq5Ho9FvsygSNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVB
NEY2OTM4NzAeFw0yNTA5MjkwNDU3NTdaFw0yNjA5MjgwNTAyNTdaMDMxMTAvBgNV
BAMTKEU2N0FFQkMzQTFCRkYwNTU2RkJCMDIxREQ0RUQ0RjgxOTgzOUFDNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYFhTPry2mnl5iyh83Dyo7Yzx
QWE4ZvsEVTh5+SqzBpdWcmY+H68zyz6FTT+zi3BF4oBKJND6A3Hrg3sBW4Y9a2BD
xNBFY0+l5jSBKuGutT7BzDANPhHGWiY7E6od0r2fVIR7IdbsCMsl/oAPk3sbrMz0
5bpZzNLwR+6/XnctoZ0RP8nrs06wrmry96WZqxOAOcYCnnPAwHc0Kq6+xmptxibV
mRVHCfM1RMkTL71j7LgMZGosJ7tCzuqfFNI9BU8N40P/r6Aso1F/iy2vBIINPCPQ
Xu4sNI3w3H+RDxi9pJ3CYmY2rX6rpDv3jFw4Q7NTBJ+0+PLwCJIdreL2n1YHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU5nrrw6G/8FVvuwId1O1PgZg5rFUwHwYDVR0j
BBgwFoAU8GFUV0C2tmqdPB0f5PP9taT2k4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MzZhMjE3MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC9GMDYxNTQ1NzQw
QjZCNjZBOUQzQzFEMUZFNEYzRkRCNUE0RjY5Mzg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVBNEY2
OTM4Ny5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i
Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzEzMjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM5MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQHasAA
EjANBgkqhkiG9w0BAQsFAAOCAQEAeJvzIQ6C6cS0EluOZp0l3xA6WE1b0id5q5au
MSw4ZCArazNFW44rMURdMxQcyARauPdi8aQYu2kZ3HiXpCFLV28vREoILKNv7XA6
B3zeNc4Vl38FRkYGZn8S/+xkeDrEj7d7oBXotsEdnODgumP+gA3LgITe8RB5cmN8
tVDM0CZy16UzexWzgUcs+V1rvK9A3GW8XJ8c1a7AzyoO+/otBmi0tcM5129EELni
EfjqmdgS/SYHBWU5w9jxCRbwTD9nleQTnAyS/WDfW3mkTMZxm491VtJbaSpce3Wh
oWob/HmztvWYxbMxXCMWPVEdQLi9DlQC5zhbkNCdsAlLz9j0qw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:48:49 2025 by rpki-client