Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa
File:                     323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier:          /VC6Nzqbkey0me4WfOLi7H8x3rryeyAeIA0bOas07CU=
Subject key identifier:   AB:37:5E:E4:A8:7C:DF:3D:F6:BF:D4:31:14:94:04:67:BE:A3:58:52
Certificate issuer:       /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Certificate serial:       21D69FA3FFCF75DB6E3F3F0395836444610B5014
Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa
Signing time:             Mon 29 Sep 2025 05:02:57 +0000
ROA not before:           Mon 29 Sep 2025 04:57:57 +0000
ROA not after:            Mon 28 Sep 2026 05:02:57 +0000
asID:                     141968
IP address blocks:        2407:6ac0:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl
                          rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 21:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d6:9f:a3:ff:cf:75:db:6e:3f:3f:03:95:83:64:44:61:0b:50:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
        Validity
            Not Before: Sep 29 04:57:57 2025 GMT
            Not After : Sep 28 05:02:57 2026 GMT
        Subject: CN=AB375EE4A87CDF3DF6BFD43114940467BEA35852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:a3:2d:f2:46:4f:44:d8:ad:39:ab:38:82:
                    07:db:ae:9c:87:5a:90:53:f8:a7:a3:1b:93:a7:01:
                    d6:6f:4a:ce:1c:29:c1:d9:77:5f:6b:a0:3c:76:20:
                    e2:c6:a7:17:db:31:ad:81:33:59:fa:45:9e:b5:69:
                    ea:c0:5b:54:ed:aa:56:49:c6:6f:f2:09:d3:39:6e:
                    07:b7:89:8c:87:40:8e:56:f2:9b:fe:67:ac:55:7e:
                    75:7d:b7:9c:1d:df:91:ea:e7:b4:f5:df:3f:28:38:
                    84:79:63:41:af:48:59:02:32:c8:54:50:a7:66:31:
                    be:4e:8c:b8:b7:35:18:ae:e5:91:cc:a6:6b:a0:f0:
                    e6:5d:60:ff:e7:c6:e8:11:90:6a:ef:eb:2e:4c:57:
                    1c:6e:18:6e:81:b9:e6:eb:63:a1:61:1b:8e:ce:b5:
                    bc:4b:ff:b0:41:b3:9c:77:fc:2e:71:9f:ce:31:6b:
                    2d:ea:9f:c3:82:4b:0a:e1:78:ed:59:79:9d:f1:e9:
                    c2:ab:71:b1:b2:2f:78:af:f4:df:fa:72:22:27:5b:
                    c8:7d:79:1a:db:32:0a:45:0e:90:2f:da:f2:c9:37:
                    4e:71:02:e8:c1:16:3e:41:cb:2d:f5:81:76:10:e4:
                    9b:47:50:9a:2f:cc:cf:87:b2:c6:57:bf:d0:1f:c9:
                    55:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:37:5E:E4:A8:7C:DF:3D:F6:BF:D4:31:14:94:04:67:BE:A3:58:52
            X509v3 Authority Key Identifier:
                keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6ac0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:38:fc:b5:3a:37:9c:63:e8:71:9a:33:61:78:31:91:89:5e:
         b9:08:b2:16:59:e6:5d:21:23:23:b6:5a:03:c7:8b:74:ea:3d:
         83:a6:0b:40:1a:20:80:8a:47:09:73:8c:21:b0:bb:7c:64:0a:
         d0:0f:65:95:a3:3e:4f:f0:23:3d:9c:35:51:a1:7d:b8:f7:4b:
         5c:b7:4b:fc:b6:f2:76:17:45:57:ba:4d:8a:1a:f4:12:37:60:
         3d:da:6b:25:ba:44:a1:69:7c:a4:0a:b5:1b:84:66:78:35:af:
         b2:a6:75:2e:69:0f:10:18:34:3e:06:e0:d8:e0:dd:3e:1c:5e:
         cb:d6:74:f4:4c:7c:6b:59:a2:75:15:a6:38:18:a1:89:15:e9:
         7a:cd:3f:5f:00:1c:66:a9:f3:e4:45:c0:87:90:9a:c3:4c:3e:
         9d:bd:6a:d9:18:0c:f2:48:2d:3a:9b:d3:56:b4:2c:eb:11:bb:
         42:af:aa:11:98:99:bc:49:3e:a1:92:de:35:eb:f2:0a:37:de:
         f7:4f:c5:63:73:d0:15:67:18:83:73:5e:44:94:5d:b3:cb:32:
         ab:67:e3:0d:1f:e8:92:e1:b5:66:d4:30:e5:75:f4:c4:4d:5e:
         19:ea:e5:48:ee:03:65:53:01:1c:50:b4:f3:65:d2:85:e5:73:
         ba:34:6b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:16:48 2025 by rpki-client