Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa
File:                     323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier:          i0RgwT0qanGUvdxsXMyR7MVxxtMqoKmL58+Eu4f9DWA=
Subject key identifier:   2B:D7:3E:4D:27:04:1B:3B:BF:9A:B1:52:CC:04:83:72:39:44:6E:82
Certificate issuer:       /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Certificate serial:       4D973179C7052EADD643C6EBBD387DB42AD3B653
Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa
Signing time:             Mon 29 Sep 2025 05:02:58 +0000
ROA not before:           Mon 29 Sep 2025 04:57:58 +0000
ROA not after:            Mon 28 Sep 2026 05:02:58 +0000
asID:                     141968
IP address blocks:        2407:6ac0:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl
                          rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 21:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:97:31:79:c7:05:2e:ad:d6:43:c6:eb:bd:38:7d:b4:2a:d3:b6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
        Validity
            Not Before: Sep 29 04:57:58 2025 GMT
            Not After : Sep 28 05:02:58 2026 GMT
        Subject: CN=2BD73E4D27041B3BBF9AB152CC04837239446E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:35:d5:b8:04:67:a1:1c:54:c5:58:3a:ef:
                    0d:c7:04:0e:5c:d2:ce:b9:42:46:5a:96:c7:68:08:
                    83:de:de:0b:47:0f:0e:68:2d:00:64:1b:6e:b3:a1:
                    f0:02:f8:9c:ac:70:61:ae:b9:2a:83:2a:5a:c8:e8:
                    1a:61:4c:45:f2:78:70:86:29:73:37:8a:7b:0f:ed:
                    a1:37:0a:84:63:42:bb:93:91:90:48:0c:8e:0e:dc:
                    56:6b:a4:f2:50:33:2e:64:2a:d1:2d:c4:1a:19:3b:
                    90:0e:8e:3f:3c:14:86:83:29:f7:f2:12:40:83:fc:
                    6c:09:e6:9c:d8:e0:c8:99:2f:fe:4c:57:09:91:c6:
                    15:e7:93:05:7c:2d:0d:78:53:65:96:a3:52:b0:33:
                    46:3d:63:4a:e7:c2:5e:47:cd:c8:d3:28:f0:8f:b1:
                    66:92:49:e0:a4:8c:b0:b8:4c:0b:d7:06:d2:c9:1f:
                    a4:9b:e9:c0:0b:72:47:95:6f:70:61:32:89:91:49:
                    21:b5:05:b8:64:fc:c9:59:71:c6:14:b9:27:1c:0e:
                    26:73:02:36:7c:59:24:7f:f0:ff:06:4f:e8:9e:78:
                    4c:ef:e1:1e:dc:05:c4:5b:13:82:d2:62:78:90:05:
                    b2:4e:5d:77:e8:20:1e:d9:8d:79:7e:d9:54:c2:97:
                    01:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D7:3E:4D:27:04:1B:3B:BF:9A:B1:52:CC:04:83:72:39:44:6E:82
            X509v3 Authority Key Identifier:
                keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6ac0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:c8:cb:01:8f:3c:ca:32:f2:e4:7a:28:d6:4a:f6:3d:3e:7d:
         28:a0:cb:6e:85:24:00:2d:ba:43:38:ae:f9:08:02:74:68:d9:
         24:90:a7:b5:ef:b3:cd:a1:4b:b5:f5:25:7e:40:f0:a5:15:2f:
         91:11:3a:d7:d8:15:c9:87:f8:ee:87:3e:27:27:1d:10:4d:45:
         4d:4e:d7:45:46:76:44:45:8d:f4:c4:2f:77:23:f0:cc:b4:d6:
         a8:11:d8:a2:fb:ae:69:c9:25:d2:7a:1c:f8:db:0b:f5:89:59:
         04:29:e4:3f:36:a7:cb:13:1a:77:e1:09:b5:ac:12:a1:55:8d:
         0c:c2:6c:75:62:fd:ae:37:1c:0e:1f:1f:52:31:c9:4a:44:17:
         08:46:e8:d8:b9:4f:9c:e6:65:4c:5e:7a:e6:91:3f:39:88:24:
         55:01:a8:45:c1:4d:d5:f2:a8:ac:d8:eb:b3:55:a6:c2:68:dd:
         5b:b5:fe:31:fd:90:10:f3:f5:be:eb:9d:a5:31:bd:90:91:67:
         93:cc:c4:fc:90:ad:58:7a:6c:89:db:98:c2:b1:af:34:6c:85:
         64:15:f0:1e:9c:77:50:24:7b:f2:c7:0b:87:1f:02:82:e5:91:
         02:2f:f4:90:a4:0a:95:33:d0:a9:72:22:94:9e:a2:78:36:8d:
         a4:54:7b:94
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUTZcxeccFLq3WQ8brvTh9tCrTtlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVB
NEY2OTM4NzAeFw0yNTA5MjkwNDU3NThaFw0yNjA5MjgwNTAyNThaMDMxMTAvBgNV
BAMTKDJCRDczRTREMjcwNDFCM0JCRjlBQjE1MkNDMDQ4MzcyMzk0NDZFODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10DXVuARnoRxUxVg67w3HBA5c
0s65QkZalsdoCIPe3gtHDw5oLQBkG26zofAC+JyscGGuuSqDKlrI6BphTEXyeHCG
KXM3insP7aE3CoRjQruTkZBIDI4O3FZrpPJQMy5kKtEtxBoZO5AOjj88FIaDKffy
EkCD/GwJ5pzY4MiZL/5MVwmRxhXnkwV8LQ14U2WWo1KwM0Y9Y0rnwl5HzcjTKPCP
sWaSSeCkjLC4TAvXBtLJH6Sb6cALckeVb3BhMomRSSG1Bbhk/MlZccYUuSccDiZz
AjZ8WSR/8P8GT+ieeEzv4R7cBcRbE4LSYniQBbJOXXfoIB7ZjXl+2VTClwFDAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUK9c+TScEGzu/mrFSzASDcjlEboIwHwYDVR0j
BBgwFoAU8GFUV0C2tmqdPB0f5PP9taT2k4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MzZhMjE3MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC9GMDYxNTQ1NzQw
QjZCNjZBOUQzQzFEMUZFNEYzRkRCNUE0RjY5Mzg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVBNEY2
OTM4Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i
Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzQzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB2rAAAQw
DQYJKoZIhvcNAQELBQADggEBAMLIywGPPMoy8uR6KNZK9j0+fSigy26FJAAtukM4
rvkIAnRo2SSQp7Xvs82hS7X1JX5A8KUVL5EROtfYFcmH+O6HPicnHRBNRU1O10VG
dkRFjfTEL3cj8My01qgR2KL7rmnJJdJ6HPjbC/WJWQQp5D82p8sTGnfhCbWsEqFV
jQzCbHVi/a43HA4fH1IxyUpEFwhG6Ni5T5zmZUxeeuaRPzmIJFUBqEXBTdXyqKzY
67NVpsJo3Vu1/jH9kBDz9b7rnaUxvZCRZ5PMxPyQrVh6bInbmMKxrzRshWQV8B6c
d1Ake/LHC4cfAoLlkQIv9JCkCpUz0KlyIpSeong2jaRUe5Q=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:28:50 2025 by rpki-client