Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a373a3a2f34382d3438203d3e20313431393638.roa
File:                     323430373a366163303a373a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier:          atcNnqjFig4yqzcc2NQKhseVRp+SSu5h8Qfgjziyil4=
Subject key identifier:   0C:1F:9A:F1:AB:36:5C:4F:7D:69:29:06:DE:41:9D:FD:22:A8:15:DD
Certificate issuer:       /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Certificate serial:       3B0FC493319762024269C70FA220C7080C087F4B
Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a373a3a2f34382d3438203d3e20313431393638.roa
Signing time:             Mon 29 Sep 2025 05:02:57 +0000
ROA not before:           Mon 29 Sep 2025 04:57:57 +0000
ROA not after:            Mon 28 Sep 2026 05:02:57 +0000
asID:                     141968
IP address blocks:        2407:6ac0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl
                          rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 21:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0f:c4:93:31:97:62:02:42:69:c7:0f:a2:20:c7:08:0c:08:7f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
        Validity
            Not Before: Sep 29 04:57:57 2025 GMT
            Not After : Sep 28 05:02:57 2026 GMT
        Subject: CN=0C1F9AF1AB365C4F7D692906DE419DFD22A815DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:89:73:77:68:0b:53:39:d8:65:a7:a7:eb:
                    03:73:26:c9:9a:cc:ca:78:f9:c8:fc:ad:c7:c6:0e:
                    2f:f0:19:e0:ce:62:2f:ad:bc:06:50:45:37:5d:26:
                    2a:17:70:10:00:20:75:71:d5:d3:e9:96:41:c0:80:
                    2e:48:ad:5d:28:e6:e4:12:ab:b5:4d:72:d4:34:9e:
                    d7:ad:71:84:9b:8a:d5:cb:26:1b:b4:5a:6f:5e:34:
                    00:f3:64:7b:2c:cf:e0:8a:2f:03:19:28:c2:47:c6:
                    84:df:eb:e3:f6:62:69:dd:68:23:0f:f9:c0:e7:98:
                    cb:58:ee:fd:e4:b5:e8:9e:f8:ce:56:fe:77:b5:63:
                    11:21:07:b3:c3:bf:21:71:b7:40:67:ea:dc:ed:39:
                    9e:66:87:8e:6e:8a:fd:ae:e3:6b:0a:2c:59:a3:79:
                    c4:e2:57:7b:bd:d9:bb:49:c3:2e:40:fb:f0:15:f1:
                    20:a5:9a:46:81:8f:3c:09:2d:b4:02:dc:25:d3:b4:
                    ed:68:05:e8:69:4b:1a:c1:e1:32:c5:e9:b4:ee:3d:
                    83:66:3b:c1:d9:78:f7:1b:96:c1:5e:c1:98:ba:f1:
                    c7:1c:6d:ff:08:b3:01:a9:a2:c0:01:be:44:c4:3e:
                    45:a7:83:7e:13:cc:f4:8f:15:0b:ef:2e:13:1a:3a:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1F:9A:F1:AB:36:5C:4F:7D:69:29:06:DE:41:9D:FD:22:A8:15:DD
            X509v3 Authority Key Identifier:
                keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a373a3a2f34382d3438203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6ac0:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:e2:9e:11:ee:fa:71:39:64:6e:51:28:dd:ca:28:bf:7f:28:
         42:9d:98:31:c0:be:f4:b1:1b:66:43:35:5c:10:4b:27:66:18:
         da:c4:ec:b3:d2:f6:4c:18:db:7e:bf:49:9f:e6:f7:e4:c0:09:
         02:a0:5b:e2:4f:dd:9a:ab:3c:bb:ec:0b:3b:bd:f2:3e:77:26:
         09:b0:5b:ce:01:38:46:1e:cd:c9:7c:df:e3:2e:58:52:30:16:
         44:27:c8:f6:13:bd:94:de:26:cc:a6:83:eb:62:2e:e6:0d:07:
         5c:f2:31:e8:2a:b6:2c:c3:8b:67:ba:b6:f3:61:77:78:db:bb:
         fc:bd:31:72:9f:9f:05:a6:bb:51:27:c2:95:54:67:8e:c4:27:
         a4:3e:c7:62:b2:1d:0c:bf:cd:19:9a:32:d1:cf:7a:e9:0f:29:
         b2:5c:1c:64:84:16:af:da:24:9f:de:5b:38:98:f7:13:10:1c:
         62:43:b9:09:70:3b:47:40:5d:8b:9f:f1:2e:7c:cd:46:3b:1a:
         a9:73:12:e1:32:84:0b:c0:fd:0b:94:53:2e:bc:1b:e2:b6:32:
         b5:20:85:85:ed:2b:1b:f4:90:f1:56:f2:75:c6:a9:69:4a:d4:
         6f:4b:52:d3:22:9e:93:cb:78:1c:63:13:7f:e5:a7:99:81:4c:
         66:fb:3f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:38:02 2025 by rpki-client