Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/323430303a393163303a3a2f33322d3438203d3e20313336303738.roa
File:                     323430303a393163303a3a2f33322d3438203d3e20313336303738.roa (raw, json)
Hash identifier:          JtI1jfgaZBEwCqyUB72ksPn3QargIoHZ6U4tHyErJjI=
Subject key identifier:   81:C6:B8:7B:51:D7:4D:54:F0:7C:DA:06:26:4C:48:04:97:32:1D:C7
Certificate issuer:       /CN=798D703C19A93E4E19F716304D78F20AA3261B8A
Certificate serial:       438EDEFDD70C1EFA22556ACB38DF67F6F4C095BA
Authority key identifier: 79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/323430303a393163303a3a2f33322d3438203d3e20313336303738.roa
Signing time:             Mon 16 Jun 2025 08:02:54 +0000
ROA not before:           Mon 16 Jun 2025 07:57:54 +0000
ROA not after:            Mon 15 Jun 2026 08:02:54 +0000
asID:                     136078
IP address blocks:        2400:91c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl
                          rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 21:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8e:de:fd:d7:0c:1e:fa:22:55:6a:cb:38:df:67:f6:f4:c0:95:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798D703C19A93E4E19F716304D78F20AA3261B8A
        Validity
            Not Before: Jun 16 07:57:54 2025 GMT
            Not After : Jun 15 08:02:54 2026 GMT
        Subject: CN=81C6B87B51D74D54F07CDA06264C480497321DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:bb:4d:19:ae:41:e5:a5:85:e8:4d:54:a0:
                    7b:b2:b5:d3:08:e2:10:01:0a:4b:ce:23:f5:e0:e9:
                    ef:14:d6:98:17:f5:d8:f6:b8:91:c9:f8:e4:37:f2:
                    c1:f7:7a:91:21:5b:24:95:8c:a7:2a:f5:5c:52:e1:
                    d9:da:3e:47:5a:2b:bc:a3:06:9e:04:92:fb:43:6c:
                    db:4d:76:74:b1:f9:49:b6:5c:b5:8e:df:4e:ee:5b:
                    49:a9:55:ba:ce:f9:b5:21:f4:c6:be:7a:e9:8e:4a:
                    11:80:7f:46:2a:6a:69:73:81:62:c8:85:50:19:eb:
                    81:29:f9:18:91:dc:ad:cd:60:d2:f3:bd:11:9f:a3:
                    d0:39:54:8f:0e:24:60:7f:2e:9e:52:c8:45:df:66:
                    18:54:c7:b1:b2:a1:a1:99:f4:e8:cd:d1:ed:b6:4a:
                    44:86:a4:8d:9d:a8:57:cc:5f:0d:6a:3a:af:dc:9e:
                    6b:d6:38:49:91:24:e7:05:35:56:b5:ca:6c:d1:3f:
                    31:e3:10:0a:34:97:52:79:0e:73:ab:bc:69:a3:96:
                    74:4c:07:65:18:f6:54:b2:35:42:a4:22:a5:15:51:
                    fd:3f:09:0d:ac:ec:6d:02:4f:74:fb:5f:7c:f2:0f:
                    6f:0c:24:bc:d2:38:7f:ec:ba:cb:b5:9a:40:8e:3e:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C6:B8:7B:51:D7:4D:54:F0:7C:DA:06:26:4C:48:04:97:32:1D:C7
            X509v3 Authority Key Identifier:
                keyid:79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/323430303a393163303a3a2f33322d3438203d3e20313336303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:91c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:fb:d7:84:1e:26:a4:0a:dc:b6:1c:eb:1a:0d:2d:b7:75:65:
         db:bc:13:0b:8f:e3:30:3e:cb:f7:9b:09:49:d1:02:55:00:fe:
         2a:1a:e1:a0:45:4d:0a:9a:67:89:dd:5d:fd:3b:6b:88:e6:e1:
         2f:1e:97:01:c7:d9:f8:79:ca:03:8b:37:03:46:8f:99:7b:dc:
         3d:3b:31:f7:3d:b6:d9:b5:9c:9a:eb:cc:d6:2a:de:36:f6:cb:
         1b:12:99:05:e6:d8:3d:14:5d:c4:3b:ae:e0:5c:f3:cd:c2:d5:
         68:e2:d5:4b:37:d4:6f:c6:0c:b7:1f:25:da:9d:af:07:1e:57:
         f4:63:87:8b:1d:70:a0:b1:fc:82:69:a1:35:b0:6d:80:da:87:
         85:ef:40:99:6c:83:f6:94:0e:36:d1:5e:49:49:48:53:d5:1b:
         2f:f1:dd:d5:73:f7:4d:4b:68:61:b5:b0:c4:e0:dc:34:4e:25:
         23:1a:56:af:6e:0a:eb:37:dc:02:50:98:d6:05:3c:e6:4d:e0:
         2a:7e:95:d0:85:20:c4:a7:53:6b:6f:19:24:9e:70:91:1e:ec:
         a2:94:a2:75:08:33:91:51:4b:60:19:41:cf:34:11:f6:b7:57:
         81:79:44:87:43:c0:95:40:dc:a1:d5:cc:89:e0:08:53:35:ff:
         77:78:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 05:49:39 2025 by rpki-client