Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/323430363a376234303a3a2f33322d3438203d3e203538383231.roa
File:                     323430363a376234303a3a2f33322d3438203d3e203538383231.roa (raw, json)
Hash identifier:          01o8IIdEBMNVP2rARnAtQNMxpIRvEPCoH/cFEbdvFjA=
Subject key identifier:   BC:AA:2E:BA:7B:E0:3D:AC:1D:DD:AA:16:A1:52:E1:F4:DA:B9:A2:02
Certificate issuer:       /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419
Certificate serial:       03F15902944BABCACA1451467F1517058E20EB0C
Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/323430363a376234303a3a2f33322d3438203d3e203538383231.roa
Signing time:             Sat 13 Sep 2025 05:00:00 +0000
ROA not before:           Sat 13 Sep 2025 04:55:00 +0000
ROA not after:            Sat 12 Sep 2026 05:00:00 +0000
asID:                     58821
IP address blocks:        2406:7b40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl
                          rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 07:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f1:59:02:94:4b:ab:ca:ca:14:51:46:7f:15:17:05:8e:20:eb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419
        Validity
            Not Before: Sep 13 04:55:00 2025 GMT
            Not After : Sep 12 05:00:00 2026 GMT
        Subject: CN=BCAA2EBA7BE03DAC1DDDAA16A152E1F4DAB9A202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:3f:28:10:c9:92:95:50:01:10:58:4c:d5:
                    d0:df:ea:a1:0b:63:e5:3d:32:78:e5:05:f1:b2:76:
                    93:95:ac:49:03:95:20:83:f6:98:ae:03:c6:70:40:
                    b6:b9:2f:9d:05:8a:c8:bd:7f:e8:8a:a4:60:78:27:
                    1e:82:a5:7b:ef:b1:a7:48:9e:7e:31:f6:33:64:83:
                    fd:b8:1a:17:40:7e:ca:0d:98:08:22:02:1a:ca:6f:
                    2e:6a:6f:e8:85:9f:69:6c:b0:41:25:39:94:63:25:
                    46:61:71:0f:fd:11:9b:28:f5:14:52:3a:2e:65:62:
                    69:79:61:81:05:fe:c4:33:b8:04:6a:9a:45:ec:33:
                    d3:08:f7:cd:15:2b:4b:fd:d7:d8:47:70:46:e9:53:
                    b2:b3:1f:22:6f:a4:54:3d:90:c5:cd:61:ea:cb:54:
                    00:6c:47:c9:7d:6e:9d:ed:e8:83:fd:62:b0:9d:af:
                    15:70:43:e4:eb:dd:b1:cc:0d:5e:82:97:ce:66:7c:
                    4f:6e:eb:ce:39:6e:08:98:0b:0e:cf:41:7a:81:77:
                    da:eb:17:64:fc:18:87:4e:9c:40:20:fe:b1:d4:a0:
                    89:36:d2:76:a5:e7:aa:d3:d5:9e:e9:a3:a8:35:66:
                    d0:6a:fb:ae:ec:23:ac:55:83:1e:7d:ea:16:85:83:
                    b1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AA:2E:BA:7B:E0:3D:AC:1D:DD:AA:16:A1:52:E1:F4:DA:B9:A2:02
            X509v3 Authority Key Identifier:
                keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/323430363a376234303a3a2f33322d3438203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:af:0d:b3:cc:de:bd:43:8c:4d:ec:36:c6:cf:90:06:68:ed:
         72:5a:16:2f:3a:87:ca:27:c1:27:52:9a:75:ab:1f:9f:27:58:
         12:05:06:0a:5b:16:3f:9c:11:b8:83:2a:dc:9a:18:19:e8:8b:
         8a:bf:e9:1b:53:4a:84:44:c1:26:21:36:4b:47:64:70:b6:39:
         87:ee:f1:9e:04:e2:d6:58:c7:5e:20:f7:bb:52:c7:a8:94:78:
         e4:de:7d:9a:13:38:85:96:1f:3c:d1:61:2a:28:c4:7e:eb:d1:
         79:31:43:6f:a5:5f:ae:65:88:43:ab:04:69:0a:a9:b3:e5:a1:
         cd:e4:05:8a:52:6e:73:66:6a:61:16:74:57:e4:67:4e:a1:45:
         d9:d2:63:ad:00:6c:42:ac:1e:0e:b5:d3:87:cc:14:03:b2:54:
         1e:89:8b:df:19:55:fb:d0:8e:2b:5d:e1:1e:4d:6e:83:1d:f1:
         d3:c0:cb:59:7f:8a:f3:65:e4:53:29:36:19:96:69:dc:15:3f:
         8f:fa:28:94:66:45:8e:e5:db:e2:f1:9d:2d:06:db:ca:4f:e4:
         ec:ea:47:d4:d1:8b:df:84:de:48:38:71:07:bd:5c:ec:9a:44:
         49:a5:b3:1d:d4:52:ad:e5:45:1a:82:41:d5:5f:dc:0c:03:e0:
         58:87:94:d2
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUA/FZApRLq8rKFFFGfxUXBY4g6wwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2
OEY4MDQxOTAeFw0yNTA5MTMwNDU1MDBaFw0yNjA5MTIwNTAwMDBaMDMxMTAvBgNV
BAMTKEJDQUEyRUJBN0JFMDNEQUMxREREQUExNkExNTJFMUY0REFCOUEyMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9j8oEMmSlVABEFhM1dDf6qEL
Y+U9MnjlBfGydpOVrEkDlSCD9piuA8ZwQLa5L50Fisi9f+iKpGB4Jx6CpXvvsadI
nn4x9jNkg/24GhdAfsoNmAgiAhrKby5qb+iFn2lssEElOZRjJUZhcQ/9EZso9RRS
Oi5lYml5YYEF/sQzuARqmkXsM9MI980VK0v919hHcEbpU7KzHyJvpFQ9kMXNYerL
VABsR8l9bp3t6IP9YrCdrxVwQ+Tr3bHMDV6Cl85mfE9u6845bgiYCw7PQXqBd9rr
F2T8GIdOnEAg/rHUoIk20nal56rT1Z7po6g1ZtBq+67sI6xVgx596haFg7FNAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUvKouunvgPawd3aoWoVLh9Nq5ogIwHwYDVR0j
BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy
OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4
MDQxOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NlMWVhNTEzLWFjNmUtNGE1Zi1i
M2ViLWQ1MzUyY2FmNDg2Yi8wLzMyMzQzMDM2M2EzNzYyMzQzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDM1MzgzODMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBntAMA0GCSqGSIb3
DQEBCwUAA4IBAQBHrw2zzN69Q4xN7DbGz5AGaO1yWhYvOofKJ8EnUpp1qx+fJ1gS
BQYKWxY/nBG4gyrcmhgZ6IuKv+kbU0qERMEmITZLR2RwtjmH7vGeBOLWWMdeIPe7
UseolHjk3n2aEziFlh880WEqKMR+69F5MUNvpV+uZYhDqwRpCqmz5aHN5AWKUm5z
ZmphFnRX5GdOoUXZ0mOtAGxCrB4OtdOHzBQDslQeiYvfGVX70I4rXeEeTW6DHfHT
wMtZf4rzZeRTKTYZlmncFT+P+iiUZkWO5dvi8Z0tBtvKT+Ts6kfU0YvfhN5IOHEH
vVzsmkRJpbMd1FKt5UUagkHVX9wMA+BYh5TS
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:14:31 2025 by rpki-client