Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030343a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a383030343a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          1xAqRebeHvhqKu16IbhId8MDc4KlvHJKCFol3SC2N3I=
Subject key identifier:   F5:01:D8:6C:B1:77:1A:41:E4:99:F5:6A:0F:31:C0:2E:33:0D:61:B7
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       148DD523971CB55D9A99EC8DC577685DE182772F
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030343a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 20 Aug 2025 03:02:26 +0000
ROA not before:           Wed 20 Aug 2025 02:57:26 +0000
ROA not after:            Wed 19 Aug 2026 03:02:26 +0000
asID:                     38526
IP address blocks:        2405:3740:8004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 10:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8d:d5:23:97:1c:b5:5d:9a:99:ec:8d:c5:77:68:5d:e1:82:77:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Aug 20 02:57:26 2025 GMT
            Not After : Aug 19 03:02:26 2026 GMT
        Subject: CN=F501D86CB1771A41E499F56A0F31C02E330D61B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:19:7a:fa:fa:cb:78:bd:8a:84:99:f7:a5:
                    bd:f6:42:64:f9:12:67:ab:dd:b4:8f:d5:2f:82:a9:
                    e3:dc:f6:95:fd:e9:0d:80:17:b8:40:7b:65:78:e9:
                    60:4e:85:67:be:b4:a2:2a:02:55:c1:75:1c:a7:0f:
                    f7:ad:f7:9b:0e:f0:25:48:be:b9:23:11:6a:74:07:
                    31:50:9f:83:7c:1b:51:52:36:f2:c9:db:24:f3:46:
                    27:f3:c0:1e:cd:cf:60:ba:54:0f:6e:2d:e6:16:f7:
                    48:41:e7:58:98:4b:16:90:45:1b:b5:2f:8d:57:10:
                    ad:22:d1:75:9f:12:ca:b1:da:8b:54:10:bc:e4:f8:
                    56:40:e8:5f:17:16:1f:4b:b2:c0:35:3b:86:c8:f2:
                    ac:c6:04:d0:0f:71:a4:a3:99:49:7c:b8:e5:de:56:
                    23:bd:65:4c:fd:32:e6:74:43:76:ad:e5:06:c5:ab:
                    ff:22:4a:1b:b5:59:ce:c6:85:17:25:eb:ca:cc:10:
                    30:1a:be:6d:f2:89:10:00:08:a4:b7:f1:92:87:f1:
                    24:77:c1:c3:f0:4f:9a:e6:9e:30:c3:b5:df:9a:09:
                    b9:35:9d:79:4c:de:e6:31:3e:9d:b4:64:3e:63:df:
                    6b:bc:28:42:c5:b5:6c:09:4c:d2:02:4b:43:df:0d:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:01:D8:6C:B1:77:1A:41:E4:99:F5:6A:0F:31:C0:2E:33:0D:61:B7
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030343a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:2f:4f:d5:7d:6c:b4:8c:8d:ae:09:4f:9e:3c:c2:1d:a6:
         e6:09:14:40:75:1f:2c:e2:81:cf:88:5d:ad:28:73:ed:77:b9:
         18:7a:64:ce:4f:b6:60:66:63:dd:1b:60:24:8c:ce:d7:43:bd:
         56:66:1f:20:0d:55:e7:69:5c:66:3e:b4:67:d4:e2:67:a0:9e:
         fa:1d:a0:84:df:47:10:6d:5e:45:5d:48:4f:36:0a:ac:33:27:
         32:d0:c6:81:8c:b3:e9:3b:2a:6e:b3:72:d7:7b:08:56:77:40:
         c9:50:63:47:37:fa:97:b6:25:c2:b6:2a:36:40:bf:67:6b:61:
         02:53:fc:6b:41:ef:c0:4a:df:27:77:4e:1e:25:a3:cc:60:5f:
         1e:3d:eb:49:48:d8:51:cf:f9:87:ed:b6:07:cb:51:58:01:5f:
         2d:2b:b0:00:41:e0:59:41:a5:00:ee:a7:07:9f:f2:2f:ca:7f:
         1e:99:83:11:f4:52:89:dc:94:7b:73:e4:6c:bb:4a:8e:4a:e4:
         14:ea:cc:80:aa:e9:c5:13:e7:61:de:5d:96:93:1d:a6:f3:08:
         41:65:6b:b0:de:69:29:40:41:38:32:ee:a3:2e:50:ad:37:ff:
         be:69:67:8b:8a:bc:08:51:0c:ae:ad:07:f7:10:2f:1a:27:5a:
         e5:3b:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:17:42 2025 by rpki-client