Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          AEZRpPWBACfL44qTYViw0xm3AzF34UtRMgoH1g527Jw=
Subject key identifier:   7C:EC:37:66:29:F0:E3:2C:0E:0F:2F:8F:C2:FB:B2:3F:67:25:AB:7E
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       5FFAE61EB3F97445451A17C871A866044765F023
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 20 Aug 2025 03:02:26 +0000
ROA not before:           Wed 20 Aug 2025 02:57:26 +0000
ROA not after:            Wed 19 Aug 2026 03:02:26 +0000
asID:                     38526
IP address blocks:        2405:3740:8005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 10:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:fa:e6:1e:b3:f9:74:45:45:1a:17:c8:71:a8:66:04:47:65:f0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Aug 20 02:57:26 2025 GMT
            Not After : Aug 19 03:02:26 2026 GMT
        Subject: CN=7CEC376629F0E32C0E0F2F8FC2FBB23F6725AB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:ef:33:18:c7:40:eb:18:6b:c6:5d:36:43:
                    f9:31:13:03:25:9f:18:57:87:21:ae:7b:84:2d:7e:
                    2d:1d:30:f2:73:58:7c:d5:c3:5c:2b:3b:6d:12:66:
                    d7:ff:63:8b:51:04:b4:c6:fa:10:40:c5:42:f6:67:
                    eb:34:c8:92:9c:05:15:53:44:49:f0:0f:53:7b:50:
                    c0:5b:f6:7c:00:4e:19:e8:c1:65:6a:86:2d:62:b2:
                    70:2f:70:ee:ca:be:f8:47:7e:5c:bd:3a:61:8e:b7:
                    79:d3:12:5d:c1:bf:dc:46:2b:5e:a3:c5:8d:75:b2:
                    81:a7:a3:7e:d4:37:9a:fa:9f:a0:b2:a3:b4:2d:b6:
                    7d:de:f7:64:55:b3:cf:a4:5e:96:19:2e:e0:dd:30:
                    e5:cc:51:32:28:04:97:84:a4:98:cb:ee:9e:15:f1:
                    36:44:09:84:20:70:63:d3:20:11:5f:13:cd:0b:4e:
                    e6:82:6c:34:e9:de:1f:7f:f7:37:38:2f:aa:2d:04:
                    ab:97:dc:fd:69:94:a3:e7:80:4b:7e:64:3f:8e:e4:
                    09:4d:9b:2f:22:53:58:60:39:9a:33:0f:17:a9:b2:
                    97:2c:cd:8d:3c:d2:8d:fa:f0:f6:de:ed:ff:4d:a4:
                    b0:22:87:9f:ff:6a:b0:5e:19:4e:4f:2b:e4:9d:39:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EC:37:66:29:F0:E3:2C:0E:0F:2F:8F:C2:FB:B2:3F:67:25:AB:7E
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:0c:fa:34:27:f7:b5:4e:01:5c:dd:fb:3f:23:ad:65:db:d6:
         25:23:db:6d:f7:5f:ae:7a:af:93:77:0b:5e:af:93:30:12:75:
         20:2c:fc:01:92:3a:e0:33:c9:23:b1:aa:90:20:2c:37:1f:be:
         a9:b0:83:1a:8d:29:4c:24:8a:a2:40:22:1c:e9:58:32:58:19:
         93:7d:d6:ea:83:62:24:b2:e1:e6:da:1a:e0:a0:da:33:25:ad:
         b8:44:02:95:0e:55:c2:38:c6:b6:32:a5:f7:5b:3e:62:37:5c:
         45:87:f6:73:00:cc:dc:dc:da:57:02:d3:b5:36:d0:31:2d:8e:
         e2:d9:1c:dc:33:f3:9c:53:57:51:28:f1:c6:39:35:70:fe:83:
         59:33:90:79:7c:b1:68:52:e3:b6:68:94:82:b9:95:06:d3:69:
         ff:72:bb:cf:d3:a5:10:e4:4d:4f:f5:f6:4a:e4:f6:b1:14:12:
         08:44:fa:f6:e0:b1:95:34:ae:8e:6f:44:80:c3:0f:52:98:92:
         d8:8c:fc:f0:3b:2b:4a:7d:ac:d4:ad:36:5f:9b:a8:9b:b0:2d:
         3e:13:e4:21:a2:4d:e1:75:bb:f5:0a:e9:cf:72:9a:97:1c:fc:
         d2:9f:ae:90:21:d9:a2:93:0b:2f:0f:69:90:e5:7d:2f:35:ab:
         1b:8e:44:85
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUX/rmHrP5dEVFGhfIcahmBEdl8CMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx
MzIyNTIwRDAeFw0yNTA4MjAwMjU3MjZaFw0yNjA4MTkwMzAyMjZaMDMxMTAvBgNV
BAMTKDdDRUMzNzY2MjlGMEUzMkMwRTBGMkY4RkMyRkJCMjNGNjcyNUFCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmw+8zGMdA6xhrxl02Q/kxEwMl
nxhXhyGue4Qtfi0dMPJzWHzVw1wrO20SZtf/Y4tRBLTG+hBAxUL2Z+s0yJKcBRVT
REnwD1N7UMBb9nwAThnowWVqhi1isnAvcO7KvvhHfly9OmGOt3nTEl3Bv9xGK16j
xY11soGno37UN5r6n6Cyo7Qttn3e92RVs8+kXpYZLuDdMOXMUTIoBJeEpJjL7p4V
8TZECYQgcGPTIBFfE80LTuaCbDTp3h9/9zc4L6otBKuX3P1plKPngEt+ZD+O5AlN
my8iU1hgOZozDxepspcszY080o368Pbe7f9NpLAih5//arBeGU5PK+SdOac7AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUfOw3Zinw4ywODy+PwvuyP2clq34wHwYDVR0j
BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy
MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy
NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzgzMDMwMzUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3
QIAFMA0GCSqGSIb3DQEBCwUAA4IBAQASDPo0J/e1TgFc3fs/I61l29YlI9tt91+u
eq+Tdwter5MwEnUgLPwBkjrgM8kjsaqQICw3H76psIMajSlMJIqiQCIc6VgyWBmT
fdbqg2IksuHm2hrgoNozJa24RAKVDlXCOMa2MqX3Wz5iN1xFh/ZzAMzc3NpXAtO1
NtAxLY7i2RzcM/OcU1dRKPHGOTVw/oNZM5B5fLFoUuO2aJSCuZUG02n/crvP06UQ
5E1P9fZK5PaxFBIIRPr24LGVNK6Ob0SAww9SmJLYjPzwOytKfazUrTZfm6ibsC0+
E+Qhok3hdbv1CunPcpqXHPzSn66QIdmikwsvD2mQ5X0vNasbjkSF
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:16:52 2025 by rpki-client