Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/323430373a613163303a3a2f33322d3332203d3e20313432333135.roa
File:                     323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (raw, json)
Hash identifier:          t9Dk6yRyxGtnxo9p6R4EHJZwYzMqbQXmpijhebxT1Co=
Subject key identifier:   20:5B:0C:93:39:56:B4:A0:D4:EE:28:E9:9B:DB:4B:83:9D:A7:83:07
Certificate issuer:       /CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
Certificate serial:       7FD743D5F9CF21B70A9E76E87C42CB656AA115C5
Authority key identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/323430373a613163303a3a2f33322d3332203d3e20313432333135.roa
Signing time:             Wed 02 Apr 2025 08:00:00 +0000
ROA not before:           Wed 02 Apr 2025 07:55:00 +0000
ROA not after:            Wed 01 Apr 2026 08:00:00 +0000
asID:                     142315
IP address blocks:        2407:a1c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl
                          rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 10:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d7:43:d5:f9:cf:21:b7:0a:9e:76:e8:7c:42:cb:65:6a:a1:15:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
        Validity
            Not Before: Apr  2 07:55:00 2025 GMT
            Not After : Apr  1 08:00:00 2026 GMT
        Subject: CN=205B0C933956B4A0D4EE28E99BDB4B839DA78307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8b:07:50:5a:67:77:0f:67:04:44:26:66:a0:
                    d9:32:08:72:81:60:62:f8:1b:52:db:fa:53:f4:7a:
                    e2:68:39:6e:11:9e:9a:e1:fe:2d:82:7b:85:9a:ea:
                    85:9e:0d:a2:9f:b3:b8:80:ae:84:6a:b3:f1:21:06:
                    47:72:80:ea:80:cd:69:c3:1d:ac:22:cd:49:39:66:
                    a3:10:ce:14:35:48:16:5e:fd:34:fc:c6:7d:0c:c7:
                    cf:11:fa:52:70:42:24:f6:f7:58:c1:8e:6a:3f:4f:
                    ce:b7:64:37:90:a6:ec:b5:4a:8b:9a:14:87:88:aa:
                    e4:bb:7d:c0:3a:10:3e:a0:8d:4c:b0:d8:91:bd:b1:
                    1f:b8:d1:56:8d:0e:24:d6:e0:e0:57:08:7a:b7:79:
                    ee:fb:cf:03:e9:ec:85:99:ab:61:57:a9:2c:27:b5:
                    7b:7a:fd:cf:b3:0b:a6:6e:b9:64:6e:b4:81:47:0c:
                    1a:40:25:e6:40:bc:ef:f8:65:c0:1d:67:7c:12:83:
                    35:1d:6a:3a:92:97:29:f2:5d:85:41:02:44:4b:ac:
                    7d:fb:6f:6f:cd:3e:d9:43:5b:4f:8f:5c:bb:68:2d:
                    5e:54:69:63:97:87:94:65:f2:58:79:2c:d9:db:58:
                    9c:9e:1e:32:32:a7:09:41:21:fe:dd:d3:c2:64:5b:
                    34:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5B:0C:93:39:56:B4:A0:D4:EE:28:E9:9B:DB:4B:83:9D:A7:83:07
            X509v3 Authority Key Identifier:
                keyid:EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/323430373a613163303a3a2f33322d3332203d3e20313432333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:64:d4:29:35:71:29:49:af:3f:16:df:a2:9e:3d:2c:d3:
         1b:d3:bf:a1:ff:ae:fd:8a:4c:d8:9c:07:c1:df:7d:5a:fa:26:
         63:32:63:2b:f0:db:73:b6:64:fc:12:d1:44:1c:5f:02:77:f4:
         b5:ad:71:85:72:ae:6c:56:0d:e7:ad:7b:67:ea:03:f4:52:77:
         34:e4:33:e9:ef:c5:8c:05:6c:22:53:8c:a0:5c:9b:cc:22:83:
         dd:db:2d:9c:f0:9d:d7:c7:84:15:18:e6:94:f3:1f:b0:86:e9:
         7c:5b:7a:83:23:c6:c0:bd:b5:61:5c:9f:fa:35:18:f9:34:0c:
         3b:fc:0c:cf:56:d4:f0:51:f7:41:68:66:a0:d2:89:00:6e:29:
         35:a4:f0:e9:f9:00:b9:ae:b1:e4:e3:15:ee:89:42:67:58:87:
         36:e9:ee:98:82:df:f4:19:9d:2a:de:14:f2:2b:e2:36:a2:40:
         9b:c0:67:5b:f7:d0:27:51:81:4b:b6:97:b7:ed:c4:f2:22:da:
         16:ea:ec:04:fa:33:d5:bc:2f:dc:9c:93:a7:42:14:01:67:14:
         55:f3:60:54:05:38:6a:03:8c:b5:50:4e:91:19:b2:2e:05:20:
         cf:25:35:c0:0c:1f:ed:d3:b0:df:ba:0b:e4:e7:5a:d5:5d:1d:
         be:01:1b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net