Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/323430333a666630303a3a2f33322d3438203d3e203234353335.roa
File:                     323430333a666630303a3a2f33322d3438203d3e203234353335.roa (raw, json)
Hash identifier:          Rsp0inkAe4x/F4hisAzY5o/UwhJ2oK1k5juyxF64B0U=
Subject key identifier:   7D:51:13:2A:A1:78:1D:20:13:F8:4F:41:81:60:F2:16:97:65:D3:44
Certificate issuer:       /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
Certificate serial:       68FCEBFB5B453CEF5132124D05F9F190857D7B7F
Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/323430333a666630303a3a2f33322d3438203d3e203234353335.roa
Signing time:             Tue 04 Mar 2025 09:00:02 +0000
ROA not before:           Tue 04 Mar 2025 08:55:02 +0000
ROA not after:            Tue 03 Mar 2026 09:00:02 +0000
asID:                     24535
IP address blocks:        2403:ff00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl
                          rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fc:eb:fb:5b:45:3c:ef:51:32:12:4d:05:f9:f1:90:85:7d:7b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
        Validity
            Not Before: Mar  4 08:55:02 2025 GMT
            Not After : Mar  3 09:00:02 2026 GMT
        Subject: CN=7D51132AA1781D2013F84F418160F2169765D344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:00:99:eb:d8:66:8b:c5:d9:92:21:82:13:
                    ac:fb:c8:42:cb:a7:e3:61:0b:7f:d9:45:1a:a0:88:
                    c2:50:75:81:eb:4b:2e:13:67:2e:d5:6e:46:76:2e:
                    7e:33:8c:c0:bd:2a:df:e6:b5:dd:89:1b:a7:76:52:
                    24:23:06:58:2f:63:24:43:a0:85:97:94:eb:fb:06:
                    6f:b0:be:24:4f:a7:d3:fd:bb:0c:47:a8:2f:be:4f:
                    12:db:42:36:fa:28:78:9b:ab:b8:82:bd:d7:70:55:
                    ae:90:01:2e:70:30:26:b9:55:0e:7d:c0:cb:e2:3c:
                    7d:be:40:bc:48:06:4b:ee:3f:0e:27:dd:8e:69:83:
                    be:83:6f:5c:1a:c5:bd:94:cc:50:cd:6a:7b:c6:13:
                    cf:e6:91:fe:4d:ff:40:99:00:ea:9d:c9:1f:65:ca:
                    46:e1:fe:92:ba:ef:a1:b6:81:51:0f:41:67:ae:d7:
                    0f:d6:eb:13:c5:04:50:03:77:0c:e4:2f:95:bc:80:
                    7a:ac:25:d2:05:24:25:06:5c:25:4a:b0:ad:d3:54:
                    19:17:76:e0:3a:3b:01:34:3a:e1:14:fa:79:92:36:
                    a7:4c:f2:db:e7:c1:01:89:82:f4:03:8e:02:29:e1:
                    e6:14:d1:c6:4a:61:5c:f5:91:de:69:14:c7:8e:41:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:51:13:2A:A1:78:1D:20:13:F8:4F:41:81:60:F2:16:97:65:D3:44
            X509v3 Authority Key Identifier:
                keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/323430333a666630303a3a2f33322d3438203d3e203234353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ff00::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:40:5a:36:ea:d6:b8:33:12:15:5f:ba:5e:05:d9:9a:cf:05:
         97:7f:a3:67:10:50:a3:2a:dd:2e:fe:7f:ab:dd:2b:01:ce:43:
         c3:e6:dd:db:d4:d2:3c:b6:02:f2:3f:d6:3b:98:6e:4d:b1:5a:
         c3:b0:03:80:aa:34:f0:bc:6c:72:fd:5d:da:d8:b5:3a:84:d4:
         e4:b3:d8:46:d5:f3:70:fc:5e:9b:91:09:de:ca:b2:96:60:11:
         39:68:57:96:9d:59:92:4d:ba:c1:ac:8e:e3:0d:ee:79:0a:bb:
         0f:4a:22:02:fe:34:21:8f:85:86:1d:5c:4a:43:fe:0e:d3:d7:
         d8:aa:79:a6:5d:cb:83:ea:35:47:d5:0a:44:da:98:cf:dd:84:
         27:76:31:59:54:3b:03:bc:b4:4e:70:9b:0b:f5:27:de:43:11:
         79:e9:27:1b:73:40:1c:41:ee:17:4d:00:28:8c:04:bc:24:60:
         56:23:07:eb:d7:c5:45:3e:93:51:3a:85:2b:80:5e:4b:e6:9d:
         93:af:4d:09:11:dd:8b:55:74:3e:0e:2b:2d:1e:77:8e:99:db:
         f4:c7:16:1d:d3:fb:c1:a4:d5:aa:2a:aa:44:75:0e:d7:37:74:
         85:f1:27:fd:2b:cd:e3:3a:c4:0c:89:85:81:ef:97:f1:3a:a2:
         6e:b4:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net