Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa
File:                     323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (raw, json)
Hash identifier:          N/xuk/uVyqJj7Q+uJ2smPf8FwkyHScFvJet2vyKpC0c=
Subject key identifier:   98:DC:66:98:2E:49:1A:3C:7E:D7:B7:B7:74:CF:42:41:51:75:9C:F8
Certificate issuer:       /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial:       7C3A931DA1C5014D1D4729181E2517424FA7E594
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa
Signing time:             Wed 16 Apr 2025 10:00:00 +0000
ROA not before:           Wed 16 Apr 2025 09:55:00 +0000
ROA not after:            Wed 15 Apr 2026 10:00:00 +0000
asID:                     139419
IP address blocks:        2405:6740:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
                          rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3a:93:1d:a1:c5:01:4d:1d:47:29:18:1e:25:17:42:4f:a7:e5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
        Validity
            Not Before: Apr 16 09:55:00 2025 GMT
            Not After : Apr 15 10:00:00 2026 GMT
        Subject: CN=98DC66982E491A3C7ED7B7B774CF424151759CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:d2:b9:30:5b:13:36:42:2d:c3:c7:b5:9f:
                    b4:3e:80:9b:06:da:a9:8e:ba:6c:94:10:21:6c:95:
                    c4:0c:3d:08:77:c4:61:69:83:e6:63:dd:e2:d0:68:
                    9c:e2:93:35:ba:78:c6:06:68:27:39:7b:b8:6d:ca:
                    4c:f8:fd:9d:79:3d:d9:fc:fd:26:ca:90:f4:2c:2e:
                    cd:70:d3:5e:73:20:9b:40:2c:43:7b:ae:86:ca:19:
                    54:d4:2a:ec:f7:ef:2c:a5:61:27:a4:7f:f5:a6:91:
                    57:5b:ce:13:6d:ad:77:eb:8b:a6:47:e6:1a:5d:16:
                    a3:66:52:7b:b0:4d:05:9d:69:ce:08:ed:c7:a6:72:
                    96:88:20:5d:1d:3f:38:8b:61:b1:8a:9c:b5:b4:59:
                    57:1a:66:22:ad:95:5c:d6:74:95:fd:93:0e:93:6f:
                    d8:ee:f1:9b:1d:8a:ea:09:ce:ee:e7:7b:46:9c:70:
                    ea:98:86:6a:8a:9f:87:95:77:ba:d3:cd:e0:48:da:
                    1d:c1:53:62:e3:b2:7b:92:74:ff:de:ea:bc:19:70:
                    20:ea:19:b9:3b:4d:8d:da:6b:6b:9e:08:53:a0:34:
                    ba:30:1f:9d:fc:17:3c:65:b6:ff:b1:46:a3:f3:f6:
                    58:87:d6:02:77:56:e2:0c:e0:97:fc:16:42:fc:bd:
                    b8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DC:66:98:2E:49:1A:3C:7E:D7:B7:B7:74:CF:42:41:51:75:9C:F8
            X509v3 Authority Key Identifier:
                keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:6740:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:f7:f0:8a:d3:ff:3e:e0:9c:2e:be:81:f9:49:41:87:8f:
         14:0e:0a:cf:9b:43:63:0d:57:9d:f6:42:70:ef:53:40:d3:36:
         b6:a8:79:1c:fc:99:a9:d9:8c:e2:c7:f1:68:e5:85:bd:a3:02:
         4a:61:b2:49:7f:84:1f:00:50:f0:f5:03:be:8e:b2:3e:bb:6e:
         8a:77:3c:dd:4a:78:65:09:48:12:b3:61:93:ab:93:c0:d7:e8:
         39:a4:eb:98:6b:b8:93:1e:55:a9:cd:9e:32:10:c8:36:8b:0b:
         15:5f:ad:d0:8d:03:b7:d5:4e:0e:f0:c5:d3:55:30:bb:e7:1c:
         05:a7:eb:ca:ca:b5:0d:d2:87:6c:74:9a:5a:eb:42:a9:fc:5c:
         d7:4f:d4:97:27:5c:63:2a:cd:12:93:6b:ef:a5:85:68:99:81:
         5b:93:1b:4c:91:0a:f2:dd:e6:83:d7:1d:30:6b:90:16:ea:82:
         0e:d4:60:a6:40:88:73:f2:5b:32:7e:b7:eb:a8:de:75:a1:e2:
         12:13:c1:c9:cc:80:2f:d9:60:97:89:c7:2e:fe:39:58:c3:73:
         2a:8d:b4:f5:2c:d0:81:7e:46:d2:e4:ff:8d:23:9a:ed:92:d9:
         74:d0:2b:4f:77:eb:95:3d:6a:50:14:4e:47:8c:ba:d7:f9:22:
         90:ec:6b:83
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUfDqTHaHFAU0dRykYHiUXQk+n5ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF
OUNBQTc0RTAeFw0yNTA0MTYwOTU1MDBaFw0yNjA0MTUxMDAwMDBaMDMxMTAvBgNV
BAMTKDk4REM2Njk4MkU0OTFBM0M3RUQ3QjdCNzc0Q0Y0MjQxNTE3NTlDRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgMdK5MFsTNkItw8e1n7Q+gJsG
2qmOumyUECFslcQMPQh3xGFpg+Zj3eLQaJzikzW6eMYGaCc5e7htykz4/Z15Pdn8
/SbKkPQsLs1w015zIJtALEN7robKGVTUKuz37yylYSekf/WmkVdbzhNtrXfri6ZH
5hpdFqNmUnuwTQWdac4I7cemcpaIIF0dPziLYbGKnLW0WVcaZiKtlVzWdJX9kw6T
b9ju8ZsdiuoJzu7ne0accOqYhmqKn4eVd7rTzeBI2h3BU2LjsnuSdP/e6rwZcCDq
Gbk7TY3aa2ueCFOgNLowH538Fzxltv+xRqPz9liH1gJ3VuIM4Jf8FkL8vbhVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUmNxmmC5JGjx+17e3dM9CQVF1nPgwHwYDVR0j
BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF
N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB
QTc0RS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3MTNmYzE3LTU3ZjEtNDY3MS04
YTE2LWY4NThkZGQ3ZGE0My8wLzMyMzQzMDM1M2EzNjM3MzQzMDNhMzEzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzQzMTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAVn
QAEAMA0GCSqGSIb3DQEBCwUAA4IBAQBdnvfwitP/PuCcLr6B+UlBh48UDgrPm0Nj
DVed9kJw71NA0za2qHkc/Jmp2Yzix/Fo5YW9owJKYbJJf4QfAFDw9QO+jrI+u26K
dzzdSnhlCUgSs2GTq5PA1+g5pOuYa7iTHlWpzZ4yEMg2iwsVX63QjQO31U4O8MXT
VTC75xwFp+vKyrUN0odsdJpa60Kp/FzXT9SXJ1xjKs0Sk2vvpYVomYFbkxtMkQry
3eaD1x0wa5AW6oIO1GCmQIhz8lsyfrfrqN51oeISE8HJzIAv2WCXiccu/jlYw3Mq
jbT1LNCBfkbS5P+NI5rtktl00CtPd+uVPWpQFE5HjLrX+SKQ7GuD
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net