Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa
File:                     323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (raw, json)
Hash identifier:          h0uU2AKusrQHbjkburXzXPAyds6K64Q0hGEkTa5sQco=
Subject key identifier:   A8:9B:4B:4E:88:D1:59:2D:C6:68:28:19:62:A1:DB:2C:C3:EF:88:C1
Certificate issuer:       /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial:       1C007295F16A39DC37C82BF152AD0194027EDC21
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa
Signing time:             Wed 16 Apr 2025 10:00:00 +0000
ROA not before:           Wed 16 Apr 2025 09:55:00 +0000
ROA not after:            Wed 15 Apr 2026 10:00:00 +0000
asID:                     139419
IP address blocks:        2405:6740:190::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
                          rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:00:72:95:f1:6a:39:dc:37:c8:2b:f1:52:ad:01:94:02:7e:dc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
        Validity
            Not Before: Apr 16 09:55:00 2025 GMT
            Not After : Apr 15 10:00:00 2026 GMT
        Subject: CN=A89B4B4E88D1592DC668281962A1DB2CC3EF88C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:d7:6a:15:98:58:c1:fb:be:d6:49:5a:19:
                    ab:4f:57:b4:57:b5:3d:cc:9b:34:04:04:d3:db:93:
                    62:6a:23:7b:c5:d0:ab:de:e4:22:f2:bf:18:14:c1:
                    82:86:11:94:b0:fd:3d:fa:5b:5b:1c:6a:ad:2b:e4:
                    59:fc:68:dc:6c:d0:ca:54:05:88:39:04:55:6f:25:
                    c1:f2:17:e7:fd:b7:f1:70:5a:04:84:81:40:dc:50:
                    0b:c3:a6:5b:b8:a8:58:d4:d7:32:f9:e8:70:64:f7:
                    96:8e:0f:94:56:ae:13:a9:3d:1c:8b:3a:40:61:58:
                    e1:9e:1a:9b:f0:eb:db:64:ab:88:51:2e:39:3b:3b:
                    fe:a6:54:af:1d:5a:24:78:70:a3:5a:af:c9:33:49:
                    37:af:5b:6e:00:3a:a4:4b:1b:3b:f5:fb:2d:64:8f:
                    7d:53:29:ad:ff:08:5c:d6:c0:c3:43:bd:3c:c7:0a:
                    56:51:c4:d0:de:34:77:12:7b:ec:c2:ea:38:61:53:
                    63:53:bf:df:0a:55:b5:51:f0:f0:8e:5f:a6:12:88:
                    6f:5e:48:cc:29:7e:93:a0:85:a4:ae:8b:bf:20:83:
                    4f:89:e4:05:51:ff:b7:35:59:0c:08:06:8d:5b:0e:
                    c9:67:63:f8:39:8e:cf:ab:dd:91:53:f5:57:c5:e6:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9B:4B:4E:88:D1:59:2D:C6:68:28:19:62:A1:DB:2C:C3:EF:88:C1
            X509v3 Authority Key Identifier:
                keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:6740:190::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:4d:1f:4d:01:50:84:4c:a7:f9:6a:a1:54:b2:c8:97:12:ae:
         5d:05:eb:60:13:7a:a7:da:30:ed:85:99:9b:17:69:11:76:67:
         dc:4e:75:27:58:64:97:54:d1:f3:c8:5d:ef:26:97:93:43:5a:
         c0:ea:7a:f2:0b:a1:7e:70:fd:09:f4:37:6a:a7:04:0e:03:35:
         46:8c:fb:a7:b1:3d:94:9b:6f:36:84:9c:ab:93:45:0d:1b:ad:
         ac:2f:75:3a:7a:44:21:cd:4d:d4:cb:39:5f:d8:2e:a5:39:24:
         5d:99:66:f2:d7:bd:21:1e:3c:ad:7d:e6:f0:de:8e:c9:03:9b:
         7a:81:fb:b9:e9:c2:ee:7b:ac:87:3f:c8:5a:c9:2e:0a:59:46:
         8d:d8:b8:12:d8:c4:36:0e:75:60:71:15:0d:ec:d8:9a:f3:72:
         33:04:8b:a0:75:a5:6d:f7:f3:8f:a1:6e:de:bb:91:77:34:56:
         82:70:7a:cc:53:a5:96:54:57:05:33:89:92:d9:eb:55:b8:50:
         2c:d9:45:f3:99:19:22:cb:24:dc:e3:ba:b5:c5:f5:1c:9b:f7:
         a3:e8:87:80:ad:71:46:d1:35:53:96:04:30:c5:fb:7f:f7:ae:
         a2:6a:73:d7:d8:3d:bd:28:85:d9:fd:7b:76:7e:1a:f4:ac:b5:
         9d:4f:7c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net