Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a313030303a3a2f34382d3438203d3e203338353135.roa
File:                     323430323a3630303a313030303a3a2f34382d3438203d3e203338353135.roa (raw, json)
Hash identifier:          7dk3+UbgX607IlNTst1WKsK+D+Kfaq5vP3vfslx3Dv8=
Subject key identifier:   15:4A:95:91:CF:04:E0:56:AF:5D:88:6F:19:4F:7B:D9:7A:63:B7:0F
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       6C5379B22FAFCBF210E351BD63DFDD86C322E2C2
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a313030303a3a2f34382d3438203d3e203338353135.roa
Signing time:             Wed 16 Apr 2025 04:17:11 +0000
ROA not before:           Wed 16 Apr 2025 04:12:11 +0000
ROA not after:            Wed 15 Apr 2026 04:17:11 +0000
asID:                     38515
IP address blocks:        2402:600:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:53:79:b2:2f:af:cb:f2:10:e3:51:bd:63:df:dd:86:c3:22:e2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Apr 16 04:12:11 2025 GMT
            Not After : Apr 15 04:17:11 2026 GMT
        Subject: CN=154A9591CF04E056AF5D886F194F7BD97A63B70F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:3e:ac:4e:0e:81:84:99:4e:5f:81:ba:80:
                    75:4b:61:17:59:78:b6:7c:ee:f4:49:78:7f:43:8c:
                    5f:e3:bf:9c:e1:4c:c6:2c:ea:35:92:ac:56:d7:87:
                    0a:b8:8a:44:20:cb:fd:28:00:69:a2:41:db:88:34:
                    bf:31:da:e1:11:ce:87:fe:19:83:26:91:0b:a2:eb:
                    6e:7b:6a:43:76:10:3e:5a:f9:a0:b1:b1:db:ea:38:
                    64:97:ae:67:f7:74:36:e0:20:37:43:e8:94:84:eb:
                    a7:49:ba:03:d3:1a:41:e3:02:be:1e:73:e9:89:67:
                    45:0c:37:a9:ce:a4:18:90:e4:7b:38:af:27:52:77:
                    e9:88:e7:dc:17:2f:c1:55:ec:29:b3:0a:55:ac:f0:
                    dd:61:3a:66:71:de:81:93:f5:e5:2f:14:c5:95:de:
                    b2:19:01:a2:3c:bf:aa:7b:69:95:c9:12:c4:27:b9:
                    e8:96:bc:b9:42:db:79:58:c2:b6:ce:45:91:b0:fa:
                    2a:6d:b6:2f:db:12:54:53:da:5c:0f:e7:fb:48:55:
                    ca:13:a5:7f:ca:25:69:2f:f0:42:b0:d7:fd:71:f5:
                    95:06:be:82:1a:10:ab:99:1a:59:d3:b2:f8:cf:57:
                    38:87:f3:b9:98:2f:7a:96:a6:76:f3:c8:97:f3:7d:
                    54:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4A:95:91:CF:04:E0:56:AF:5D:88:6F:19:4F:7B:D9:7A:63:B7:0F
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a313030303a3a2f34382d3438203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:600:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:51:22:b3:53:28:4f:68:6a:2f:8d:ab:b0:3a:71:c7:46:6f:
         db:1c:9d:5e:28:e8:77:c4:b8:b3:c0:f9:32:0d:12:26:e4:fb:
         22:2c:2f:31:96:2a:ea:cc:fd:01:5a:34:29:40:79:f8:c6:5a:
         ff:e2:9a:fc:06:a6:20:33:ad:8c:57:f9:00:b1:d5:fc:22:e4:
         41:dd:db:f5:7f:99:4a:be:2a:48:cf:2e:81:b7:c6:bb:6a:a1:
         9a:b8:95:6e:d5:9c:3e:f3:18:ad:98:ec:cb:8a:cf:1f:bd:d6:
         84:8a:11:b3:3d:4f:67:78:95:28:71:00:38:21:78:65:fd:e2:
         bf:de:2b:0b:5d:74:ce:4a:24:79:e5:13:84:7d:a7:6e:1f:a8:
         d0:71:b0:bf:45:bb:67:bc:a9:c5:41:8f:c5:bf:d9:3f:46:3e:
         fe:e7:83:0d:ab:f0:9c:78:08:93:a1:eb:d8:32:df:b6:b9:19:
         f0:08:6d:e0:20:a0:bb:f0:c4:1c:d3:7b:59:3b:60:55:27:f3:
         a6:63:c5:70:4c:bd:f3:fd:72:cc:fd:a8:dd:88:84:cb:2e:ec:
         e4:7e:3a:3c:b5:07:c6:68:22:9c:fc:ba:39:0a:21:95:61:18:
         47:11:4c:66:d4:c9:ef:0d:b7:46:d2:fe:56:dd:de:cf:88:14:
         91:b2:4e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net