Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa
File:                     323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa (raw, json)
Hash identifier:          vdW3QTcBsIPY6dF/jSl1kcP+cWlLsmSjo55p09Ujwos=
Subject key identifier:   DF:7E:38:D0:7C:16:75:79:EA:B5:9A:FC:F6:D6:63:BF:6F:F9:39:F6
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       34BA49DE2860CCD698F40EC40EBEF84C2783E1F9
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa
Signing time:             Wed 16 Apr 2025 04:17:31 +0000
ROA not before:           Wed 16 Apr 2025 04:12:31 +0000
ROA not after:            Wed 15 Apr 2026 04:17:31 +0000
asID:                     38515
IP address blocks:        2402:600:5414::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ba:49:de:28:60:cc:d6:98:f4:0e:c4:0e:be:f8:4c:27:83:e1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Apr 16 04:12:31 2025 GMT
            Not After : Apr 15 04:17:31 2026 GMT
        Subject: CN=DF7E38D07C167579EAB59AFCF6D663BF6FF939F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:4c:6a:da:04:6f:bc:27:5b:f6:81:69:3a:
                    37:5d:d8:42:7f:eb:4f:0c:ad:51:ba:32:16:dd:6c:
                    8d:2f:70:9e:be:a0:1f:66:a6:70:0c:e9:e3:a8:19:
                    00:d3:84:ed:46:6a:f0:a4:44:48:c9:4c:e0:aa:13:
                    7b:fc:0a:54:f5:5d:3f:c9:04:05:9c:61:6d:28:68:
                    73:23:bd:36:c0:cc:c1:ef:44:e4:c5:3c:c8:25:19:
                    b9:71:63:21:53:9a:bf:5b:5c:54:7e:47:fc:ad:98:
                    76:87:eb:36:66:78:b5:2b:5d:5c:cc:c9:51:14:25:
                    81:40:1b:82:ad:99:3d:7c:9c:75:34:29:82:2c:f5:
                    7e:fd:4c:2d:b4:f1:4b:59:19:fc:12:61:a1:59:ca:
                    82:1e:a9:b2:f5:69:80:f8:35:12:9b:f9:6d:6d:61:
                    4b:4e:9d:ec:7e:a9:d5:2d:1a:3d:03:98:e4:c1:a9:
                    72:fa:af:fe:4f:e8:22:21:4e:23:80:a8:58:13:ad:
                    44:56:ef:55:c3:57:90:30:16:ac:64:52:ab:0e:9c:
                    f0:ca:bb:9f:36:30:16:9e:a4:21:06:be:0d:4d:9e:
                    ba:4a:70:e9:ce:f7:ad:f4:04:24:48:da:9c:77:3a:
                    f1:de:f7:00:5c:52:aa:22:6a:70:49:b9:0b:50:4b:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7E:38:D0:7C:16:75:79:EA:B5:9A:FC:F6:D6:63:BF:6F:F9:39:F6
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:600:5414::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:ed:be:d3:7d:fb:6c:8e:ca:71:ec:3f:a4:66:6f:91:f3:86:
         bf:6c:4d:2c:53:e4:40:89:fa:4d:97:aa:d3:5c:74:55:9b:74:
         d6:5d:e5:0f:d0:19:69:0d:e0:f0:96:d3:ec:9e:9a:d2:49:43:
         3c:99:51:65:60:6f:da:6b:98:af:a9:ff:62:9f:3b:ec:d3:ed:
         35:e4:35:27:50:e9:0d:b4:c2:0b:a8:84:33:15:27:1f:de:c4:
         c2:e3:e8:34:bc:9f:56:89:c4:63:a9:84:de:30:9d:f3:43:23:
         86:e1:c5:20:b8:89:13:62:c9:b6:61:65:ac:e8:07:3f:c7:50:
         a2:08:8b:b5:1d:b8:9e:8e:fe:14:0f:1a:66:8f:1a:d3:07:66:
         a9:4a:b7:98:ce:7f:58:15:a8:f4:54:56:b2:fd:b4:70:06:f4:
         d0:0e:4a:3e:2e:66:d5:bc:36:c9:99:43:1d:37:68:37:c3:78:
         e7:27:ea:ad:aa:18:d9:72:01:dc:27:2c:ee:1e:f7:21:e7:6c:
         f6:dd:93:d4:ed:77:fa:17:1f:08:f5:6b:ba:15:de:e7:1a:d5:
         07:bf:dc:b8:79:7a:9a:df:56:84:b0:2f:92:42:18:c2:9b:4e:
         34:c7:08:a7:e7:33:59:2c:04:cc:57:b9:42:fb:0a:7e:4c:27:
         34:9f:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net