Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa
File:                     323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa (raw, json)
Hash identifier:          lR+WSBiL7cOFUb1JcRW+5/d+PDThjLOWPJrqzwsQquY=
Subject key identifier:   99:7E:D2:1A:D8:E7:B9:48:DF:6B:C7:A2:B6:A5:DF:70:5E:3F:DC:0E
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       27CE475F1E1EC694C394911AC0412FA23086B11E
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa
Signing time:             Wed 16 Apr 2025 04:17:49 +0000
ROA not before:           Wed 16 Apr 2025 04:12:49 +0000
ROA not after:            Wed 15 Apr 2026 04:17:49 +0000
asID:                     38515
IP address blocks:        2402:600:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ce:47:5f:1e:1e:c6:94:c3:94:91:1a:c0:41:2f:a2:30:86:b1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Apr 16 04:12:49 2025 GMT
            Not After : Apr 15 04:17:49 2026 GMT
        Subject: CN=997ED21AD8E7B948DF6BC7A2B6A5DF705E3FDC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6e:2c:f5:22:53:82:c8:a2:56:14:63:99:d5:
                    4f:73:0d:d3:c0:71:81:f4:8a:be:2d:33:ef:84:ca:
                    bb:33:26:74:29:aa:17:68:7b:5a:8e:00:79:c4:bd:
                    e0:44:18:49:83:27:bf:1a:c6:b5:eb:ee:8b:7e:e1:
                    d4:fc:b3:4a:7c:cf:03:1d:dc:33:d0:bb:07:b6:95:
                    48:43:b6:13:a1:0c:69:c4:4e:d0:47:56:b1:0b:76:
                    5a:07:2c:93:97:f1:d2:cf:ac:06:2e:44:97:51:18:
                    43:05:11:f7:1e:da:00:a8:be:69:1d:3e:34:33:49:
                    8b:66:6e:b0:83:b3:3d:a1:c5:ca:05:e0:ed:9c:02:
                    e4:7d:ee:83:ba:03:28:dd:a9:a9:bd:54:ba:7f:45:
                    8e:f2:9d:c5:fa:88:6a:47:99:ce:89:14:59:93:f6:
                    58:93:38:16:9e:bb:1d:37:81:38:da:d4:a6:e2:37:
                    f1:e7:60:d6:b2:d9:6e:ed:e9:b2:11:8d:a8:7a:b1:
                    f4:aa:ea:bc:16:d9:90:ce:5b:84:88:cf:06:11:4e:
                    f0:6f:6b:42:f6:2e:d2:db:ae:24:0b:7f:ee:9c:22:
                    60:ce:5c:f3:4e:d0:2a:76:0b:7c:0a:1a:31:fc:70:
                    0d:df:93:b1:4b:d0:08:9a:31:e5:0d:8d:c2:c0:4a:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7E:D2:1A:D8:E7:B9:48:DF:6B:C7:A2:B6:A5:DF:70:5E:3F:DC:0E
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:600:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:45:85:ce:3d:de:98:52:d5:9c:bd:a2:d5:41:97:f9:f2:a9:
         b0:8a:37:b5:85:c8:f0:98:76:d1:2e:f5:c6:f4:ca:73:9a:38:
         e1:c4:5d:1d:4f:0c:98:6e:7b:82:d1:13:13:5d:a6:80:eb:e8:
         04:21:0c:a9:cd:ca:8f:52:60:21:e2:c3:71:b1:68:cf:a5:50:
         f4:d3:fe:2e:53:ee:18:63:5d:e2:1f:82:b9:6a:74:b8:48:a7:
         45:15:68:3d:83:eb:7d:10:83:61:fb:80:f2:60:bd:97:11:74:
         bf:fb:27:ba:97:8c:fd:6f:4c:ab:aa:c4:06:52:bd:36:c6:a2:
         e2:24:2b:69:79:28:02:6c:f8:81:83:8b:7f:a9:26:41:44:59:
         e4:d6:12:d7:b3:66:50:64:c9:b4:4e:9a:4c:ec:42:e3:41:9e:
         c2:4a:56:02:26:23:bf:78:76:1c:fd:95:4b:3b:3c:76:be:85:
         a1:72:7b:56:ea:8e:29:3c:fb:c0:93:5c:ba:25:c7:f9:f1:fe:
         f8:be:11:78:ee:3a:18:41:30:07:19:a7:59:1c:6b:79:c5:da:
         35:3e:80:ff:13:c6:cd:77:dc:84:be:e5:4a:f7:9f:1c:2d:df:
         c9:52:0c:90:38:f1:fa:83:b7:b8:48:0c:72:90:bf:1c:5c:e1:
         29:e3:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net