Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa
File:                     323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa (raw, json)
Hash identifier:          lmN8CKwnpjABLBKuKVDCz9e5H4GmlgOLsUei3+Y0saA=
Subject key identifier:   0E:00:65:5C:14:07:8C:43:B6:C3:5B:75:33:C1:A0:82:F0:F4:75:1A
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       063C186980FA9F0AFF0FE90C67AC7D88372B4E42
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa
Signing time:             Wed 16 Apr 2025 04:18:27 +0000
ROA not before:           Wed 16 Apr 2025 04:13:27 +0000
ROA not after:            Wed 15 Apr 2026 04:18:27 +0000
asID:                     38515
IP address blocks:        2402:600:d000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3c:18:69:80:fa:9f:0a:ff:0f:e9:0c:67:ac:7d:88:37:2b:4e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Apr 16 04:13:27 2025 GMT
            Not After : Apr 15 04:18:27 2026 GMT
        Subject: CN=0E00655C14078C43B6C35B7533C1A082F0F4751A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:32:54:f2:4c:47:e8:30:2f:cc:8f:67:7c:
                    90:ee:dc:e2:03:ef:76:51:8c:f4:d2:c6:fa:44:63:
                    5a:fb:3e:5c:35:d1:59:8a:85:a5:6b:76:f3:d9:a6:
                    ff:61:bc:da:25:2a:7f:1a:4b:08:73:78:37:ce:df:
                    c7:1f:85:47:de:9d:ca:66:2f:d9:69:8a:25:cc:07:
                    ed:5b:a0:1e:b0:91:44:e6:22:20:f8:5c:47:3b:96:
                    b9:45:9c:28:95:3e:92:a6:47:6c:66:9b:78:1e:9b:
                    41:28:3d:43:c1:ba:e1:da:77:82:bd:d9:0f:ed:1d:
                    26:43:77:42:5b:30:fa:40:2d:4a:ac:6d:26:83:2a:
                    a6:9c:fe:05:f0:14:17:ed:8b:6c:00:2c:63:66:d8:
                    af:c5:6d:0a:93:fd:fa:8c:53:89:8d:30:00:86:7c:
                    0a:c2:22:d2:22:df:94:81:9a:4e:db:86:e4:7e:11:
                    d9:ef:aa:35:89:77:5e:b2:47:00:d1:22:2d:23:b5:
                    9f:6c:40:fd:64:34:58:bd:e6:97:fd:9e:c2:37:35:
                    b3:9c:1d:ca:85:24:c4:0a:11:db:ba:f4:1d:e9:8b:
                    db:3d:f6:d5:37:60:74:9e:3a:11:65:c9:5d:1e:d5:
                    b7:0e:9a:1e:7e:f0:14:59:4e:bf:13:a3:73:63:c2:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:00:65:5C:14:07:8C:43:B6:C3:5B:75:33:C1:A0:82:F0:F4:75:1A
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:600:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:e5:7c:6c:28:9b:6a:73:90:b9:08:0a:77:61:82:8d:5c:24:
         98:26:a1:d4:61:2a:98:f7:bd:28:3e:f6:88:4c:d4:bb:6a:d4:
         42:a7:97:37:23:ae:b6:25:88:dd:0d:ef:82:f4:67:bd:44:3f:
         02:80:54:6b:86:d1:ea:cb:3a:33:d6:e5:40:5c:58:0a:03:42:
         9b:58:45:48:0e:ba:51:03:d5:ca:93:1f:d6:f3:37:92:9d:49:
         7f:01:e5:8c:26:7a:56:a8:09:50:55:3c:11:71:da:e8:30:7b:
         e3:79:3b:1b:cf:52:56:f1:dd:41:f9:06:25:70:87:05:0e:d6:
         e3:bd:ee:2d:43:a7:94:a2:1a:f1:60:11:af:50:35:03:d9:6d:
         d3:66:8d:b8:2b:0e:f4:63:4a:cb:5a:40:e4:f3:3a:b3:b7:e6:
         7e:b9:fe:06:23:13:53:e5:81:de:9a:d4:63:37:e0:01:e5:7e:
         bb:21:a0:03:9b:ad:89:b8:ff:05:90:b7:cf:7d:ed:44:f9:a8:
         35:46:f2:b3:b3:a9:37:56:39:c4:9e:3a:72:f8:f9:81:41:b2:
         0b:ce:4e:23:00:fb:08:e9:df:34:82:ff:2c:1b:57:ce:94:88:
         48:b4:c3:b6:6a:87:94:53:fa:93:94:73:44:91:2a:7b:91:24:
         12:52:84:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net