Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa
File:                     323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (raw, json)
Hash identifier:          eQ5WMRJPy7gKupW5F4m6uPUC6SkCMo1WY0hvFb3YFm0=
Subject key identifier:   7F:F4:82:7F:17:D8:D5:C9:75:A0:0B:C6:A5:3C:2C:C4:D8:A1:AA:8D
Certificate issuer:       /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA
Certificate serial:       027B4CA778C23E7F3C2BCEFA0B35CBD286BD64A1
Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa
Signing time:             Wed 09 Apr 2025 09:00:00 +0000
ROA not before:           Wed 09 Apr 2025 08:55:00 +0000
ROA not after:            Wed 08 Apr 2026 09:00:00 +0000
asID:                     141069
IP address blocks:        2406:75c0:ffff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl
                          rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7b:4c:a7:78:c2:3e:7f:3c:2b:ce:fa:0b:35:cb:d2:86:bd:64:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA
        Validity
            Not Before: Apr  9 08:55:00 2025 GMT
            Not After : Apr  8 09:00:00 2026 GMT
        Subject: CN=7FF4827F17D8D5C975A00BC6A53C2CC4D8A1AA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:15:9a:45:16:62:9d:e1:bd:cd:de:9a:34:
                    7f:46:b2:c0:6c:c8:e2:0e:2a:9d:2f:49:27:a4:1a:
                    52:58:68:9c:3a:f7:46:58:c0:6e:b1:e5:f9:ef:2e:
                    e0:b5:5c:17:3a:32:8b:c6:88:7f:08:32:4e:9d:07:
                    fb:9c:86:47:62:eb:24:b2:1f:a6:f2:63:6e:01:6f:
                    d0:4a:a2:04:ab:72:cf:78:f1:10:fc:cd:9a:c3:ad:
                    b7:a2:25:b8:1d:a7:d6:44:8a:c3:46:c0:1a:97:d7:
                    a3:c3:af:43:07:50:43:04:46:40:e5:0b:47:6a:55:
                    86:c7:b7:df:e0:d1:54:fe:2f:bf:08:bc:fd:89:f4:
                    92:02:90:05:91:e1:41:da:24:4d:47:fa:3a:69:9c:
                    66:20:fd:4c:16:72:55:6d:a2:9f:19:a0:f4:8d:dc:
                    f4:12:ec:0e:f6:d5:40:7d:5a:97:5a:7a:6d:07:91:
                    74:5b:13:3f:66:db:f9:aa:5c:92:eb:1b:8c:87:c2:
                    fc:ff:7b:a8:be:3b:eb:f7:ab:3d:16:68:aa:0c:dc:
                    ae:6e:ae:72:6a:25:dd:68:aa:50:8d:68:cd:8a:66:
                    eb:02:c6:c7:15:3c:ce:dd:08:14:c2:aa:3b:26:b1:
                    d5:29:33:d8:1b:22:0a:1d:df:ce:5c:82:87:bf:f2:
                    18:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F4:82:7F:17:D8:D5:C9:75:A0:0B:C6:A5:3C:2C:C4:D8:A1:AA:8D
            X509v3 Authority Key Identifier:
                keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:75c0:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:4d:2c:00:08:9b:6b:0e:04:86:cf:b7:26:29:81:d8:8c:e4:
         9a:fe:84:22:96:17:85:72:4f:7b:63:f1:da:43:50:de:29:22:
         83:3b:65:90:9f:8b:22:d9:82:a9:4b:28:de:09:a8:45:91:fe:
         cf:ba:0b:ce:82:6c:84:f1:d9:2c:61:23:30:cf:93:5d:8a:7c:
         10:40:dd:ad:2f:d8:06:bf:b9:35:40:99:30:8c:d9:ab:21:9f:
         f8:0c:90:5c:a3:e3:44:6a:f7:72:68:e8:dc:97:77:2c:4c:01:
         de:a2:5e:47:4f:02:a7:04:ad:97:7d:9e:4a:33:86:0c:6a:3e:
         38:46:12:aa:9d:95:56:d6:ee:0a:3b:46:2c:55:08:e0:9f:57:
         57:42:f6:eb:28:a7:07:e7:38:9d:9b:b7:e5:ab:79:01:16:b0:
         79:11:81:61:9c:fe:55:b1:bd:42:36:5e:fc:d6:1e:3c:d2:2d:
         6b:85:78:a2:7a:06:fd:a0:1b:6c:3d:c2:e0:45:fd:88:0d:54:
         e7:f5:6d:f5:8e:03:8c:eb:ef:40:b8:4e:9f:07:07:49:0f:c9:
         e0:5e:ef:68:6a:7c:a2:10:8b:02:e8:89:d4:23:0a:e4:51:32:
         a1:8a:f4:22:e7:a1:f7:f5:e6:cf:99:f4:82:7c:72:15:89:82:
         25:c8:97:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:29 2025 by rpki-client on console.sobornost.net