Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a3830303a3a2f33382d3338203d3e20313333373938.roa
File:                     323430323a353638303a3830303a3a2f33382d3338203d3e20313333373938.roa (raw, json)
Hash identifier:          kspnEB9+DKDROqo6O7FCPw5dpxIIIaRaIjGcxS2B3y0=
Subject key identifier:   B8:B9:7A:2D:68:5F:47:B1:F5:13:F3:6A:96:2C:6B:7B:F7:F4:BE:EB
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       16E4F3971C5EB22FDE4537304E7DEAA4DC50ACD0
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a3830303a3a2f33382d3338203d3e20313333373938.roa
Signing time:             Fri 04 Apr 2025 02:06:59 +0000
ROA not before:           Fri 04 Apr 2025 02:01:59 +0000
ROA not after:            Fri 03 Apr 2026 02:06:59 +0000
asID:                     133798
IP address blocks:        2402:5680:800::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 05:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e4:f3:97:1c:5e:b2:2f:de:45:37:30:4e:7d:ea:a4:dc:50:ac:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Apr  4 02:01:59 2025 GMT
            Not After : Apr  3 02:06:59 2026 GMT
        Subject: CN=B8B97A2D685F47B1F513F36A962C6B7BF7F4BEEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:8d:23:46:4d:46:f9:52:43:62:9f:74:e6:
                    56:9b:75:5a:88:fb:d4:75:b5:58:cb:37:2c:72:10:
                    ce:4e:d2:32:04:39:90:44:d1:dc:5d:02:fb:9f:7a:
                    32:4d:0b:81:1e:86:f8:64:2e:48:aa:54:bf:bf:dd:
                    de:41:3d:a7:17:c4:d1:fb:70:28:eb:b9:6a:34:5b:
                    b9:7e:76:75:35:a9:af:c6:16:8b:68:21:e0:28:44:
                    0f:39:3e:8a:2a:e9:76:9f:ac:77:b4:4d:8b:18:b1:
                    30:9d:6b:58:a7:e4:d1:1d:88:67:77:c7:da:d7:65:
                    1f:82:4e:bb:75:10:23:47:f0:94:67:dc:d9:cc:ba:
                    21:d7:f1:5c:aa:27:88:9c:e0:a6:ad:74:e5:17:34:
                    22:19:22:13:85:c1:b5:7f:63:e9:cd:d9:01:c2:a9:
                    12:64:ad:77:da:c4:68:60:44:df:c2:3c:b3:d8:e4:
                    a0:ac:c5:df:91:14:b2:1f:ba:2b:0f:85:0e:a2:47:
                    59:a5:0e:66:17:86:14:d7:b5:45:61:46:f2:27:07:
                    11:cf:49:b2:41:1c:f8:40:39:91:4a:69:e3:eb:68:
                    f3:7c:b6:50:47:8b:65:49:03:1b:69:2f:4f:a3:7d:
                    36:5a:eb:6d:26:3c:82:c5:a0:80:ee:49:92:fc:bd:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B9:7A:2D:68:5F:47:B1:F5:13:F3:6A:96:2C:6B:7B:F7:F4:BE:EB
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a3830303a3a2f33382d3338203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5680:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         3b:ad:a2:a4:89:53:5f:d4:04:cf:49:1a:d8:91:4d:7c:85:8b:
         52:92:98:97:55:ca:cb:2d:f7:75:de:4c:b9:35:97:54:a6:aa:
         ce:e9:86:7c:d3:a1:fa:db:b1:4b:59:00:93:4f:da:63:ab:b0:
         a1:eb:ef:7a:94:80:24:61:7e:8b:32:65:ad:8f:41:5a:99:82:
         d9:42:6b:fd:dd:de:a6:d9:fa:40:01:66:29:64:e5:bb:8e:1b:
         49:e0:3b:d4:45:33:6d:2f:7f:92:3c:f1:d5:4c:8a:3f:61:97:
         87:e7:50:92:f9:18:bd:2b:cc:31:c8:62:b8:14:cf:bf:b3:9b:
         21:95:7a:df:ec:f8:8c:cf:d7:03:2d:e0:a9:29:b5:96:57:33:
         9f:5f:d1:9b:5c:d0:5f:b2:e2:01:94:c3:ab:55:75:5a:8a:d7:
         bc:10:78:af:a8:25:af:60:e2:84:9c:38:74:26:79:7c:54:76:
         b0:3b:60:4f:14:c9:f2:43:7e:cd:12:b1:3d:4c:e9:6b:9a:f9:
         9b:d5:a5:ef:9f:f1:fe:e9:da:50:58:b1:b8:de:95:39:b9:05:
         2d:e2:9e:ce:9b:36:0d:d8:08:76:90:71:98:d9:ab:88:bc:69:
         8f:eb:32:58:10:d4:76:a2:4d:d1:9f:55:a0:65:89:b6:db:ea:
         2c:81:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net