Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa
File:                     323430313a333234303a3a2f33322d3438203d3e203633343930.roa (raw, json)
Hash identifier:          V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=
Subject key identifier:   73:C5:38:ED:B9:79:86:E5:00:75:A3:C2:A3:02:FE:10:0C:25:40:A9
Certificate issuer:       /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
Certificate serial:       390F830E6D250431CB46E48AFCFCB73DF83AB20E
Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa
Signing time:             Tue 08 Apr 2025 04:01:16 +0000
ROA not before:           Tue 08 Apr 2025 03:56:16 +0000
ROA not after:            Tue 07 Apr 2026 04:01:16 +0000
asID:                     63490
IP address blocks:        2401:3240::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl
                          rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0f:83:0e:6d:25:04:31:cb:46:e4:8a:fc:fc:b7:3d:f8:3a:b2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
        Validity
            Not Before: Apr  8 03:56:16 2025 GMT
            Not After : Apr  7 04:01:16 2026 GMT
        Subject: CN=73C538EDB97986E50075A3C2A302FE100C2540A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6d:7a:0f:1d:69:56:cd:d3:ea:40:df:15:a2:
                    ae:db:67:c1:bf:51:6b:18:5d:31:c4:85:21:c2:d5:
                    41:3c:b4:a3:e1:b9:b9:b6:da:d9:54:90:a9:67:66:
                    0b:03:b6:a4:82:31:ef:5d:59:f3:2d:a4:ff:dd:22:
                    1b:ec:bf:e3:30:b0:2c:cf:0f:9d:b5:39:ba:fb:65:
                    13:ca:95:eb:a8:cc:30:30:02:d4:45:b7:f3:cd:82:
                    31:77:d2:7e:d1:84:86:08:e6:ff:a3:cc:86:56:69:
                    f3:a7:11:ec:43:3d:06:9d:82:c7:8c:80:d4:27:5a:
                    e6:f9:45:2a:8e:68:1c:2a:50:0e:d4:39:53:9e:64:
                    5d:52:c3:42:89:dd:c2:40:72:aa:df:db:63:cc:d8:
                    7b:22:fa:ac:f7:bd:d8:6f:a6:ea:fc:8d:50:04:78:
                    1d:d9:17:84:93:7c:ae:09:d0:31:04:eb:99:5c:9a:
                    88:6d:11:ec:e0:c1:36:8d:04:8b:c3:f4:07:eb:c4:
                    4b:d6:9d:86:54:5c:d2:b7:c3:76:01:62:74:77:fd:
                    ae:21:5b:14:bd:e1:fc:05:df:9c:4d:50:c5:86:ea:
                    b2:09:b8:fd:cc:88:a4:75:96:fd:82:bd:0e:d2:0c:
                    61:88:ad:1b:3e:af:90:2e:d1:ab:bb:41:e5:30:80:
                    50:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C5:38:ED:B9:79:86:E5:00:75:A3:C2:A3:02:FE:10:0C:25:40:A9
            X509v3 Authority Key Identifier:
                keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3240::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:05:76:91:b1:e5:b0:46:63:28:0d:eb:8e:a0:31:2e:3f:3b:
         57:32:c6:0a:98:95:b8:05:03:d5:14:3a:8d:cc:8f:43:24:a0:
         9f:c8:2d:e1:1d:44:61:45:cd:42:60:32:35:d8:2d:3d:c9:13:
         08:55:d1:f1:85:d6:45:0f:b4:42:52:90:84:8d:f6:9a:93:0b:
         dd:f5:a9:1f:7e:12:9d:f2:99:1c:80:0e:19:76:7f:67:19:31:
         b1:7e:48:7b:1f:b0:a8:23:58:d4:e2:af:d7:d1:e1:e1:e6:b6:
         82:b8:98:6a:10:d7:07:05:ca:ca:0c:65:9f:38:24:85:97:24:
         a7:0c:a0:ca:d3:0f:98:bb:1e:6a:4a:10:d2:fe:f9:8c:a9:eb:
         12:69:66:d5:2a:68:dc:7e:8f:77:d5:b3:a1:bd:36:3d:d4:cb:
         f3:2d:02:a2:fd:1c:39:c0:5f:69:63:99:b1:1a:c7:55:01:5c:
         65:0a:d3:8d:a4:d8:3f:c8:4f:7d:6f:30:8d:5e:63:d0:d1:14:
         2d:5f:e6:af:de:31:fe:fa:3a:fb:d1:62:e5:4e:f1:4b:e8:3d:
         53:36:03:47:ea:1b:1d:8d:55:77:b0:97:5c:11:cf:2b:74:0d:
         b1:46:44:0f:b0:46:a7:4d:99:40:af:b1:e5:68:c0:be:99:64:
         ce:4e:a9:4a
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUOQ+DDm0lBDHLRuSK/Py3Pfg6sg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE
ODkzRjFGQjAeFw0yNTA0MDgwMzU2MTZaFw0yNjA0MDcwNDAxMTZaMDMxMTAvBgNV
BAMTKDczQzUzOEVEQjk3OTg2RTUwMDc1QTNDMkEzMDJGRTEwMEMyNTQwQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZbXoPHWlWzdPqQN8Voq7bZ8G/
UWsYXTHEhSHC1UE8tKPhubm22tlUkKlnZgsDtqSCMe9dWfMtpP/dIhvsv+MwsCzP
D521Obr7ZRPKleuozDAwAtRFt/PNgjF30n7RhIYI5v+jzIZWafOnEexDPQadgseM
gNQnWub5RSqOaBwqUA7UOVOeZF1Sw0KJ3cJAcqrf22PM2Hsi+qz3vdhvpur8jVAE
eB3ZF4STfK4J0DEE65lcmohtEezgwTaNBIvD9AfrxEvWnYZUXNK3w3YBYnR3/a4h
WxS94fwF35xNUMWG6rIJuP3MiKR1lv2CvQ7SDGGIrRs+r5Au0au7QeUwgFB1AgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUc8U47bl5huUAdaPCowL+EAwlQKkwHwYDVR0j
BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy
NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz
RjFGQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5ZTM2MDU2LWYwOTctNDlhNy1i
ZDIzLTNkNzExZTg5ZjMwNS8wLzMyMzQzMDMxM2EzMzMyMzQzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDM2MzMzNDM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkATJAMA0GCSqGSIb3
DQEBCwUAA4IBAQAqBXaRseWwRmMoDeuOoDEuPztXMsYKmJW4BQPVFDqNzI9DJKCf
yC3hHURhRc1CYDI12C09yRMIVdHxhdZFD7RCUpCEjfaakwvd9akffhKd8pkcgA4Z
dn9nGTGxfkh7H7CoI1jU4q/X0eHh5raCuJhqENcHBcrKDGWfOCSFlySnDKDK0w+Y
ux5qShDS/vmMqesSaWbVKmjcfo931bOhvTY91MvzLQKi/Rw5wF9pY5mxGsdVAVxl
CtONpNg/yE99bzCNXmPQ0RQtX+av3jH++jr70WLlTvFL6D1TNgNH6hsdjVV3sJdc
Ec8rdA2xRkQPsEanTZlAr7HlaMC+mWTOTqlK
-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:22 2025 by rpki-client on console.sobornost.net