Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/323430353a666134303a3a2f33322d3438203d3e20313430333930.roa
File:                     323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (raw, json)
Hash identifier:          SUyxlS+K2vXIzcn7l84Tc7WrZ0T2jVK8F2AGYsMMKAg=
Subject key identifier:   F0:5C:57:AC:C2:EA:8E:6E:16:2D:E3:87:E9:8A:8D:17:1E:BB:FD:98
Certificate issuer:       /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9
Certificate serial:       28DB5D00953FD06D868375E67F17281B47E8BC65
Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/323430353a666134303a3a2f33322d3438203d3e20313430333930.roa
Signing time:             Mon 07 Apr 2025 20:00:01 +0000
ROA not before:           Mon 07 Apr 2025 19:55:01 +0000
ROA not after:            Mon 06 Apr 2026 20:00:01 +0000
asID:                     140390
IP address blocks:        2405:fa40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl
                          rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 05:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:db:5d:00:95:3f:d0:6d:86:83:75:e6:7f:17:28:1b:47:e8:bc:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9
        Validity
            Not Before: Apr  7 19:55:01 2025 GMT
            Not After : Apr  6 20:00:01 2026 GMT
        Subject: CN=F05C57ACC2EA8E6E162DE387E98A8D171EBBFD98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:0e:1a:eb:fa:85:94:7c:dc:94:c4:62:05:
                    f0:d5:61:cf:34:a2:a1:97:18:5f:b8:9e:7b:0a:c6:
                    dc:27:1d:34:27:06:17:4a:4d:e1:4f:a5:0a:eb:62:
                    30:09:f5:d7:d7:81:6a:ac:da:af:7d:cc:ba:d9:c8:
                    d4:c1:a3:87:79:d7:25:af:7f:cc:92:06:48:4e:5a:
                    08:2f:c5:c0:2d:88:55:41:51:0b:14:df:4c:6d:c3:
                    db:e0:cb:c7:ec:cd:b1:3d:b0:ce:1b:c3:91:41:69:
                    9b:81:b6:b1:41:1d:52:07:6a:39:6e:93:92:39:c2:
                    34:7d:b6:b3:3a:0b:2e:da:c6:01:80:6d:1d:59:0c:
                    8d:62:de:58:df:8f:03:86:78:6b:69:8d:39:82:af:
                    41:7e:1f:bd:18:53:4e:99:1a:1e:14:61:84:ba:8c:
                    cb:f3:5a:88:8e:72:64:29:d7:28:9f:7a:9e:01:ef:
                    a6:9d:c3:ca:b9:a7:e1:e9:58:f1:8d:17:fd:63:68:
                    05:d0:98:f2:4a:12:85:85:2f:4f:ca:59:92:84:45:
                    cf:3d:de:2d:0e:8d:35:95:ba:3b:6f:89:0d:f6:90:
                    f4:95:09:3f:84:a7:f0:4a:29:74:59:eb:e2:e5:9b:
                    e4:d7:c6:55:81:18:af:83:19:64:34:da:ab:22:2b:
                    fc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5C:57:AC:C2:EA:8E:6E:16:2D:E3:87:E9:8A:8D:17:1E:BB:FD:98
            X509v3 Authority Key Identifier:
                keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/323430353a666134303a3a2f33322d3438203d3e20313430333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:fa40::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:a5:87:49:00:88:63:05:00:af:04:bc:8b:a2:77:73:58:f8:
         87:b8:15:9a:43:ee:85:0f:cd:7a:4c:8b:77:ce:1a:0b:fc:ed:
         f7:ed:5a:93:0f:ca:8f:dc:32:27:30:06:d4:e0:a2:39:81:a3:
         f6:bf:6d:e9:2d:f1:e0:42:ae:ef:aa:2a:c4:b5:d7:b3:f6:18:
         07:8c:c5:70:a9:79:a3:6a:ce:f5:97:f1:be:fb:f8:8f:06:fe:
         ce:7e:f6:da:99:96:3a:82:5b:4d:99:dc:a4:31:61:57:db:25:
         c3:a6:1e:41:08:7e:ff:92:cd:b5:0e:37:41:18:ad:0b:02:46:
         2d:7d:0b:9b:5d:43:9c:3f:13:4a:d5:05:9f:9f:20:29:30:6e:
         99:8a:70:63:47:b6:ba:fb:00:c8:98:62:c1:0a:2f:cc:34:de:
         40:81:c5:14:97:da:f9:1e:d0:31:9a:d1:30:18:4c:fa:a1:f5:
         ff:f4:c4:0b:60:ef:04:e6:de:44:d2:de:b7:19:99:35:fb:f6:
         79:d7:f5:68:8e:0f:37:8e:ec:fe:a7:32:12:fc:0f:49:41:92:
         e3:2c:93:be:ca:4f:00:94:68:f9:89:cf:fe:71:f4:1c:bf:e5:
         9d:65:4a:66:d6:09:0d:c2:29:ab:ce:1c:ef:b6:07:ff:a4:4b:
         cf:88:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:45 2025 by rpki-client on console.sobornost.net