Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
File:                     323430323a343834303a3a2f33322d3332203d3e20313337333239.roa (raw, json)
Hash identifier:          wDyjwgu3ZYcBbSHiE5VOmyIDo+GYNsdEYGrlAlAWtFg=
Subject key identifier:   01:AA:88:DF:9E:D1:F5:D2:EC:D0:DC:B8:0F:3D:9C:04:78:FD:1E:A9
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       689D5278E8B7C7ED8966347F6CCA7D41584670DA
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
Signing time:             Tue 11 Mar 2025 16:00:01 +0000
ROA not before:           Tue 11 Mar 2025 15:55:01 +0000
ROA not after:            Tue 10 Mar 2026 16:00:01 +0000
asID:                     137329
IP address blocks:        2402:4840::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9d:52:78:e8:b7:c7:ed:89:66:34:7f:6c:ca:7d:41:58:46:70:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: Mar 11 15:55:01 2025 GMT
            Not After : Mar 10 16:00:01 2026 GMT
        Subject: CN=01AA88DF9ED1F5D2ECD0DCB80F3D9C0478FD1EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b6:a0:7e:e1:ff:45:2f:fe:ca:d7:61:66:a4:
                    80:72:4b:ea:bb:57:3c:45:fe:3b:71:5d:4e:1e:5d:
                    5c:49:b4:3e:a0:5c:e9:43:a9:fe:d5:87:22:43:13:
                    6e:69:e5:57:1b:47:68:2c:d4:e6:b7:03:c3:bd:7a:
                    65:1e:77:50:aa:e5:92:5d:c2:95:34:eb:bb:49:83:
                    76:c5:0b:31:2c:b5:18:8a:95:63:90:0c:c8:f8:a7:
                    4d:9f:35:07:4a:75:ee:e0:b9:4a:e1:49:52:22:ba:
                    d4:61:e0:1e:21:ec:f9:d0:a0:98:bb:e8:75:f1:25:
                    3e:e3:6f:45:35:88:ba:73:6e:71:21:7f:11:a9:6d:
                    41:74:98:a1:c4:0e:32:db:5a:0c:d1:0b:d0:cc:c9:
                    6c:0f:fd:5f:e2:87:d7:84:9c:81:5c:e2:63:17:c3:
                    6a:67:c8:b4:64:1c:01:e8:89:90:ed:a2:bf:cc:a7:
                    3e:95:f2:29:af:38:8d:cd:53:6b:30:0a:20:a7:f8:
                    20:90:76:be:39:52:82:ef:f3:08:c1:94:c6:3b:89:
                    91:de:55:36:66:b6:3d:c2:12:0c:9c:3c:f5:fa:7c:
                    a9:96:92:58:e1:62:80:48:ba:5c:4e:13:0c:fa:2c:
                    13:4b:f1:d8:30:cd:31:60:06:68:92:80:65:61:23:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AA:88:DF:9E:D1:F5:D2:EC:D0:DC:B8:0F:3D:9C:04:78:FD:1E:A9
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4840::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:74:f0:5b:52:50:02:6b:1e:3b:ef:d7:f1:21:4c:de:91:19:
         63:e9:e8:69:12:2d:74:4c:92:d1:ff:d7:83:48:56:b6:cf:da:
         db:3a:12:8a:8f:0d:33:f2:e8:c5:1f:ed:e4:41:c8:9e:47:c4:
         79:a6:fb:3e:a7:ae:7d:5f:cc:4c:f3:90:86:57:46:cb:0c:a4:
         74:7e:8c:4b:ca:9d:5f:c2:10:62:ee:67:eb:d6:b5:7a:da:5a:
         98:1e:62:bb:e3:94:c6:d1:ba:08:3a:f3:14:3a:66:b4:b7:41:
         86:04:59:65:ff:81:dd:4a:25:5b:b2:6c:96:da:17:29:92:d3:
         21:73:9f:fc:58:61:fa:a4:55:3b:9e:60:b5:3e:b3:cf:62:36:
         a0:8e:27:22:9d:69:52:61:79:69:34:fb:31:bf:44:6f:3c:66:
         06:03:ac:78:27:20:b8:30:d3:93:17:f6:c2:00:10:0c:39:e6:
         97:31:9e:cd:89:a2:89:d8:06:58:f6:e6:38:03:8c:0a:a5:d0:
         18:04:69:cc:35:0e:6e:4a:21:c1:bb:7c:d7:dd:93:96:f2:d9:
         2f:4f:f0:44:56:f0:f7:23:48:79:9f:f4:c8:41:bf:0a:b8:6d:
         c1:74:f4:c1:1e:8c:15:06:d3:3b:9a:8b:a2:9b:07:9c:46:b2:
         52:dd:f8:62
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUaJ1SeOi3x+2JZjR/bMp9QVhGcNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRB
REMyMTIxRTAeFw0yNTAzMTExNTU1MDFaFw0yNjAzMTAxNjAwMDFaMDMxMTAvBgNV
BAMTKDAxQUE4OERGOUVEMUY1RDJFQ0QwRENCODBGM0Q5QzA0NzhGRDFFQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDltqB+4f9FL/7K12FmpIByS+q7
VzxF/jtxXU4eXVxJtD6gXOlDqf7VhyJDE25p5VcbR2gs1Oa3A8O9emUed1Cq5ZJd
wpU067tJg3bFCzEstRiKlWOQDMj4p02fNQdKde7guUrhSVIiutRh4B4h7PnQoJi7
6HXxJT7jb0U1iLpzbnEhfxGpbUF0mKHEDjLbWgzRC9DMyWwP/V/ih9eEnIFc4mMX
w2pnyLRkHAHoiZDtor/Mpz6V8imvOI3NU2swCiCn+CCQdr45UoLv8wjBlMY7iZHe
VTZmtj3CEgycPPX6fKmWkljhYoBIulxOEwz6LBNL8dgwzTFgBmiSgGVhI9uvAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUAaqI357R9dLs0Ny4Dz2cBHj9HqkwHwYDVR0j
BBgwFoAUGQk/d2Gp4zfQNAVgR1C/1K3CEh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC8xOTA5M0Y3NzYx
QTlFMzM3RDAzNDA1NjA0NzUwQkZENEFEQzIxMjFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRBREMy
MTIxRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h
MmFkLWQxNzU0MzY1YTQ1ZC8wLzMyMzQzMDMyM2EzNDM4MzQzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzNzMzMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCSEAwDQYJKoZI
hvcNAQELBQADggEBABR08FtSUAJrHjvv1/EhTN6RGWPp6GkSLXRMktH/14NIVrbP
2ts6EoqPDTPy6MUf7eRByJ5HxHmm+z6nrn1fzEzzkIZXRssMpHR+jEvKnV/CEGLu
Z+vWtXraWpgeYrvjlMbRugg68xQ6ZrS3QYYEWWX/gd1KJVuybJbaFymS0yFzn/xY
YfqkVTueYLU+s89iNqCOJyKdaVJheWk0+zG/RG88ZgYDrHgnILgw05MX9sIAEAw5
5pcxns2JoonYBlj25jgDjAql0BgEacw1Dm5KIcG7fNfdk5by2S9P8ERW8PcjSHmf
9MhBvwq4bcF09MEejBUG0zuai6KbB5xGslLd+GI=
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:01 2025 by rpki-client on console.sobornost.net