Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa
File:                     323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa (raw, json)
Hash identifier:          TlLgfmGQ1DMmuAK+BXUyggQ3UC8als6n9Rt5GMTQoTk=
Subject key identifier:   9C:CD:82:47:20:64:69:F8:C2:B5:6B:49:87:21:D3:4C:70:00:5A:93
Certificate issuer:       /CN=5782DE79396EB62186D082F936F3AB7084CB59CB
Certificate serial:       2FFF0D4C710D8946D6A12EA7A5D8382440CE4145
Authority key identifier: 57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa
Signing time:             Wed 23 Apr 2025 08:00:00 +0000
ROA not before:           Wed 23 Apr 2025 07:55:00 +0000
ROA not after:            Wed 22 Apr 2026 08:00:00 +0000
asID:                     64315
IP address blocks:        2001:df7:1a00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl
                          rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 14:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ff:0d:4c:71:0d:89:46:d6:a1:2e:a7:a5:d8:38:24:40:ce:41:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5782DE79396EB62186D082F936F3AB7084CB59CB
        Validity
            Not Before: Apr 23 07:55:00 2025 GMT
            Not After : Apr 22 08:00:00 2026 GMT
        Subject: CN=9CCD8247206469F8C2B56B498721D34C70005A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:81:31:33:60:ef:03:ab:d6:23:43:df:27:
                    af:4f:ec:b8:61:4d:ee:9c:fd:db:d9:5e:b7:17:80:
                    76:09:e1:7c:e4:3c:64:94:e2:88:35:aa:9a:ef:82:
                    ec:1e:76:a4:58:f1:94:83:e8:aa:cd:9e:4e:31:93:
                    ed:03:b4:3d:72:ac:18:48:63:04:71:a0:57:59:12:
                    1e:a6:36:cf:f4:72:db:ad:bb:c4:89:df:72:6f:b3:
                    65:53:20:c0:b6:9c:5f:28:63:f4:fc:cb:95:34:1c:
                    f5:4f:7d:d0:52:5c:ed:f9:af:0f:9c:93:25:f4:4a:
                    bc:40:52:90:b7:6a:25:3b:f0:e8:13:9b:16:6b:17:
                    55:7a:46:12:9e:0a:49:b0:b6:77:37:4d:60:60:d1:
                    ca:3d:dc:3d:f8:02:d3:d5:70:3d:95:fd:ba:3b:55:
                    32:69:56:3c:0a:72:50:1e:e5:86:53:75:41:b1:20:
                    e4:6d:cd:12:04:40:44:54:e4:36:1a:93:04:80:f8:
                    67:3a:84:bb:81:2c:75:24:67:9a:c4:b8:7e:ad:8a:
                    b2:13:29:48:4a:34:6a:97:51:88:08:51:b1:a9:8b:
                    cd:f7:ac:69:06:26:d3:78:87:70:24:2d:31:aa:29:
                    b0:e2:bd:3b:53:02:a5:11:72:66:66:cd:c3:6b:f8:
                    27:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CD:82:47:20:64:69:F8:C2:B5:6B:49:87:21:D3:4C:70:00:5A:93
            X509v3 Authority Key Identifier:
                keyid:57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:1a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:93:b9:2d:60:b8:e6:03:04:fd:16:12:5d:42:f8:13:10:14:
         04:b9:34:7c:ca:38:d5:f4:6a:f8:7a:1d:cc:73:56:72:8a:6f:
         03:bd:19:ed:f5:7c:91:ce:ba:99:d9:9d:c6:a5:3b:f3:46:9d:
         b1:78:a3:cf:8e:0c:f0:fd:bc:b0:52:35:4f:8c:22:df:23:19:
         ff:75:d5:bb:39:16:78:53:2c:ce:54:a7:a2:66:83:73:cd:24:
         84:f2:8f:20:b7:94:b6:6c:94:72:2b:4e:9e:b4:88:01:b2:de:
         95:4e:77:59:2d:a3:e1:68:11:d5:28:5f:bc:2c:74:f0:fb:30:
         92:0d:e9:b9:5f:89:9d:ff:b8:6d:99:3d:ea:a4:85:81:e5:02:
         6e:86:48:d4:8b:3b:b3:a2:32:cb:d1:54:af:25:f0:03:c1:d5:
         e8:b2:b8:32:69:2d:55:30:e0:b0:b4:4c:fb:7f:87:1a:4d:fe:
         42:e8:c1:5b:c7:f6:b4:7c:4a:5a:c1:82:0e:62:ac:3f:f0:20:
         52:e7:4f:d3:fa:49:21:4d:e6:27:f6:83:52:60:10:c6:b3:70:
         29:c4:64:5b:fe:e1:c0:56:0e:53:db:57:f1:74:17:c0:31:2b:
         d9:71:73:7a:70:d1:60:1e:23:3b:b4:3a:75:ad:c3:e2:3d:6a:
         6c:e0:e6:3a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUL/8NTHENiUbWoS6npdg4JEDOQUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc4MkRFNzkzOTZFQjYyMTg2RDA4MkY5MzZGM0FCNzA4
NENCNTlDQjAeFw0yNTA0MjMwNzU1MDBaFw0yNjA0MjIwODAwMDBaMDMxMTAvBgNV
BAMTKDlDQ0Q4MjQ3MjA2NDY5RjhDMkI1NkI0OTg3MjFEMzRDNzAwMDVBOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2IExM2DvA6vWI0PfJ69P7Lhh
Te6c/dvZXrcXgHYJ4XzkPGSU4og1qprvguwedqRY8ZSD6KrNnk4xk+0DtD1yrBhI
YwRxoFdZEh6mNs/0ctutu8SJ33Jvs2VTIMC2nF8oY/T8y5U0HPVPfdBSXO35rw+c
kyX0SrxAUpC3aiU78OgTmxZrF1V6RhKeCkmwtnc3TWBg0co93D34AtPVcD2V/bo7
VTJpVjwKclAe5YZTdUGxIORtzRIEQERU5DYakwSA+Gc6hLuBLHUkZ5rEuH6tirIT
KUhKNGqXUYgIUbGpi833rGkGJtN4h3AkLTGqKbDivTtTAqURcmZmzcNr+CeZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUnM2CRyBkafjCtWtJhyHTTHAAWpMwHwYDVR0j
BBgwFoAUV4LeeTlutiGG0IL5NvOrcITLWcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
OTVmNWYxMS01N2FlLTRhYzMtYTAzOS1lMDQ1NmJjY2Y0NGMvMC81NzgyREU3OTM5
NkVCNjIxODZEMDgyRjkzNkYzQUI3MDg0Q0I1OUNCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTc4MkRFNzkzOTZFQjYyMTg2RDA4MkY5MzZGM0FCNzA4NENC
NTlDQi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5NWY1ZjExLTU3YWUtNGFjMy1h
MDM5LWUwNDU2YmNjZjQ0Yy8wLzMyMzAzMDMxM2E2NDY2MzczYTMxNjEzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzYzNDMzMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfca
ADANBgkqhkiG9w0BAQsFAAOCAQEAAJO5LWC45gME/RYSXUL4ExAUBLk0fMo41fRq
+HodzHNWcopvA70Z7fV8kc66mdmdxqU780adsXijz44M8P28sFI1T4wi3yMZ/3XV
uzkWeFMszlSnomaDc80khPKPILeUtmyUcitOnrSIAbLelU53WS2j4WgR1ShfvCx0
8Pswkg3puV+Jnf+4bZk96qSFgeUCboZI1Is7s6Iyy9FUryXwA8HV6LK4MmktVTDg
sLRM+3+HGk3+QujBW8f2tHxKWsGCDmKsP/AgUudP0/pJIU3mJ/aDUmAQxrNwKcRk
W/7hwFYOU9tX8XQXwDEr2XFzenDRYB4jO7Q6da3D4j1qbODmOg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net