Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3332203d3e203538333639.roa
File:                     323430333a666438303a3a2f33322d3332203d3e203538333639.roa (raw, json)
Hash identifier:          LO/US24/a6y2oKvrgCCuxW1LG57w5PI7mzpqlNG3SD4=
Subject key identifier:   30:00:7F:39:95:9E:FB:F4:FB:E1:77:35:E7:52:00:63:FE:33:3F:E1
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       443DAF4DCF735F4EDEDC3DD78F0B994B552E549B
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3332203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:30 +0000
ROA not before:           Mon 31 Jul 2023 00:02:30 +0000
ROA not after:            Mon 29 Jul 2024 00:07:30 +0000
asID:                     58369
IP address blocks:        2403:fd80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3d:af:4d:cf:73:5f:4e:de:dc:3d:d7:8f:0b:99:4b:55:2e:54:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:30 2023 GMT
            Not After : Jul 29 00:07:30 2024 GMT
        Subject: CN=30007F39959EFBF4FBE17735E7520063FE333FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:74:08:a4:89:d6:2e:df:cf:c1:29:6c:1e:11:
                    cc:bb:86:1e:3e:a1:04:fb:f0:7e:5d:07:9c:e3:dc:
                    de:49:56:63:64:a6:c3:be:88:66:80:35:22:f7:2c:
                    f0:26:5d:fc:32:34:ab:81:3f:d5:d0:b7:f5:b9:82:
                    e5:f8:e3:5d:71:96:3b:10:d2:57:96:3d:1b:3d:7e:
                    9a:2b:03:9e:bb:b6:b4:ff:c3:e0:23:0d:25:02:c5:
                    a6:15:89:51:26:68:52:a9:c1:50:b0:c7:0b:4e:39:
                    cb:52:4b:cc:95:00:cb:b6:9b:aa:b1:67:61:a8:13:
                    2a:8e:b9:a5:d6:f4:cc:60:2e:2d:65:c4:7c:6d:09:
                    12:61:9f:92:d4:b9:81:e6:34:fa:e3:97:6e:4c:1a:
                    ba:5a:8f:8b:de:cd:ba:3c:1b:4c:ad:09:10:b5:57:
                    27:90:65:af:93:8d:0d:0b:ef:a0:47:f2:5c:79:2b:
                    43:f0:e4:8d:21:df:d9:5d:d9:e2:55:5b:2e:dc:44:
                    ef:9d:ff:c2:7d:19:16:c9:43:53:9a:8c:fb:40:7a:
                    ca:42:06:f9:66:6a:7c:66:1c:3c:e1:d3:5d:a2:e9:
                    a3:e0:0e:05:e6:64:46:97:66:66:a7:be:c1:81:c9:
                    00:c1:ed:c5:68:9f:9f:97:f8:f5:88:b4:bb:d5:76:
                    ab:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:00:7F:39:95:9E:FB:F4:FB:E1:77:35:E7:52:00:63:FE:33:3F:E1
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3332203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:b6:62:aa:b2:71:da:a1:22:0a:4d:ed:5a:c2:9c:9b:39:32:
         4a:60:b1:0b:d7:85:c0:01:ef:39:46:d4:b5:01:3b:8a:76:e8:
         7b:e9:05:84:08:3c:a0:5e:05:a5:b9:ca:c4:ab:f6:c2:5c:70:
         59:57:c1:49:d2:33:2c:c1:b4:aa:a3:b3:47:26:66:f3:8d:94:
         a8:ac:20:97:08:a2:f4:97:1d:b8:0a:86:6e:bc:e3:54:88:05:
         77:21:8e:53:cd:cb:f6:ad:d9:09:c2:22:9d:4b:78:3a:67:9e:
         64:06:aa:7c:71:37:df:6b:d7:de:05:08:b1:c0:4a:03:26:3c:
         e4:06:83:56:4c:b2:23:b5:9b:97:43:48:22:44:fe:2d:6b:c2:
         ee:f3:2c:87:56:93:e9:df:84:a6:5b:38:d4:4d:eb:7e:dd:81:
         1f:b2:a2:a6:12:2c:25:8a:af:de:5d:57:4d:c1:75:81:82:7c:
         07:6a:0d:df:4f:54:f5:99:b5:8e:93:d9:c6:51:a6:cb:12:29:
         46:58:08:c2:23:9c:f2:24:4f:ec:25:3f:28:5f:f9:fb:c6:2a:
         41:70:c6:75:98:46:46:56:00:d8:1d:c4:3b:3b:8d:ef:d0:5f:
         d0:a8:c9:3e:1d:a7:e7:18:77:62:2c:43:1e:96:5f:aa:d3:11:
         03:2d:10:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:20:00 2024 by rpki-client on console-fra.rpki-client.org