Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa
File:                     323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier:          qzOKuiWgeH3gDKTvRfrA8GLFT3YB6UZucp2iMVzh+Eg=
Subject key identifier:   27:E4:EF:6C:E5:49:C7:21:A5:DC:A4:FE:D4:B8:41:06:D3:A2:91:14
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       2FC8184ED79E3576296A549B213F5DCB4FF5764A
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa
Signing time:             Fri 05 Jan 2024 11:02:17 +0000
ROA not before:           Fri 05 Jan 2024 10:57:17 +0000
ROA not after:            Fri 03 Jan 2025 11:02:17 +0000
asID:                     58369
IP address blocks:        2403:fd80:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 17:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c8:18:4e:d7:9e:35:76:29:6a:54:9b:21:3f:5d:cb:4f:f5:76:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jan  5 10:57:17 2024 GMT
            Not After : Jan  3 11:02:17 2025 GMT
        Subject: CN=27E4EF6CE549C721A5DCA4FED4B84106D3A29114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:27:67:ca:8b:59:0b:77:db:6c:43:94:a2:
                    1b:b4:78:3d:6c:85:a2:64:8a:1b:f3:a1:04:03:6a:
                    be:b4:e0:80:b6:4d:56:16:55:8f:44:1d:36:08:67:
                    f4:1a:c4:50:a7:a7:c4:fb:be:e8:54:00:cf:85:d7:
                    96:46:2f:1d:85:29:ed:3a:91:a5:5e:2b:0a:94:5d:
                    d1:7c:cd:78:17:70:ef:44:e2:d1:1d:47:88:db:e0:
                    52:04:89:b8:e5:d9:9b:f8:af:23:19:ee:ee:4a:88:
                    ef:8f:32:d2:7c:b2:ac:ba:75:d6:63:f5:e6:2c:6f:
                    27:27:56:ea:aa:a4:36:99:8a:ff:25:c6:f7:1b:b0:
                    f9:77:ca:01:45:3b:49:3d:26:1e:a2:d9:2b:e2:3d:
                    6e:46:50:f2:f1:8c:32:ee:f1:af:29:3e:c8:58:ef:
                    fc:e2:c1:bd:d9:c5:c6:44:4d:39:8a:88:8a:e3:5f:
                    29:68:af:95:46:59:41:78:1b:7c:25:b0:b7:85:16:
                    5c:c2:a7:5d:c2:67:25:11:f6:2b:d9:4e:b2:40:7a:
                    7e:83:0d:42:f5:62:7b:ea:c8:d6:67:d5:77:be:ff:
                    4d:6d:ab:16:8f:09:15:53:5e:1f:fd:99:b7:29:e0:
                    42:e6:ca:41:d5:c6:7c:4a:6c:fe:b7:4f:32:e9:70:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E4:EF:6C:E5:49:C7:21:A5:DC:A4:FE:D4:B8:41:06:D3:A2:91:14
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fd80:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         02:44:47:db:29:c4:89:e2:f5:b3:9e:13:e8:14:63:2f:c7:4e:
         2c:18:ac:6b:88:be:dd:62:fa:6d:1a:aa:8c:1a:1e:4f:10:9d:
         c4:cd:2b:09:8e:07:c3:3d:da:06:55:82:c9:e1:6d:57:f2:87:
         a6:53:2b:7a:43:9e:a6:ca:6d:59:82:08:1a:c6:7d:6d:55:8f:
         83:97:8b:55:86:dd:93:4c:0c:bc:c1:e9:21:26:f5:da:c3:8d:
         b0:f8:e7:7e:90:83:55:39:08:4a:8e:3c:72:60:76:85:5f:f2:
         24:f9:c8:35:cc:eb:a2:9e:6e:5f:d3:ee:ce:1d:14:7b:8c:57:
         e4:08:6e:29:83:1f:33:8d:dd:4a:f7:f9:b0:e3:45:6b:29:ea:
         bd:90:42:bd:2e:4e:db:90:24:13:95:99:1c:e7:1b:f8:a0:e8:
         6f:77:41:16:e9:72:8c:ac:8b:a7:b1:fa:84:70:ce:d7:76:39:
         0c:3c:dd:6d:03:4b:46:59:33:68:fc:04:68:fe:ae:6a:2a:8b:
         2a:d3:f4:a1:a3:ad:6d:5c:8f:9a:a7:e2:ac:4e:1a:cf:f4:4d:
         96:75:32:9b:91:13:76:f8:90:e5:32:b0:82:c4:12:5f:c7:05:
         00:ab:d6:c3:35:03:8c:63:8e:4c:0c:00:5a:52:1e:72:a0:33:
         9b:1e:3c:f7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUL8gYTteeNXYpalSbIT9dy0/1dkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNDAxMDUxMDU3MTdaFw0yNTAxMDMxMTAyMTdaMDMxMTAvBgNV
BAMTKDI3RTRFRjZDRTU0OUM3MjFBNURDQTRGRUQ0Qjg0MTA2RDNBMjkxMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOSdnyotZC3fbbEOUohu0eD1s
haJkihvzoQQDar604IC2TVYWVY9EHTYIZ/QaxFCnp8T7vuhUAM+F15ZGLx2FKe06
kaVeKwqUXdF8zXgXcO9E4tEdR4jb4FIEibjl2Zv4ryMZ7u5KiO+PMtJ8sqy6ddZj
9eYsbycnVuqqpDaZiv8lxvcbsPl3ygFFO0k9Jh6i2SviPW5GUPLxjDLu8a8pPshY
7/ziwb3ZxcZETTmKiIrjXylor5VGWUF4G3wlsLeFFlzCp13CZyUR9ivZTrJAen6D
DUL1YnvqyNZn1Xe+/01tqxaPCRVTXh/9mbcp4ELmykHVxnxKbP63TzLpcJjtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJ+TvbOVJxyGl3KT+1LhBBtOikRQwHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMyMzQzMDMzM2E2NjY0MzgzMDNhNjMzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAP9
gMAwDQYJKoZIhvcNAQELBQADggEBAAJER9spxIni9bOeE+gUYy/HTiwYrGuIvt1i
+m0aqowaHk8QncTNKwmOB8M92gZVgsnhbVfyh6ZTK3pDnqbKbVmCCBrGfW1Vj4OX
i1WG3ZNMDLzB6SEm9drDjbD4536Qg1U5CEqOPHJgdoVf8iT5yDXM66Kebl/T7s4d
FHuMV+QIbimDHzON3Ur3+bDjRWsp6r2QQr0uTtuQJBOVmRznG/ig6G93QRbpcoys
i6ex+oRwztd2OQw83W0DS0ZZM2j8BGj+rmoqiyrT9KGjrW1cj5qn4qxOGs/0TZZ1
MpuRE3b4kOUysILEEl/HBQCr1sM1A4xjjkwMAFpSHnKgM5sePPc=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:12:40 2024 by rpki-client on console-ams.rpki-client.org