Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa
File:                     323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (raw, json)
Hash identifier:          Aga3n5Q7YkcuYEdMNJLY1P6xuMrdjjJdE0HXaP68TdY=
Subject key identifier:   F4:1B:79:44:D8:DE:75:9D:D5:35:38:17:9B:CE:ED:12:A7:85:FF:60
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       307DB6F3F129C53FCE13197067D6C6E2D946C5
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa
Signing time:             Mon 31 Jul 2023 00:05:07 +0000
ROA not before:           Mon 31 Jul 2023 00:00:07 +0000
ROA not after:            Mon 29 Jul 2024 00:05:07 +0000
asID:                     38150
IP address blocks:        2402:f080:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 19:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7d:b6:f3:f1:29:c5:3f:ce:13:19:70:67:d6:c6:e2:d9:46:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul 31 00:00:07 2023 GMT
            Not After : Jul 29 00:05:07 2024 GMT
        Subject: CN=F41B7944D8DE759DD53538179BCEED12A785FF60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:67:a3:43:c8:72:a1:6f:d9:88:0b:c0:99:
                    cc:93:0e:a4:c9:a4:61:d6:6e:0d:4d:58:6d:2a:d7:
                    2b:e1:5f:3a:d1:82:91:53:41:1c:d2:93:3e:2a:30:
                    7e:5c:76:0b:2c:d2:81:a8:8a:5b:99:6e:56:37:40:
                    c4:00:99:43:9d:bd:61:26:3b:59:e4:bc:36:fd:1f:
                    0d:5b:7b:ec:7b:c4:46:8b:79:28:30:6b:ff:2c:d4:
                    9c:6f:f8:30:fc:f5:9e:16:ad:88:b1:15:60:cb:06:
                    5a:72:4d:91:94:47:fe:4e:c1:3a:14:78:94:d5:db:
                    e5:d5:a7:1e:a9:bd:a3:70:56:40:be:a0:56:7b:e0:
                    45:14:0f:3e:68:4b:20:e0:8a:4f:7a:be:54:eb:fa:
                    54:75:e8:63:dc:4a:80:94:48:1c:1c:3c:15:b9:2e:
                    fc:ed:5c:e4:59:8e:78:4f:6a:8c:9c:f1:bd:88:da:
                    f2:8e:85:46:c9:43:6e:97:b7:62:ac:e6:24:07:05:
                    e6:20:2f:68:e3:7a:1e:cf:5e:02:91:ef:ee:2c:1d:
                    61:c8:92:eb:66:77:aa:26:37:9d:4c:e2:63:72:c4:
                    1e:8c:c1:f1:ac:da:90:9e:e3:cb:d5:cc:b4:9e:f4:
                    3b:c6:3b:5c:75:be:b4:3c:e6:e6:d1:3f:17:43:06:
                    e3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1B:79:44:D8:DE:75:9D:D5:35:38:17:9B:CE:ED:12:A7:85:FF:60
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:f080:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:de:b2:33:f5:ed:a2:3e:43:db:e5:c5:34:97:58:56:09:05:
         73:2d:67:8d:ea:32:85:46:fc:24:95:3e:4d:dc:6b:cd:fa:8a:
         35:d3:86:49:ac:a3:ad:0f:8a:f3:ec:b3:37:87:5a:77:c1:ad:
         3e:13:fc:e6:92:43:97:98:a4:a2:29:e4:e3:0c:e7:14:a7:3f:
         89:26:da:ca:4d:a8:cc:ef:8f:ad:15:09:27:85:24:31:b2:88:
         2c:04:c2:e9:4b:fd:76:ae:bc:a2:18:11:80:d7:a7:9e:cc:10:
         b6:f7:55:f7:42:49:cc:1c:c2:da:6b:26:64:16:af:22:93:95:
         6a:ef:69:87:d4:d6:13:15:f0:98:fa:92:a5:e1:54:5b:6d:3d:
         f4:ac:37:3b:76:a4:e9:be:e2:1a:55:d2:fa:bc:45:0c:4d:00:
         b6:a3:82:12:ab:85:32:d3:40:51:41:a5:e1:a9:78:7e:f0:b5:
         ad:22:08:04:f4:f3:a7:3e:86:be:1b:1c:bb:7d:ec:a9:21:b3:
         ba:b7:b4:22:78:b5:b9:e8:1f:a9:28:ea:fe:c1:f4:7f:e0:e8:
         8f:5d:df:9a:1f:60:a9:1c:82:3e:95:42:bf:f9:fd:b1:a0:29:
         ff:81:b7:45:3d:c3:cf:db:5d:ff:27:e3:46:4d:70:a3:58:b6:
         6a:af:d1:32
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgITMH228/EpxT/OExlwZ9bG4tlGxTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygyQ0E0NzQ4N0Y3Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2
OENEQkI5MB4XDTIzMDczMTAwMDAwN1oXDTI0MDcyOTAwMDUwN1owMzExMC8GA1UE
AxMoRjQxQjc5NDREOERFNzU5REQ1MzUzODE3OUJDRUVEMTJBNzg1RkY2MDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMm+Z6NDyHKhb9mIC8CZzJMOpMmk
YdZuDU1YbSrXK+FfOtGCkVNBHNKTPiowflx2CyzSgaiKW5luVjdAxACZQ529YSY7
WeS8Nv0fDVt77HvERot5KDBr/yzUnG/4MPz1nhatiLEVYMsGWnJNkZRH/k7BOhR4
lNXb5dWnHqm9o3BWQL6gVnvgRRQPPmhLIOCKT3q+VOv6VHXoY9xKgJRIHBw8Fbku
/O1c5FmOeE9qjJzxvYja8o6FRslDbpe3YqzmJAcF5iAvaON6Hs9eApHv7iwdYciS
62Z3qiY3nUziY3LEHozB8azakJ7jy9XMtJ70O8Y7XHW+tDzm5tE/F0MG40sCAwEA
AaOCAjcwggIzMB0GA1UdDgQWBBT0G3lE2N51ndU1OBebzu0Sp4X/YDAfBgNVHSME
GDAWgBQspHSH9yeBczMwo4yV/4pd9ozbuTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3
ZTY1YjY3LTkwNWMtNDAzYy04Yzc5LTIzMTU2NTk2NjhhYS8wLzJDQTQ3NDg3Rjcy
NzgxNzMzMzMwQTM4Qzk1RkY4QTVERjY4Q0RCQjkuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v
SUROSUMtSUQvMi8yQ0E0NzQ4N0Y3Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENE
QkI5LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlNjViNjctOTA1Yy00MDNjLThj
NzktMjMxNTY1OTY2OGFhLzAvMzIzNDMwMzIzYTY2MzAzODMwM2EzMjNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDMzMzgzMTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAvCAAAIwDQYJ
KoZIhvcNAQELBQADggEBAJfesjP17aI+Q9vlxTSXWFYJBXMtZ43qMoVG/CSVPk3c
a836ijXThkmso60PivPsszeHWnfBrT4T/OaSQ5eYpKIp5OMM5xSnP4km2spNqMzv
j60VCSeFJDGyiCwEwulL/XauvKIYEYDXp57MELb3VfdCScwcwtprJmQWryKTlWrv
aYfU1hMV8Jj6kqXhVFttPfSsNzt2pOm+4hpV0vq8RQxNALajghKrhTLTQFFBpeGp
eH7wta0iCAT086c+hr4bHLt97Kkhs7q3tCJ4tbnoH6ko6v7B9H/g6I9d35ofYKkc
gj6VQr/5/bGgKf+Bt0U9w8/bXf8n40ZNcKNYtmqv0TI=
-----END CERTIFICATE-----
Generated at Thu Apr 18 14:06:39 2024 by rpki-client on console-fra.rpki-client.org