Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa
File:                     323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (raw, json)
Hash identifier:          d8XIMv2D7e4PA9ooQLphJ1NdcvJsFAwep1Ut37i7qZo=
Subject key identifier:   4B:80:A6:5C:7C:30:95:5C:67:A3:E9:ED:C6:17:3F:5C:87:C8:2E:F9
Certificate issuer:       /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
Certificate serial:       2BDBC30B00464A0B80C08CA221990DB2A8A7A30A
Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa
Signing time:             Mon 31 Jul 2023 00:03:09 +0000
ROA not before:           Sun 30 Jul 2023 23:58:09 +0000
ROA not after:            Mon 29 Jul 2024 00:03:09 +0000
asID:                     58499
IP address blocks:        2001:df0:c80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl
                          rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 04:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:db:c3:0b:00:46:4a:0b:80:c0:8c:a2:21:99:0d:b2:a8:a7:a3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
        Validity
            Not Before: Jul 30 23:58:09 2023 GMT
            Not After : Jul 29 00:03:09 2024 GMT
        Subject: CN=4B80A65C7C30955C67A3E9EDC6173F5C87C82EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:cb:ed:e1:ee:70:96:5e:5d:4e:ed:f5:2d:
                    16:6f:a1:9b:3f:9d:bb:0b:0f:1d:b4:f2:81:e3:d0:
                    40:65:d7:0d:54:c1:6f:fe:46:ac:76:b2:a9:0d:af:
                    fe:03:b5:18:1f:dd:60:d9:82:d2:6d:77:71:45:cc:
                    39:61:44:65:4e:4e:0b:13:f9:bd:86:4d:a1:ac:63:
                    5c:a0:ff:d7:6f:bf:14:8c:45:5d:f0:ff:11:e6:35:
                    8a:9b:13:2e:ac:de:09:22:33:31:31:f4:03:eb:88:
                    93:ea:56:c0:ad:80:32:4e:65:bd:da:6f:c7:8b:ff:
                    6a:24:ed:37:a6:74:5c:58:c3:9c:b4:f2:68:b8:e6:
                    c9:aa:0b:7f:26:15:c9:95:fd:1b:5a:34:ee:3a:35:
                    af:e9:2a:cb:0e:3d:42:bd:7b:10:53:bb:a5:d7:52:
                    e5:38:b4:17:17:7a:c5:4f:92:f5:eb:ce:53:ae:4b:
                    27:9f:59:ac:f3:6e:35:8a:37:36:61:17:66:57:b3:
                    53:eb:dc:54:1e:32:1b:27:44:32:5e:31:50:ea:7c:
                    59:c6:0d:66:ae:71:ff:39:d3:60:60:1e:59:e3:5a:
                    7d:69:0d:57:31:cb:11:39:e5:97:4f:2c:37:ae:d1:
                    c5:35:1a:8d:4c:e0:df:e5:54:21:99:16:d7:e2:ab:
                    95:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:80:A6:5C:7C:30:95:5C:67:A3:E9:ED:C6:17:3F:5C:87:C8:2E:F9
            X509v3 Authority Key Identifier:
                keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:bf:ec:19:7e:59:7a:03:ea:9d:7e:28:9f:8a:e8:07:de:cd:
         53:b4:59:7e:7e:bb:be:9b:e6:6b:c1:ef:c0:b2:c2:ef:78:dd:
         ec:ee:61:89:59:a7:b5:9f:38:26:11:b5:ac:0b:dd:3b:62:22:
         e0:2e:97:2e:7c:9c:e3:9a:9e:6c:92:9a:f4:f9:61:4a:9f:e9:
         0b:f1:66:60:40:a6:2c:6d:0e:2f:dc:38:76:51:c5:aa:d0:7d:
         0e:fd:27:05:a6:21:56:22:3c:f5:d1:17:c1:6d:3b:e4:af:46:
         65:b3:16:7f:5b:be:b4:e4:a5:67:b4:1a:bb:92:75:de:9a:d6:
         51:37:ef:f0:ad:4f:87:b1:ae:f0:fc:8c:d8:dc:b4:dc:37:9e:
         1f:f8:dd:7a:de:8e:8c:d2:db:d7:00:f5:79:5d:0f:48:d2:db:
         41:80:b0:11:83:d9:0e:24:1f:73:24:dc:20:cb:65:d6:a4:d9:
         f2:58:f9:e8:53:5f:53:0a:bc:82:a8:10:5b:6d:38:dd:90:50:
         69:13:a9:ac:fc:2a:ad:16:94:c7:40:1f:5a:30:3f:99:58:42:
         54:b2:35:c4:bd:03:a3:38:92:ed:13:9a:a1:69:11:e2:31:59:
         95:58:16:b1:c4:e2:09:af:96:a4:88:71:f9:20:72:a3:8a:91:
         cd:26:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 03:31:15 2024 by rpki-client on console-ams.rpki-client.org