Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36383a3a2f34382d3438203d3e20313431383932.roa
File:                     323430353a623930303a36383a3a2f34382d3438203d3e20313431383932.roa (raw, json)
Hash identifier:          50RTfpeKQF2EtL9R/IBcpRnDdsfnuX6XqY78/Pf/mPQ=
Subject key identifier:   AC:7A:63:08:34:A8:86:0A:DE:15:AD:5E:2F:C2:14:DE:43:47:20:08
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       07169C6830F725FCF59A02922DF2E86E363DEFE5
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36383a3a2f34382d3438203d3e20313431383932.roa
Signing time:             Thu 08 Jun 2023 03:02:11 +0000
ROA not before:           Thu 08 Jun 2023 02:57:11 +0000
ROA not after:            Thu 06 Jun 2024 03:02:11 +0000
asID:                     141892
IP address blocks:        2405:b900:68::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:16:9c:68:30:f7:25:fc:f5:9a:02:92:2d:f2:e8:6e:36:3d:ef:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: Jun  8 02:57:11 2023 GMT
            Not After : Jun  6 03:02:11 2024 GMT
        Subject: CN=AC7A630834A8860ADE15AD5E2FC214DE43472008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:13:96:fc:e1:27:67:a0:d0:50:e5:8f:65:
                    d0:e7:09:b9:e5:54:8e:0c:16:38:32:20:52:61:b7:
                    a9:c0:85:fb:80:9f:a2:54:ae:b3:7c:8e:02:df:fe:
                    86:0d:8b:61:d6:15:e5:4b:7d:71:bf:c5:89:7d:b8:
                    ea:c9:57:37:d4:c9:de:9e:23:f9:f4:50:25:48:d1:
                    45:fe:79:50:64:72:45:4d:37:cf:c8:59:39:cb:cf:
                    c3:84:c8:c8:35:3f:d6:47:6d:c8:28:e3:e3:b8:0d:
                    85:38:b2:f2:e6:b0:6f:d4:1a:3e:87:29:c6:4d:5a:
                    45:26:20:98:c5:f7:9f:dc:d6:2f:19:d7:90:75:58:
                    03:c4:91:a9:58:53:90:bd:13:ea:97:16:4a:99:ba:
                    fe:d8:78:79:cc:53:82:8a:4e:5f:a0:18:8b:6a:20:
                    2e:3a:ef:c2:33:be:52:91:5d:2a:97:38:bb:cf:f8:
                    1a:2a:b7:82:3b:5b:3b:12:3f:77:94:42:f6:47:d4:
                    8c:07:e6:c8:77:71:ef:af:8a:b3:08:e5:d9:55:8a:
                    27:9b:4b:67:7f:89:42:be:be:5d:d7:a5:d1:af:7c:
                    bd:a1:fe:5d:f5:0f:c7:c9:c7:e8:e6:c8:e0:44:1e:
                    31:a3:f1:3e:7b:99:f3:6b:3c:4f:72:86:57:fd:1d:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7A:63:08:34:A8:86:0A:DE:15:AD:5E:2F:C2:14:DE:43:47:20:08
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36383a3a2f34382d3438203d3e20313431383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:b900:68::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:ca:1a:20:09:76:c0:a4:19:e6:90:d9:55:79:93:ac:27:4b:
         d9:51:b0:cc:cb:dd:4b:f3:f7:16:f0:4f:5a:2b:50:19:5a:30:
         e1:5a:13:ee:b6:77:66:ce:ee:62:9f:f7:27:bf:83:09:f9:34:
         2d:9f:41:b8:be:14:d7:61:ec:d7:3e:4e:3b:ce:c0:ac:71:e4:
         bd:2e:4e:16:21:68:2e:1a:ab:2b:e9:c4:e8:48:16:fb:c9:bc:
         0a:d0:cf:1f:62:d1:66:44:c5:67:2e:42:34:57:23:73:d7:ef:
         90:9b:72:d8:09:a4:08:88:9e:c3:0d:54:2b:f5:63:7f:50:99:
         b8:97:2f:a9:16:18:44:c6:43:f0:d8:a2:87:9d:ce:2f:a8:de:
         b0:18:72:ea:55:0c:58:c5:af:3c:80:b7:b1:92:3d:b4:aa:76:
         8e:de:91:94:b7:b6:dd:7d:8a:92:aa:2a:f5:a5:af:f1:fd:21:
         87:38:a6:f4:d8:44:06:31:54:82:ba:f0:7b:63:8a:8d:c6:4c:
         cc:bc:7d:85:31:d5:09:7f:7c:b3:42:25:88:95:b1:20:5a:68:
         db:c4:30:c8:ff:0f:64:e1:71:64:53:66:e3:e8:7f:cc:a2:a8:
         47:1b:d6:61:b8:a9:8d:8e:75:5c:c3:e4:4a:31:90:e6:f3:bb:
         b8:fb:ac:1b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUBxacaDD3Jfz1mgKSLfLobjY97+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4
QkY1MEY2QTAeFw0yMzA2MDgwMjU3MTFaFw0yNDA2MDYwMzAyMTFaMDMxMTAvBgNV
BAMTKEFDN0E2MzA4MzRBODg2MEFERTE1QUQ1RTJGQzIxNERFNDM0NzIwMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZSxOW/OEnZ6DQUOWPZdDnCbnl
VI4MFjgyIFJht6nAhfuAn6JUrrN8jgLf/oYNi2HWFeVLfXG/xYl9uOrJVzfUyd6e
I/n0UCVI0UX+eVBkckVNN8/IWTnLz8OEyMg1P9ZHbcgo4+O4DYU4svLmsG/UGj6H
KcZNWkUmIJjF95/c1i8Z15B1WAPEkalYU5C9E+qXFkqZuv7YeHnMU4KKTl+gGItq
IC4678IzvlKRXSqXOLvP+Boqt4I7WzsSP3eUQvZH1IwH5sh3ce+virMI5dlViieb
S2d/iUK+vl3XpdGvfL2h/l31D8fJx+jmyOBEHjGj8T57mfNrPE9yhlf9HTshAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUrHpjCDSohgreFa1eL8IU3kNHIAgwHwYDVR0j
BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB
RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1
MEY2QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05
NTBlLThiZThlMTVmZDNlZS8wLzMyMzQzMDM1M2E2MjM5MzAzMDNhMzYzODNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFuQAA
aDANBgkqhkiG9w0BAQsFAAOCAQEA0MoaIAl2wKQZ5pDZVXmTrCdL2VGwzMvdS/P3
FvBPWitQGVow4VoT7rZ3Zs7uYp/3J7+DCfk0LZ9BuL4U12Hs1z5OO87ArHHkvS5O
FiFoLhqrK+nE6EgW+8m8CtDPH2LRZkTFZy5CNFcjc9fvkJty2AmkCIieww1UK/Vj
f1CZuJcvqRYYRMZD8Niih53OL6jesBhy6lUMWMWvPIC3sZI9tKp2jt6RlLe23X2K
kqoq9aWv8f0hhzim9NhEBjFUgrrwe2OKjcZMzLx9hTHVCX98s0IliJWxIFpo28Qw
yP8PZOFxZFNm4+h/zKKoRxvWYbipjY51XMPkSjGQ5vO7uPusGw==
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:12:30 2024 by rpki-client on console-ams.rpki-client.org