Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa
File:                     323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (raw, json)
Hash identifier:          IEmK77Zg/0IEdwG5tYI1SbJ2UWNBoIXJyMmh+Ku6TIw=
Subject key identifier:   1E:EE:3C:78:FA:6C:1D:AE:CD:FE:97:61:9C:5F:CA:FE:94:8E:71:C5
Certificate issuer:       /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Certificate serial:       1216F58809177B962C1BC762C5DA07BAA4D47121
Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa
Signing time:             Mon 31 Jul 2023 00:09:26 +0000
ROA not before:           Mon 31 Jul 2023 00:04:26 +0000
ROA not after:            Mon 29 Jul 2024 00:09:26 +0000
asID:                     137331
IP address blocks:        2001:df4:b100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
                          rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 00:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:16:f5:88:09:17:7b:96:2c:1b:c7:62:c5:da:07:ba:a4:d4:71:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
        Validity
            Not Before: Jul 31 00:04:26 2023 GMT
            Not After : Jul 29 00:09:26 2024 GMT
        Subject: CN=1EEE3C78FA6C1DAECDFE97619C5FCAFE948E71C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:49:d2:9a:ce:1c:f9:b9:74:75:0d:af:6f:
                    83:35:ed:b4:46:04:3e:cd:65:e8:9b:00:8d:f5:21:
                    e4:99:f4:54:b3:be:53:f8:30:a9:bd:ff:c2:5e:6c:
                    a1:83:f4:32:99:63:36:b9:f8:75:1b:a4:b9:84:7c:
                    6c:b4:f1:8d:cd:16:35:39:28:ab:32:26:f1:5a:f0:
                    15:34:de:4f:84:c5:6f:21:3c:49:d6:bf:8a:0c:fd:
                    bc:ea:1c:7f:9b:65:7e:c5:c8:23:be:f8:2d:e5:0d:
                    4e:8f:c8:47:c3:84:67:c8:cd:6d:74:94:0f:bf:92:
                    ba:06:8f:f2:99:c5:f2:f2:41:84:2e:66:21:01:3a:
                    1d:09:d3:b4:bf:cf:20:9c:0c:1a:34:2e:64:0e:ff:
                    fb:e6:d4:10:c5:87:c1:2c:06:27:80:96:3f:42:b5:
                    ed:c4:4d:89:38:f8:4f:7b:5b:8a:f5:25:cd:00:0c:
                    ae:3f:0e:ba:fc:bd:3c:c5:16:ca:37:f8:2f:3a:ad:
                    a1:21:3b:73:d0:12:b4:12:f2:a2:9d:72:40:bc:eb:
                    56:45:3e:5a:22:7c:24:30:f5:fa:4c:10:62:78:43:
                    7f:97:32:7e:29:87:49:8b:8f:28:51:0a:b0:ae:32:
                    5e:12:9a:51:6a:4c:04:3a:6a:a4:51:a7:d1:f3:7c:
                    8b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EE:3C:78:FA:6C:1D:AE:CD:FE:97:61:9C:5F:CA:FE:94:8E:71:C5
            X509v3 Authority Key Identifier:
                keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:b100::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:1e:0b:94:18:79:38:7b:20:57:0b:8e:c4:6a:b4:a5:56:3a:
         bd:77:64:f2:c7:44:00:88:2f:80:3d:e1:cf:f7:cd:70:06:a6:
         28:fb:09:3c:9c:df:56:67:29:4e:09:36:81:1e:c5:04:d8:50:
         cb:cd:72:66:8c:08:e6:6d:2a:ad:0a:1c:ff:f7:69:4d:98:87:
         c6:19:d7:bc:4a:d9:0b:23:3a:c2:7c:13:5b:e0:36:1d:55:00:
         05:15:ac:1a:44:f2:9e:9b:52:89:8b:cb:17:26:a0:72:26:3b:
         ae:fa:87:ff:ca:cb:df:78:0f:76:91:16:3f:85:af:52:cb:8d:
         01:a0:c2:7e:6b:b1:2a:dd:70:6b:cc:05:c7:18:ee:f7:34:a5:
         76:c0:9c:28:db:18:7a:d5:8d:da:85:c0:b0:46:02:8d:76:88:
         b8:04:f8:d5:29:6d:70:9c:24:b2:fa:3b:fc:20:e8:6c:ae:8a:
         e9:00:f3:5f:e6:53:c3:04:8e:21:60:3b:4e:f3:d9:b4:41:cd:
         0c:70:01:2c:e8:65:95:1a:5b:b4:aa:39:34:83:28:64:8f:24:
         5e:8e:c0:bc:a7:fa:b7:69:7c:c8:51:72:fd:27:2c:cc:e5:12:
         dd:c2:08:b6:9e:cc:1d:6a:0d:35:b3:a1:cb:e1:f4:37:99:ea:
         ff:bd:bc:6f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUEhb1iAkXe5YsG8dixdoHuqTUcSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2
MUZFNzEyNjAeFw0yMzA3MzEwMDA0MjZaFw0yNDA3MjkwMDA5MjZaMDMxMTAvBgNV
BAMTKDFFRUUzQzc4RkE2QzFEQUVDREZFOTc2MTlDNUZDQUZFOTQ4RTcxQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoknSms4c+bl0dQ2vb4M17bRG
BD7NZeibAI31IeSZ9FSzvlP4MKm9/8JebKGD9DKZYza5+HUbpLmEfGy08Y3NFjU5
KKsyJvFa8BU03k+ExW8hPEnWv4oM/bzqHH+bZX7FyCO++C3lDU6PyEfDhGfIzW10
lA+/kroGj/KZxfLyQYQuZiEBOh0J07S/zyCcDBo0LmQO//vm1BDFh8EsBieAlj9C
te3ETYk4+E97W4r1Jc0ADK4/Drr8vTzFFso3+C86raEhO3PQErQS8qKdckC861ZF
PloifCQw9fpMEGJ4Q3+XMn4ph0mLjyhRCrCuMl4SmlFqTAQ6aqRRp9HzfIsZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUHu48ePpsHa7N/pdhnF/K/pSOccUwHwYDVR0j
BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5
QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF
NzEyNi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmZDgwZDk2LWVmMWItNDRiMi05
MDNhLTdmNmRhOTQxYTgzNi8wLzMyMzAzMDMxM2E2NDY2MzQzYTYyMzEzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM3MzMzMzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
9LEAMA0GCSqGSIb3DQEBCwUAA4IBAQBsHguUGHk4eyBXC47EarSlVjq9d2Tyx0QA
iC+APeHP981wBqYo+wk8nN9WZylOCTaBHsUE2FDLzXJmjAjmbSqtChz/92lNmIfG
Gde8StkLIzrCfBNb4DYdVQAFFawaRPKem1KJi8sXJqByJjuu+of/ysvfeA92kRY/
ha9Sy40BoMJ+a7Eq3XBrzAXHGO73NKV2wJwo2xh61Y3ahcCwRgKNdoi4BPjVKW1w
nCSy+jv8IOhsrorpAPNf5lPDBI4hYDtO89m0Qc0McAEs6GWVGlu0qjk0gyhkjyRe
jsC8p/q3aXzIUXL9JyzM5RLdwgi2nswdag01s6HL4fQ3mer/vbxv
-----END CERTIFICATE-----
Generated at Thu Apr 18 23:07:29 2024 by rpki-client on console-ams.rpki-client.org