Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a3a2f33332d3333203d3e20313331373439.roa
File:                     323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (raw, json)
Hash identifier:          3BKkXgibhm8pWULoTZTy+SiAuO79roWhNVrClZPOyjM=
Subject key identifier:   40:1D:FC:FB:39:58:45:36:AD:88:BF:96:27:19:55:B9:9A:2F:C8:37
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       0AC24D3D32EF097BFBFD77800B88A356C2430DD1
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a3a2f33332d3333203d3e20313331373439.roa
Signing time:             Mon 31 Jul 2023 00:03:03 +0000
ROA not before:           Sun 30 Jul 2023 23:58:03 +0000
ROA not after:            Mon 29 Jul 2024 00:03:03 +0000
asID:                     131749
IP address blocks:        2402:be80::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 10:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c2:4d:3d:32:ef:09:7b:fb:fd:77:80:0b:88:a3:56:c2:43:0d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul 30 23:58:03 2023 GMT
            Not After : Jul 29 00:03:03 2024 GMT
        Subject: CN=401DFCFB39584536AD88BF96271955B99A2FC837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:f2:e7:4a:92:0e:ed:d5:be:53:11:9b:9e:
                    29:09:e1:ca:65:d9:b9:d7:7f:33:11:89:b8:51:3c:
                    73:75:47:0f:c7:cc:28:e2:f3:c6:e9:5c:53:13:5f:
                    16:dc:9e:54:43:e1:19:1e:26:6c:03:20:0c:4e:73:
                    64:a4:2a:63:e9:bd:67:4a:bb:ad:38:af:ea:3c:06:
                    44:9d:fb:fb:07:a8:fb:ba:19:12:5d:cc:00:3b:27:
                    b5:27:ba:5b:26:22:7a:76:32:e1:50:03:bf:e4:30:
                    6e:28:5c:a7:c1:bd:69:c8:a4:8c:d9:29:64:e2:5b:
                    d3:18:bd:87:24:e2:d0:de:91:de:b6:62:8e:d7:66:
                    f9:65:9b:ff:ba:e6:48:ae:6b:d8:34:65:a0:14:31:
                    4d:0f:8b:3e:01:19:12:f5:05:c8:e1:d9:63:24:17:
                    99:88:da:df:57:74:a9:40:0a:57:f4:51:f3:ab:8d:
                    7c:1b:96:d0:25:13:28:50:da:ff:33:8b:9a:2f:d7:
                    57:bc:4c:5d:5b:82:1d:5b:1c:1b:8d:40:ad:c2:10:
                    0b:bd:fe:15:fb:c3:86:44:c7:c4:3b:ae:9e:d1:97:
                    86:13:6c:ba:c3:3e:0c:f9:84:8e:90:a1:91:05:32:
                    71:0c:46:fb:8f:a8:3b:c7:00:b5:b4:e6:a6:48:f8:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1D:FC:FB:39:58:45:36:AD:88:BF:96:27:19:55:B9:9A:2F:C8:37
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a3a2f33332d3333203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be80::/33

    Signature Algorithm: sha256WithRSAEncryption
         06:c6:4e:c6:8b:e5:ee:8d:be:26:47:dc:ac:c4:4a:da:e4:3b:
         fb:b8:cb:93:9b:12:bb:44:a3:ba:15:e0:27:b1:46:c6:c4:d6:
         93:27:3f:4d:8e:2f:77:2b:12:3b:69:c2:a9:2f:d1:91:16:da:
         ae:dd:75:d1:68:86:f9:76:f6:b3:4a:7e:7e:a3:bd:75:9e:e7:
         a5:5f:ce:c9:ca:66:12:50:92:62:d1:8a:35:6a:6e:c0:6c:af:
         43:90:6f:6d:4b:75:8c:98:8e:3f:33:61:2e:9e:66:92:e2:86:
         22:1e:35:c3:a4:c1:71:e1:45:cc:18:06:27:be:9d:36:d9:a3:
         d7:f4:cc:cf:bc:37:33:30:84:33:7b:db:91:67:2a:33:f2:22:
         e0:31:67:1a:df:d7:2b:2e:7c:de:ae:d8:39:a3:2f:ee:81:43:
         90:8f:93:68:bc:bf:30:77:b3:a8:97:bd:08:c5:5b:34:98:f8:
         09:68:77:70:90:c4:33:d0:d4:4c:b3:eb:d1:36:8f:fd:f9:7b:
         3f:87:c2:cd:f5:8e:51:67:2a:42:53:d6:07:b1:31:98:5e:42:
         a2:ac:25:bf:8b:4c:ec:a0:80:3d:06:c6:38:fe:ee:3b:e6:c7:
         92:13:a7:c4:b6:82:c8:4d:43:a6:ba:8f:2e:d4:8d:59:3d:db:
         08:ba:61:24
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUCsJNPTLvCXv7/XeAC4ijVsJDDdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5
NTIyNDZGRjAeFw0yMzA3MzAyMzU4MDNaFw0yNDA3MjkwMDAzMDNaMDMxMTAvBgNV
BAMTKDQwMURGQ0ZCMzk1ODQ1MzZBRDg4QkY5NjI3MTk1NUI5OUEyRkM4MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqfLnSpIO7dW+UxGbnikJ4cpl
2bnXfzMRibhRPHN1Rw/HzCji88bpXFMTXxbcnlRD4RkeJmwDIAxOc2SkKmPpvWdK
u604r+o8BkSd+/sHqPu6GRJdzAA7J7UnulsmInp2MuFQA7/kMG4oXKfBvWnIpIzZ
KWTiW9MYvYck4tDekd62Yo7XZvllm/+65kiua9g0ZaAUMU0Piz4BGRL1Bcjh2WMk
F5mI2t9XdKlAClf0UfOrjXwbltAlEyhQ2v8zi5ov11e8TF1bgh1bHBuNQK3CEAu9
/hX7w4ZEx8Q7rp7Rl4YTbLrDPgz5hI6QoZEFMnEMRvuPqDvHALW05qZI+OjpAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUQB38+zlYRTatiL+WJxlVuZovyDcwHwYDVR0j
BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw
RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy
NDZGRi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04
YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhM2EyZjMzMzMy
ZDMzMzMyMDNkM2UyMDMxMzMzMTM3MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGByQCvoAAMA0GCSqG
SIb3DQEBCwUAA4IBAQAGxk7Gi+Xujb4mR9ysxEra5Dv7uMuTmxK7RKO6FeAnsUbG
xNaTJz9Nji93KxI7acKpL9GRFtqu3XXRaIb5dvazSn5+o711nuelX87JymYSUJJi
0Yo1am7AbK9DkG9tS3WMmI4/M2EunmaS4oYiHjXDpMFx4UXMGAYnvp022aPX9MzP
vDczMIQze9uRZyoz8iLgMWca39crLnzertg5oy/ugUOQj5NovL8wd7Ool70IxVs0
mPgJaHdwkMQz0NRMs+vRNo/9+Xs/h8LN9Y5RZypCU9YHsTGYXkKirCW/i0zsoIA9
BsY4/u475seSE6fEtoLITUOmuo8u1I1ZPdsIumEk
-----END CERTIFICATE-----
Generated at Wed Apr 17 13:13:45 2024 by rpki-client on console-ams.rpki-client.org