Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa
File:                     323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (raw, json)
Hash identifier:          4G3iqfCqEN+4SWMXOfThJ+Sel9W06PCHaPEEYt0CBWc=
Subject key identifier:   F5:4B:9D:A2:89:E7:F1:46:C9:72:75:78:AE:CC:DF:16:43:45:10:D9
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       39E8DA8951FA4A59C8179E2A7159C346DC2C412A
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa
Signing time:             Mon 31 Jul 2023 00:03:03 +0000
ROA not before:           Sun 30 Jul 2023 23:58:03 +0000
ROA not after:            Mon 29 Jul 2024 00:03:03 +0000
asID:                     131749
IP address blocks:        2402:be80:c000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Mar 2024 20:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e8:da:89:51:fa:4a:59:c8:17:9e:2a:71:59:c3:46:dc:2c:41:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul 30 23:58:03 2023 GMT
            Not After : Jul 29 00:03:03 2024 GMT
        Subject: CN=F54B9DA289E7F146C9727578AECCDF16434510D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:72:a3:9f:45:4b:5b:39:2a:8e:c6:d6:04:61:
                    b2:9a:23:f0:05:53:7f:fb:78:ef:90:e8:be:6a:33:
                    1f:1d:b4:33:d8:1d:72:22:06:a6:c8:f6:04:f0:57:
                    a5:ee:b6:c0:83:5a:53:72:26:b2:45:95:56:d9:1d:
                    89:96:18:c2:ee:12:fb:b5:9a:9f:5c:c8:86:76:95:
                    42:4a:71:ba:70:e5:f8:58:8f:6d:50:68:98:68:b4:
                    ba:7e:e6:01:cf:cf:8d:e5:ea:b0:3b:76:1e:6d:ef:
                    d1:fe:46:7f:28:6a:13:c8:87:92:3f:b6:5a:29:3f:
                    71:4d:30:52:d3:ef:71:6b:83:f1:52:67:b2:20:e6:
                    ab:b7:ed:74:d8:55:41:93:11:45:d7:4b:7e:44:c9:
                    a6:cf:8a:b1:c4:18:bd:6a:25:2e:96:80:6c:21:18:
                    1c:b7:17:57:bc:08:b6:c6:a2:93:a9:0b:20:be:f9:
                    69:6c:ff:d8:0f:99:7b:a0:38:d2:59:8e:30:c5:aa:
                    3d:4d:8c:0c:8e:41:b3:e0:aa:25:d7:74:85:b9:d9:
                    8c:48:c9:8f:55:00:9f:7a:ec:30:ad:7b:fe:f4:82:
                    49:9c:bf:ee:37:c8:b4:2f:c4:9c:aa:4c:93:70:82:
                    91:f8:bf:7b:70:5b:74:02:43:5f:2f:14:73:03:61:
                    fb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4B:9D:A2:89:E7:F1:46:C9:72:75:78:AE:CC:DF:16:43:45:10:D9
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be80:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         0d:43:c0:11:b6:27:fc:0e:09:35:0d:ed:3f:71:0b:af:73:17:
         f5:15:9c:45:ce:3a:3b:16:41:2e:75:c0:6e:c3:dc:d9:c2:8f:
         db:1d:e7:1d:12:6b:27:fc:f4:2a:53:52:8e:76:24:c7:e0:26:
         51:1e:31:b3:e8:5a:e6:39:cb:48:78:69:4a:2f:67:8a:38:3e:
         6f:db:02:d9:eb:bd:da:ca:3a:69:23:88:8e:bd:39:d7:21:2d:
         a7:36:f7:b1:f2:32:32:ca:0a:42:4e:92:3b:79:5c:7e:b3:41:
         7e:4a:c4:99:98:f8:8e:eb:c2:59:5f:d8:71:6e:50:48:36:59:
         ae:01:fd:34:e6:97:77:b2:e4:fe:07:d6:91:ae:d5:12:77:fb:
         4c:1d:20:ab:c1:36:90:bc:dd:3b:db:36:28:e6:f3:b4:3a:ef:
         7e:1c:2e:75:e7:87:85:4f:3c:d6:f7:69:c9:1b:d0:4d:00:38:
         38:f1:7a:07:7a:e2:df:27:98:a9:72:63:3b:f1:4f:b8:15:9d:
         33:48:33:1b:60:1f:b5:b2:b8:1c:70:c1:2d:7b:57:93:65:13:
         ef:09:40:d8:2e:c8:ac:f3:64:72:fc:c9:b7:00:5e:7d:70:bc:
         75:b1:4c:6e:05:0b:49:eb:0b:8b:6b:f8:2a:04:4a:16:97:83:
         95:dd:0a:3f
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUOejaiVH6SlnIF54qcVnDRtwsQSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5
NTIyNDZGRjAeFw0yMzA3MzAyMzU4MDNaFw0yNDA3MjkwMDAzMDNaMDMxMTAvBgNV
BAMTKEY1NEI5REEyODlFN0YxNDZDOTcyNzU3OEFFQ0NERjE2NDM0NTEwRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwcqOfRUtbOSqOxtYEYbKaI/AF
U3/7eO+Q6L5qMx8dtDPYHXIiBqbI9gTwV6XutsCDWlNyJrJFlVbZHYmWGMLuEvu1
mp9cyIZ2lUJKcbpw5fhYj21QaJhotLp+5gHPz43l6rA7dh5t79H+Rn8oahPIh5I/
tlopP3FNMFLT73Frg/FSZ7Ig5qu37XTYVUGTEUXXS35EyabPirHEGL1qJS6WgGwh
GBy3F1e8CLbGopOpCyC++Wls/9gPmXugONJZjjDFqj1NjAyOQbPgqiXXdIW52YxI
yY9VAJ967DCte/70gkmcv+43yLQvxJyqTJNwgpH4v3twW3QCQ18vFHMDYfufAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQU9Uudoonn8UbJcnV4rszfFkNFENkwHwYDVR0j
BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw
RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy
NDZGRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04
YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhNjMzMDMwMzAz
YTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk
Ar6AwDANBgkqhkiG9w0BAQsFAAOCAQEADUPAEbYn/A4JNQ3tP3ELr3MX9RWcRc46
OxZBLnXAbsPc2cKP2x3nHRJrJ/z0KlNSjnYkx+AmUR4xs+ha5jnLSHhpSi9nijg+
b9sC2eu92so6aSOIjr051yEtpzb3sfIyMsoKQk6SO3lcfrNBfkrEmZj4juvCWV/Y
cW5QSDZZrgH9NOaXd7Lk/gfWka7VEnf7TB0gq8E2kLzdO9s2KObztDrvfhwudeeH
hU881vdpyRvQTQA4OPF6B3ri3yeYqXJjO/FPuBWdM0gzG2AftbK4HHDBLXtXk2UT
7wlA2C7IrPNkcvzJtwBefXC8dbFMbgULSesLi2v4KgRKFpeDld0KPw==
-----END CERTIFICATE-----
Generated at Wed Mar 27 18:48:29 2024 by rpki-client on console-fra.rpki-client.org