Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          krGGMl+Ilf3X4rJedlsFjSJXdb5bs/WvYj6IHw46HhY=
Subject key identifier:   26:16:72:9D:44:16:B5:9A:5A:A5:E6:79:6E:30:F9:98:D1:00:0A:2E
Certificate issuer:       /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial:       18DBB2068DD0C8D03045802B2420E47F3FDC977F
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Tue 03 Oct 2023 15:00:00 +0000
ROA not before:           Tue 03 Oct 2023 14:55:00 +0000
ROA not after:            Tue 01 Oct 2024 15:00:00 +0000
asID:                     139949
IP address blocks:        2405:aac0:54::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
                          rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:db:b2:06:8d:d0:c8:d0:30:45:80:2b:24:20:e4:7f:3f:dc:97:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
        Validity
            Not Before: Oct  3 14:55:00 2023 GMT
            Not After : Oct  1 15:00:00 2024 GMT
        Subject: CN=2616729D4416B59A5AA5E6796E30F998D1000A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:d3:a8:7f:35:6a:82:59:a0:a4:c4:fb:d6:
                    e1:59:d3:1d:ef:12:ef:cf:bf:60:ae:e1:ae:b7:9d:
                    ac:e5:59:e5:3a:a3:10:be:73:01:89:14:82:6c:ca:
                    f3:2d:6e:7c:1c:27:f2:09:27:71:41:ad:89:f1:17:
                    03:94:e6:13:3b:96:60:92:87:eb:49:b8:01:aa:03:
                    a7:98:bd:82:9f:59:55:03:af:a8:f3:a5:c3:b0:47:
                    bc:02:0b:7e:ef:88:12:52:96:75:b0:16:99:d5:5e:
                    71:8d:10:68:e3:3b:a4:e2:b4:bd:ea:43:57:fe:a1:
                    71:73:88:ce:37:dc:4f:d8:99:db:68:35:d1:8a:ac:
                    67:03:e6:4f:58:df:09:50:58:7f:f9:36:43:6d:e3:
                    ef:e3:5d:6e:06:90:3f:d7:48:5a:31:20:a0:bb:b3:
                    f3:f2:1d:7d:c6:37:b3:02:77:56:41:f1:3a:45:55:
                    dd:de:c2:55:69:0c:0c:a9:2c:ca:b5:27:58:52:f2:
                    fd:07:40:e6:af:ca:dc:f9:48:2c:22:ef:64:4d:69:
                    bf:15:85:3b:0f:02:34:99:37:a2:12:53:2e:5a:1c:
                    40:00:86:2b:5d:c6:0a:07:54:d7:f1:06:9c:96:83:
                    52:7a:03:ba:2b:91:fb:9e:77:36:8b:41:af:e1:9b:
                    43:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:16:72:9D:44:16:B5:9A:5A:A5:E6:79:6E:30:F9:98:D1:00:0A:2E
            X509v3 Authority Key Identifier:
                keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:54::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:6c:70:18:dc:06:dd:95:44:81:f4:1e:97:a7:c7:fd:25:cd:
         2d:f2:49:4a:f0:b6:fe:ea:21:98:b7:c4:0a:00:df:89:40:cb:
         27:14:8c:ab:6b:82:3d:57:bf:23:83:60:53:a2:ca:ea:7e:a2:
         aa:08:d3:5c:60:0d:9d:bf:60:ab:41:bc:a2:73:5d:cf:fa:b0:
         5d:d0:81:2c:a3:36:c8:eb:ae:63:7a:d3:36:a4:26:08:8c:32:
         bd:cf:82:62:d9:8d:5d:57:5f:68:d9:5d:c9:01:ba:43:3c:f5:
         00:9c:b6:ef:6b:9b:c0:c7:e3:0f:0f:24:9f:31:c9:80:25:ca:
         58:5f:5e:62:fb:1b:fe:5f:a5:7f:93:c0:7c:5a:78:a1:ee:85:
         61:e1:ed:ff:24:0e:0c:23:4f:35:fb:f9:f3:7e:6a:bf:cb:55:
         d3:7f:b0:25:8d:db:db:b2:8e:36:c5:04:91:b3:fb:2f:4d:ea:
         fa:3c:76:00:11:ea:ba:cd:ba:5d:ea:6a:9d:ff:d8:5e:d5:a4:
         38:b2:6e:db:52:7e:9c:9b:b1:fa:f7:4a:f6:98:79:2c:5a:2b:
         ae:7e:0b:74:12:0a:dd:73:89:48:17:38:a1:a2:09:23:e6:e1:
         f7:ea:86:5d:83:6b:ec:c5:75:4c:38:40:55:a5:10:b2:b2:0e:
         34:9d:86:29
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGNuyBo3QyNAwRYArJCDkfz/cl38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx
NjRGRTVDRjAeFw0yMzEwMDMxNDU1MDBaFw0yNDEwMDExNTAwMDBaMDMxMTAvBgNV
BAMTKDI2MTY3MjlENDQxNkI1OUE1QUE1RTY3OTZFMzBGOTk4RDEwMDBBMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4z9OofzVqglmgpMT71uFZ0x3v
Eu/Pv2Cu4a63nazlWeU6oxC+cwGJFIJsyvMtbnwcJ/IJJ3FBrYnxFwOU5hM7lmCS
h+tJuAGqA6eYvYKfWVUDr6jzpcOwR7wCC37viBJSlnWwFpnVXnGNEGjjO6TitL3q
Q1f+oXFziM433E/YmdtoNdGKrGcD5k9Y3wlQWH/5NkNt4+/jXW4GkD/XSFoxIKC7
s/PyHX3GN7MCd1ZB8TpFVd3ewlVpDAypLMq1J1hS8v0HQOavytz5SCwi72RNab8V
hTsPAjSZN6ISUy5aHEAAhitdxgoHVNfxBpyWg1J6A7orkfuedzaLQa/hm0O5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUJhZynUQWtZpapeZ5bjD5mNEACi4wHwYDVR0j
BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4
NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG
RTVDRi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05
MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzUzNDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFqsAA
VDANBgkqhkiG9w0BAQsFAAOCAQEAt2xwGNwG3ZVEgfQel6fH/SXNLfJJSvC2/uoh
mLfECgDfiUDLJxSMq2uCPVe/I4NgU6LK6n6iqgjTXGANnb9gq0G8onNdz/qwXdCB
LKM2yOuuY3rTNqQmCIwyvc+CYtmNXVdfaNldyQG6Qzz1AJy272ubwMfjDw8knzHJ
gCXKWF9eYvsb/l+lf5PAfFp4oe6FYeHt/yQODCNPNfv5835qv8tV03+wJY3b27KO
NsUEkbP7L03q+jx2ABHqus26Xepqnf/YXtWkOLJu21J+nJux+vdK9ph5LForrn4L
dBIK3XOJSBc4oaIJI+bh9+qGXYNr7MV1TDhAVaUQsrIONJ2GKQ==
-----END CERTIFICATE-----
Generated at Wed Apr 24 18:30:05 2024 by rpki-client on console-fra.rpki-client.org