Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030313a3a2f34382d3438203d3e20313331313138.roa
File:                     323430323a393830303a343030313a3a2f34382d3438203d3e20313331313138.roa (raw, json)
Hash identifier:          2YrQWSH4mdWO1ycjfH/jUEvwZAJhHhSyvQ25r4XSQuo=
Subject key identifier:   3C:FC:20:28:00:4B:41:40:46:1A:F7:EE:9E:2A:23:AF:55:1B:AB:4F
Certificate issuer:       /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Certificate serial:       15C9CA312116E1931499CB03D059BA5439501D8C
Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030313a3a2f34382d3438203d3e20313331313138.roa
Signing time:             Fri 15 Sep 2023 01:00:02 +0000
ROA not before:           Fri 15 Sep 2023 00:55:02 +0000
ROA not after:            Fri 13 Sep 2024 01:00:02 +0000
asID:                     131118
IP address blocks:        2402:9800:4001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl
                          rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 14:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c9:ca:31:21:16:e1:93:14:99:cb:03:d0:59:ba:54:39:50:1d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
        Validity
            Not Before: Sep 15 00:55:02 2023 GMT
            Not After : Sep 13 01:00:02 2024 GMT
        Subject: CN=3CFC2028004B4140461AF7EE9E2A23AF551BAB4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:17:ef:ff:6e:5c:e5:fc:a0:b7:f6:a7:5a:
                    d2:89:52:7f:17:b8:94:1c:ef:df:ac:7d:21:71:d1:
                    4c:07:4d:5c:0d:78:df:29:1f:f6:99:0b:3d:00:78:
                    07:3f:25:84:89:77:d8:61:6e:4d:d4:ad:8b:0f:07:
                    23:18:6e:c3:8e:ed:e3:0a:31:1a:eb:f0:c9:4b:fe:
                    f5:19:9e:b8:22:1e:ac:a7:fa:81:8e:23:5d:42:73:
                    32:e0:fc:51:82:7d:bd:b6:e1:b9:0b:90:88:9a:0e:
                    d8:d6:d4:61:85:10:f9:e5:7e:1c:2e:47:18:0d:3f:
                    e2:b6:23:28:38:94:17:d5:24:27:5d:22:b0:d0:81:
                    35:cc:0a:c3:27:89:9a:e8:81:4d:38:2b:8a:80:ae:
                    7e:07:37:92:6c:c7:72:85:79:a3:5c:75:a8:2a:68:
                    57:88:46:21:78:4b:91:f4:4b:cd:40:41:59:29:b5:
                    7b:d1:80:55:6b:f9:eb:ce:f3:1f:ee:4c:d0:60:9c:
                    5f:a3:ca:a2:20:ce:56:11:1e:e3:a8:04:ec:c4:c8:
                    30:5a:6e:12:2b:b8:2c:a2:52:4c:bc:5b:de:ea:b8:
                    96:3b:9a:7c:e0:fb:39:53:48:9f:bd:a6:ce:e8:5b:
                    7a:70:7a:6e:26:34:11:cc:35:9b:d6:50:a4:3c:77:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FC:20:28:00:4B:41:40:46:1A:F7:EE:9E:2A:23:AF:55:1B:AB:4F
            X509v3 Authority Key Identifier:
                keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030313a3a2f34382d3438203d3e20313331313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9800:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:f9:48:97:65:8e:f3:c6:4b:c4:2c:ae:ef:63:3a:af:3a:52:
         b3:9a:a0:eb:3c:83:d4:e8:c8:ad:06:a5:be:e9:22:a0:29:04:
         23:b6:51:86:86:f0:7b:ae:c0:7a:05:74:34:ca:43:26:2d:78:
         47:eb:f0:99:84:4b:b7:cc:1b:26:d3:01:82:b0:85:3e:ff:98:
         8d:be:c3:43:9d:8e:68:e8:93:f1:a3:cf:65:24:22:4d:c7:31:
         94:7b:ef:65:88:0d:2d:e0:68:76:cf:d8:95:93:5f:96:19:68:
         9a:e5:0a:4d:1b:12:3b:ad:fd:30:7f:f8:36:e7:7c:a8:cf:7f:
         4c:25:45:72:ab:bb:e6:a0:fe:5f:08:c5:ad:ed:a9:bd:f1:ed:
         a2:5e:98:9a:08:a3:37:4d:9e:ae:4c:49:9e:77:96:8d:95:15:
         55:ff:6f:18:2a:c3:cd:b5:b0:fa:07:3d:ca:49:40:f6:98:1d:
         02:55:32:ef:83:c0:08:11:25:c7:ca:51:e8:92:04:2c:ea:7c:
         b8:1c:63:da:3c:63:ed:bb:5e:87:e1:7d:d6:19:56:5b:3e:06:
         37:a8:4f:0a:21:fb:9e:ce:27:d1:e3:42:16:11:13:e5:ad:65:
         08:34:f3:a0:2c:d9:b7:3e:91:7b:a1:25:db:64:49:27:af:56:
         f0:f5:1e:3c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFcnKMSEW4ZMUmcsD0Fm6VDlQHYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3
MkZGQUUwRTAeFw0yMzA5MTUwMDU1MDJaFw0yNDA5MTMwMTAwMDJaMDMxMTAvBgNV
BAMTKDNDRkMyMDI4MDA0QjQxNDA0NjFBRjdFRTlFMkEyM0FGNTUxQkFCNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhxfv/25c5fygt/anWtKJUn8X
uJQc79+sfSFx0UwHTVwNeN8pH/aZCz0AeAc/JYSJd9hhbk3UrYsPByMYbsOO7eMK
MRrr8MlL/vUZnrgiHqyn+oGOI11CczLg/FGCfb224bkLkIiaDtjW1GGFEPnlfhwu
RxgNP+K2Iyg4lBfVJCddIrDQgTXMCsMniZrogU04K4qArn4HN5Jsx3KFeaNcdagq
aFeIRiF4S5H0S81AQVkptXvRgFVr+evO8x/uTNBgnF+jyqIgzlYRHuOoBOzEyDBa
bhIruCyiUky8W97quJY7mnzg+zlTSJ+9ps7oW3pwem4mNBHMNZvWUKQ8d+WfAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUPPwgKABLQUBGGvfuniojr1Ubq08wHwYDVR0j
BBgwFoAU/NBThZBOAPPBCjOe4Z2STXL/rg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMC9GQ0QwNTM4NTkw
NEUwMEYzQzEwQTMzOUVFMTlEOTI0RDcyRkZBRTBFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3MkZG
QUUwRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04
MGI3LTA2ZmMxMThkZjhlMi8wLzMyMzQzMDMyM2EzOTM4MzAzMDNhMzQzMDMwMzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzMTMxMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
ApgAQAEwDQYJKoZIhvcNAQELBQADggEBAF/5SJdljvPGS8Qsru9jOq86UrOaoOs8
g9ToyK0Gpb7pIqApBCO2UYaG8HuuwHoFdDTKQyYteEfr8JmES7fMGybTAYKwhT7/
mI2+w0Odjmjok/Gjz2UkIk3HMZR772WIDS3gaHbP2JWTX5YZaJrlCk0bEjut/TB/
+DbnfKjPf0wlRXKru+ag/l8Ixa3tqb3x7aJemJoIozdNnq5MSZ53lo2VFVX/bxgq
w821sPoHPcpJQPaYHQJVMu+DwAgRJcfKUeiSBCzqfLgcY9o8Y+27XofhfdYZVls+
BjeoTwoh+57OJ9HjQhYRE+WtZQg086As2bc+kXuhJdtkSSevVvD1Hjw=
-----END CERTIFICATE-----
Generated at Fri May 17 10:57:30 2024 by rpki-client on console-ams.rpki-client.org