Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa
File:                     323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa (raw, json)
Hash identifier:          ejw7nrRhfViZJ8O0MH2Owd1AwBoCfVNvrSPq0/GeB5s=
Subject key identifier:   51:EB:01:99:FB:AF:07:17:8E:2A:01:8C:3D:16:C8:AE:FA:B2:B1:A3
Certificate issuer:       /CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
Certificate serial:       0B31FBB2A5701FB56440789F280571470871C16E
Authority key identifier: AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa
Signing time:             Thu 10 Aug 2023 09:00:01 +0000
ROA not before:           Thu 10 Aug 2023 08:55:01 +0000
ROA not after:            Thu 08 Aug 2024 09:00:01 +0000
asID:                     133800
IP address blocks:        2001:df7:aa00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl
                          rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 05:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:31:fb:b2:a5:70:1f:b5:64:40:78:9f:28:05:71:47:08:71:c1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
        Validity
            Not Before: Aug 10 08:55:01 2023 GMT
            Not After : Aug  8 09:00:01 2024 GMT
        Subject: CN=51EB0199FBAF07178E2A018C3D16C8AEFAB2B1A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:10:2f:c8:56:58:37:62:2f:04:0b:cd:4b:
                    6a:3f:fb:8e:80:a2:2f:9e:06:8a:48:9a:07:03:8e:
                    ae:d1:4f:dd:0c:06:86:e9:29:bf:1e:59:20:b1:c2:
                    e6:d9:fd:4b:a5:a8:97:75:9d:be:b1:3a:31:82:4c:
                    2e:14:26:50:19:07:50:0f:7d:a5:b4:6d:fd:94:5d:
                    6a:70:c9:c8:c8:10:23:fb:cf:c2:df:16:5d:30:9f:
                    92:23:44:06:c3:48:ae:b1:cf:31:d6:47:22:ed:fb:
                    dd:cb:04:87:0c:a0:68:bf:29:f0:ef:8e:46:a6:ab:
                    f6:2d:8a:02:2b:dd:cd:5e:c2:30:7c:ff:c1:07:43:
                    d1:e0:cc:de:3e:c2:28:cd:73:b5:91:c0:a3:91:04:
                    04:07:8a:2c:8b:18:58:34:66:b2:c0:63:df:f4:27:
                    34:d5:db:c2:cc:0d:c4:8a:c6:52:8f:f5:47:53:e2:
                    c3:41:69:4b:a7:8f:02:ed:92:d8:f6:ee:cf:7e:56:
                    a6:e6:43:7f:86:de:df:da:c1:fe:4d:ed:1a:be:fb:
                    75:a6:e0:75:44:dd:02:0b:ab:8f:b2:d1:3d:6a:7c:
                    bf:e8:42:69:2a:fa:5b:31:20:2c:d3:46:90:39:0b:
                    f4:a1:c9:47:77:d5:69:5c:29:cc:34:73:ad:dc:82:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EB:01:99:FB:AF:07:17:8E:2A:01:8C:3D:16:C8:AE:FA:B2:B1:A3
            X509v3 Authority Key Identifier:
                keyid:AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:aa00::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:b0:03:7f:15:ad:b3:dc:96:67:6d:6d:45:48:30:63:7b:51:
         94:43:15:63:87:5d:96:c0:f0:4e:e3:ce:e8:33:24:40:bf:7b:
         ba:32:f2:d9:ce:3f:0c:29:b9:ba:35:aa:54:18:ab:79:45:85:
         2d:6b:ed:9f:cc:73:7d:27:81:85:b0:8e:89:ce:73:ea:9f:4e:
         6f:08:fc:d6:ef:4c:4b:18:a4:7a:d0:42:5e:dc:1a:1a:b0:ee:
         0a:f7:4d:82:93:22:73:39:0c:a9:04:d9:f4:cb:7c:c7:6c:84:
         00:37:a2:da:db:b3:76:8e:cb:1b:ee:c8:57:d8:fa:d8:0a:02:
         e3:d7:e5:a9:0e:49:84:b1:1a:f5:bd:ef:11:33:f1:75:22:7d:
         31:8a:f2:66:c6:e1:6e:52:8f:4b:61:47:36:a0:80:fc:8e:7e:
         e0:c2:df:a9:6f:97:91:92:c4:c4:5b:9e:71:db:de:c0:24:1c:
         f4:26:24:6b:04:cf:63:58:fe:c4:b5:85:a8:05:f1:1d:60:51:
         8d:fe:2b:74:dd:6e:9c:e2:d8:0c:39:8e:8f:ca:82:be:fd:47:
         e2:38:36:e4:c3:99:d6:e1:f1:1e:5a:a5:9e:27:94:a6:d5:40:
         31:ac:6e:8a:0f:89:54:6b:d6:09:92:5f:68:8c:ed:e1:bf:72:
         ef:5d:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 03:33:43 2024 by rpki-client on console-ams.rpki-client.org