Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa
File:                     323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (raw, json)
Hash identifier:          FZhHtxb5rTlAf0HxaALzn7HQsyFA4CB9+F+MmOU4Ao8=
Subject key identifier:   DC:5D:2C:20:40:67:15:A9:96:F2:49:C1:CB:D8:6A:DB:38:53:7E:7F
Certificate issuer:       /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
Certificate serial:       67A69FF3D6FAB1258E9CC54213FB4732E89911D2
Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa
Signing time:             Mon 31 Jul 2023 00:04:37 +0000
ROA not before:           Sun 30 Jul 2023 23:59:37 +0000
ROA not after:            Mon 29 Jul 2024 00:04:37 +0000
asID:                     24211
IP address blocks:        2402:a000:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl
                          rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 11:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a6:9f:f3:d6:fa:b1:25:8e:9c:c5:42:13:fb:47:32:e8:99:11:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
        Validity
            Not Before: Jul 30 23:59:37 2023 GMT
            Not After : Jul 29 00:04:37 2024 GMT
        Subject: CN=DC5D2C20406715A996F249C1CBD86ADB38537E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:63:52:96:44:40:e9:a8:c0:b0:6d:18:d1:
                    fb:22:88:e0:b8:1b:69:77:9a:d3:d7:97:cd:e6:fa:
                    6f:da:06:11:0a:85:14:40:96:5b:00:8d:a8:03:09:
                    3e:c2:03:72:c4:82:fe:cf:c1:71:a5:21:0a:8b:6e:
                    b9:c5:74:85:33:a7:7c:12:04:61:66:20:a2:f7:88:
                    89:38:9e:e6:a8:32:9c:6c:55:51:2f:c3:ea:b9:d9:
                    f4:33:23:a8:51:fd:b2:88:4f:68:9d:cc:a9:b8:8c:
                    e2:dd:ca:54:d8:f9:f2:73:7e:b8:43:dd:97:5f:7e:
                    ae:5c:58:98:d8:97:5f:dc:5d:1c:4a:cd:50:5e:8d:
                    7b:f2:00:df:aa:18:d5:62:94:55:c5:36:91:2c:74:
                    08:c7:a2:f3:86:f9:8a:1e:a5:41:cb:3f:d1:79:2b:
                    70:7e:94:40:02:ee:c8:59:41:fd:62:d3:a8:8b:3d:
                    96:d6:95:19:64:ec:b5:14:69:46:60:37:75:d8:91:
                    a3:54:64:94:66:f5:3c:83:3b:38:ac:2e:38:54:8d:
                    25:2e:18:c7:0b:67:67:8d:39:6b:64:6d:79:09:69:
                    4b:b1:9d:43:2b:fd:14:8c:fc:a8:cb:32:e3:90:99:
                    69:79:13:85:d2:6d:95:5b:c4:2a:d0:27:0e:5f:18:
                    2a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5D:2C:20:40:67:15:A9:96:F2:49:C1:CB:D8:6A:DB:38:53:7E:7F
            X509v3 Authority Key Identifier:
                keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:a000:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:7a:cf:93:65:d2:0c:8f:11:22:a0:8c:ac:ef:fc:2c:5a:b1:
         f2:ef:c9:49:0d:82:50:fc:3b:af:8e:cc:50:e1:58:60:3f:4c:
         6b:6e:3a:c5:57:5e:3c:2f:ab:9c:7c:22:56:5b:d4:e1:ee:3f:
         40:dd:49:fe:0c:54:c1:f1:3d:6c:92:f5:b9:fc:87:35:c3:6d:
         bd:fd:e0:6b:b6:fc:8f:40:bc:57:aa:bd:e2:de:5e:e4:c3:7c:
         fd:0d:20:cf:77:fc:31:5a:38:dc:43:43:41:e8:26:25:6e:08:
         35:1b:8b:ee:3c:cd:a1:32:f7:05:a6:16:b4:c1:fa:5b:77:a4:
         84:4d:e2:07:a9:69:e0:fd:e7:b2:f5:4b:9c:d3:95:94:e7:b0:
         65:73:75:dc:ff:7a:33:5e:a9:f9:87:6b:2d:d9:40:31:9f:30:
         07:a7:97:7c:8e:aa:32:c4:22:e3:00:31:38:ab:b5:3b:a7:78:
         a7:e6:6d:c2:46:0f:ef:e9:24:0f:c6:3a:23:99:2b:c1:cf:ac:
         ab:d0:0d:37:d9:56:7a:2f:76:16:2c:c1:7f:bc:96:cf:e2:f9:
         18:ca:9d:24:55:ed:ff:f2:23:c9:0c:41:99:47:fb:2a:c2:8b:
         45:fb:b8:f3:fa:d6:6a:13:d6:33:b2:79:e4:96:02:b0:70:7a:
         10:43:77:dc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ6af89b6sSWOnMVCE/tHMuiZEdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3
MkFCNzY5QjAeFw0yMzA3MzAyMzU5MzdaFw0yNDA3MjkwMDA0MzdaMDMxMTAvBgNV
BAMTKERDNUQyQzIwNDA2NzE1QTk5NkYyNDlDMUNCRDg2QURCMzg1MzdFN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1tGNSlkRA6ajAsG0Y0fsiiOC4
G2l3mtPXl83m+m/aBhEKhRRAllsAjagDCT7CA3LEgv7PwXGlIQqLbrnFdIUzp3wS
BGFmIKL3iIk4nuaoMpxsVVEvw+q52fQzI6hR/bKIT2idzKm4jOLdylTY+fJzfrhD
3Zdffq5cWJjYl1/cXRxKzVBejXvyAN+qGNVilFXFNpEsdAjHovOG+YoepUHLP9F5
K3B+lEAC7shZQf1i06iLPZbWlRlk7LUUaUZgN3XYkaNUZJRm9TyDOzisLjhUjSUu
GMcLZ2eNOWtkbXkJaUuxnUMr/RSM/KjLMuOQmWl5E4XSbZVbxCrQJw5fGCq5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3F0sIEBnFamW8knBy9hq2zhTfn8wHwYDVR0j
BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz
MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC
NzY5Qi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h
YWM1LTA4MDQxYjNmNjVlNi8wLzMyMzQzMDMyM2E2MTMwMzAzMDNhMzQzMDMwMzAz
YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM0MzIzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJAKg
AEAwDQYJKoZIhvcNAQELBQADggEBAFx6z5Nl0gyPESKgjKzv/CxasfLvyUkNglD8
O6+OzFDhWGA/TGtuOsVXXjwvq5x8IlZb1OHuP0DdSf4MVMHxPWyS9bn8hzXDbb39
4Gu2/I9AvFeqveLeXuTDfP0NIM93/DFaONxDQ0HoJiVuCDUbi+48zaEy9wWmFrTB
+lt3pIRN4gepaeD957L1S5zTlZTnsGVzddz/ejNeqfmHay3ZQDGfMAenl3yOqjLE
IuMAMTirtTuneKfmbcJGD+/pJA/GOiOZK8HPrKvQDTfZVnovdhYswX+8ls/i+RjK
nSRV7f/yI8kMQZlH+yrCi0X7uPP61moT1jOyeeSWArBwehBDd9w=
-----END CERTIFICATE-----
Generated at Tue Apr 23 18:36:01 2024 by rpki-client on console-ams.rpki-client.org