Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa
File:                     323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (raw, json)
Hash identifier:          bUh3XYRRCzZ7As5mm2MKQKz+3P5VPbhXCmPAGUpWsco=
Subject key identifier:   AD:4B:B4:0C:4B:05:C0:B5:30:81:7A:DE:A0:96:32:77:1D:7F:5D:B9
Certificate issuer:       /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
Certificate serial:       047EAFDAD5E4554B13C305857FEBA5E41C373887
Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa
Signing time:             Mon 31 Jul 2023 00:04:37 +0000
ROA not before:           Sun 30 Jul 2023 23:59:37 +0000
ROA not after:            Mon 29 Jul 2024 00:04:37 +0000
asID:                     24211
IP address blocks:        2402:a000:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl
                          rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 14:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7e:af:da:d5:e4:55:4b:13:c3:05:85:7f:eb:a5:e4:1c:37:38:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
        Validity
            Not Before: Jul 30 23:59:37 2023 GMT
            Not After : Jul 29 00:04:37 2024 GMT
        Subject: CN=AD4BB40C4B05C0B530817ADEA09632771D7F5DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ef:28:f1:df:33:3d:9f:85:44:93:b7:5f:da:
                    b2:db:8c:95:1f:a8:de:e9:f0:e6:4c:5b:d2:fb:41:
                    2f:ed:cb:97:21:ea:1d:c5:7d:34:fe:db:2d:da:54:
                    84:cf:c5:f3:72:e0:3f:77:1a:da:56:69:fc:41:02:
                    b3:f7:b9:f6:a2:f8:b8:4d:81:3d:41:0b:44:d9:76:
                    d8:48:1b:8f:94:a0:69:bd:58:c8:82:51:e0:86:34:
                    56:29:3d:ff:b6:b1:bd:e4:ed:5b:61:ea:96:2f:b4:
                    38:b6:95:03:e8:7b:ef:59:36:ed:5b:31:bd:31:72:
                    8b:f7:65:c4:66:45:db:5a:fb:22:bd:75:b7:17:e2:
                    db:5b:6f:19:19:c4:95:25:8a:99:37:56:92:81:16:
                    fa:fb:ed:eb:f7:67:db:2f:95:74:b5:b5:2c:42:2e:
                    d4:ca:13:ad:c5:f4:f1:6c:80:33:f8:e5:06:50:48:
                    80:ed:49:4d:c9:04:50:c3:31:1f:5c:be:80:f9:c2:
                    00:50:e6:0d:7d:22:a5:7a:ae:8d:82:82:26:03:e7:
                    04:b6:f0:fb:d8:27:ff:9e:d5:01:f6:8e:64:ef:cf:
                    50:47:a3:a0:f8:79:8f:2a:3c:ca:ab:e3:df:b7:6d:
                    5b:a1:bd:87:73:af:ec:ec:b5:08:d7:b1:09:f8:3e:
                    e4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4B:B4:0C:4B:05:C0:B5:30:81:7A:DE:A0:96:32:77:1D:7F:5D:B9
            X509v3 Authority Key Identifier:
                keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:a000:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:1d:a0:21:f7:27:82:8a:55:f8:fd:92:b1:96:71:84:e9:08:
         3c:d0:1f:20:7c:e1:1e:2c:4a:56:e4:b7:6b:f8:1e:00:65:e0:
         43:81:41:cb:db:5a:15:97:4d:77:05:5a:7a:cb:77:67:09:61:
         7b:1a:e5:19:1d:77:27:ad:df:8c:20:27:88:ab:05:77:f8:6b:
         9f:12:82:40:87:d4:8c:8a:59:a1:03:3d:3b:ed:3b:0f:43:38:
         b9:42:2d:df:8f:db:8c:9f:f1:23:b9:bb:1e:78:83:47:89:25:
         1a:22:af:f2:75:d6:2e:be:06:47:ea:86:ae:83:15:23:21:2e:
         7f:38:26:3a:e9:58:2d:34:7c:f7:3d:c3:c6:90:bc:5f:2d:c5:
         0b:21:02:e9:ca:6b:1c:8d:8c:a9:a3:75:b1:b2:d4:6d:be:e3:
         ff:ce:5b:44:3c:52:13:4c:c3:ce:18:64:9b:02:8d:44:cc:d8:
         45:71:6f:3c:9f:c9:c7:1b:8d:ab:ef:79:fc:84:b1:0d:50:23:
         44:5f:d3:75:70:26:d8:de:33:69:da:c6:86:e4:61:2b:03:ea:
         f2:f2:bc:8d:5f:66:cc:0a:e2:69:37:f7:f7:b6:24:0b:75:7c:
         d1:7e:dc:80:56:ac:cf:48:2c:7b:2c:94:4b:7b:d2:c2:c5:0b:
         31:c5:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:05:47 2024 by rpki-client on console-ams.rpki-client.org