Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030303a3a2f33332d3333203d3e203137373237.roa
File:                     323430343a633030303a383030303a3a2f33332d3333203d3e203137373237.roa (raw, json)
Hash identifier:          T3ZznZayDLvKsfzVCpA4EIBw6SZdlMu9QC3xg6ul/qg=
Subject key identifier:   4E:F8:49:B2:C8:CF:BC:5D:28:2E:EE:C3:30:92:87:53:3C:A1:1B:F7
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       3E5194CA1EC3895822BB2B0671C15D28DE18F625
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030303a3a2f33332d3333203d3e203137373237.roa
Signing time:             Sun 29 Oct 2023 15:00:00 +0000
ROA not before:           Sun 29 Oct 2023 14:55:00 +0000
ROA not after:            Sun 27 Oct 2024 15:00:00 +0000
asID:                     17727
IP address blocks:        2404:c000:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 19:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:51:94:ca:1e:c3:89:58:22:bb:2b:06:71:c1:5d:28:de:18:f6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Oct 29 14:55:00 2023 GMT
            Not After : Oct 27 15:00:00 2024 GMT
        Subject: CN=4EF849B2C8CFBC5D282EEEC3309287533CA11BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:47:6d:97:12:8b:99:1e:1e:3e:3b:0a:97:22:
                    3d:3b:34:24:1a:72:b5:3e:98:89:c7:08:e7:3b:47:
                    8e:cc:0f:42:80:55:35:c7:0b:85:21:91:c4:f7:46:
                    78:30:7f:c4:72:41:6a:69:87:dd:5f:9e:a4:af:a9:
                    86:19:f0:8b:65:11:f6:89:52:a9:b7:14:62:a5:79:
                    b0:10:14:17:65:bb:56:5b:78:57:f0:77:94:16:32:
                    40:03:fe:16:ab:f1:88:82:b8:d7:69:b2:ae:0a:cf:
                    ff:a4:51:14:64:b1:da:e8:89:ad:3c:78:6c:b8:4e:
                    a4:0f:a5:48:a4:8c:39:10:a7:a6:c0:6c:43:6b:6b:
                    0a:7c:f8:33:9b:10:9e:0a:35:c0:38:bc:81:9e:df:
                    c5:f8:da:ea:11:68:31:4e:68:20:fa:5f:52:e8:d7:
                    52:48:71:83:d0:2e:5e:ef:b7:bf:9b:55:80:0c:bd:
                    d8:66:9c:16:b9:cb:92:96:e4:bd:58:d5:b7:56:82:
                    e1:55:7b:20:f3:8a:6f:53:ae:c3:a8:36:7d:b7:95:
                    b9:5c:12:95:73:14:ff:ba:ea:2e:9f:cd:be:a9:4b:
                    f3:6e:21:10:c7:37:54:b7:cc:8b:71:8b:93:10:e9:
                    9b:75:c7:3c:18:84:bd:d9:a0:69:06:34:aa:b6:8e:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F8:49:B2:C8:CF:BC:5D:28:2E:EE:C3:30:92:87:53:3C:A1:1B:F7
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030303a3a2f33332d3333203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:c000:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a1:2b:f4:37:91:8f:32:58:68:f7:81:2e:52:78:0d:0f:25:85:
         fd:70:f6:7d:eb:8b:90:5b:6b:d9:a6:f2:15:e5:2c:e7:92:fd:
         95:86:a3:26:30:fc:5f:ac:9f:16:94:1a:56:e1:5a:ab:a2:cd:
         19:f5:3c:3e:7c:11:49:fd:cb:64:7d:ef:13:40:03:96:ae:5e:
         73:3b:56:7f:44:25:07:de:17:27:73:55:e8:e1:72:ed:72:01:
         c8:b4:cd:96:c9:6b:ed:f1:bd:7e:fb:15:72:69:20:d0:2c:e7:
         a1:3b:c7:2b:1d:b7:85:d7:31:f4:9f:18:6e:b2:9e:d3:1d:30:
         31:c5:1a:d5:6f:4f:35:63:08:ff:18:4e:b4:95:01:19:9f:c2:
         8d:a0:87:2b:15:9f:11:c3:f8:12:c4:ae:85:4e:45:71:05:61:
         2e:37:7e:a4:3d:ae:aa:2b:19:b1:20:9d:72:af:db:28:cb:60:
         27:bb:6d:d8:91:af:e5:05:ec:02:72:3c:e3:8a:fc:ee:c5:64:
         24:86:c6:61:87:46:72:c9:ab:bf:a4:fc:c4:e6:34:12:d6:43:
         12:31:b7:a9:35:31:64:0b:07:46:94:28:e4:42:b6:37:34:df:
         b4:b4:7a:b6:08:fa:03:b5:2a:a6:7b:bb:f7:f7:87:3d:8f:19:
         35:74:30:8a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPlGUyh7DiVgiuysGccFdKN4Y9iUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE
NjdENjUxMTAeFw0yMzEwMjkxNDU1MDBaFw0yNDEwMjcxNTAwMDBaMDMxMTAvBgNV
BAMTKDRFRjg0OUIyQzhDRkJDNUQyODJFRUVDMzMwOTI4NzUzM0NBMTFCRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfR22XEouZHh4+OwqXIj07NCQa
crU+mInHCOc7R47MD0KAVTXHC4UhkcT3Rngwf8RyQWpph91fnqSvqYYZ8ItlEfaJ
Uqm3FGKlebAQFBdlu1ZbeFfwd5QWMkAD/har8YiCuNdpsq4Kz/+kURRksdroia08
eGy4TqQPpUikjDkQp6bAbENrawp8+DObEJ4KNcA4vIGe38X42uoRaDFOaCD6X1Lo
11JIcYPQLl7vt7+bVYAMvdhmnBa5y5KW5L1Y1bdWguFVeyDzim9TrsOoNn23lblc
EpVzFP+66i6fzb6pS/NuIRDHN1S3zItxi5MQ6Zt1xzwYhL3ZoGkGNKq2jlhLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTvhJssjPvF0oLu7DMJKHUzyhG/cwHwYDVR0j
BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx
OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE
NjUxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhMzgzMDMwMzAz
YTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJATA
AIAwDQYJKoZIhvcNAQELBQADggEBAKEr9DeRjzJYaPeBLlJ4DQ8lhf1w9n3ri5Bb
a9mm8hXlLOeS/ZWGoyYw/F+snxaUGlbhWquizRn1PD58EUn9y2R97xNAA5auXnM7
Vn9EJQfeFydzVejhcu1yAci0zZbJa+3xvX77FXJpINAs56E7xysdt4XXMfSfGG6y
ntMdMDHFGtVvTzVjCP8YTrSVARmfwo2ghysVnxHD+BLEroVORXEFYS43fqQ9rqor
GbEgnXKv2yjLYCe7bdiRr+UF7AJyPOOK/O7FZCSGxmGHRnLJq7+k/MTmNBLWQxIx
t6k1MWQLB0aUKORCtjc037S0erYI+gO1KqZ7u/f3hz2PGTV0MIo=
-----END CERTIFICATE-----
Generated at Wed May 1 19:11:08 2024 by rpki-client on console-fra.rpki-client.org