Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/323430333a373230303a3a2f33322d3438203d3e2039373835.roa
File:                     323430333a373230303a3a2f33322d3438203d3e2039373835.roa (raw, json)
Hash identifier:          PX3Lg3oc3Rl2o9w7yZy5NB+xtheINm1htX/QXBr8MQc=
Subject key identifier:   CE:D1:9B:6D:6E:68:19:12:DF:6B:B9:48:01:E9:5D:99:63:BB:06:6E
Certificate issuer:       /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial:       0DB45828FCF869DD72C00B4AA5455219AB794314
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/323430333a373230303a3a2f33322d3438203d3e2039373835.roa
Signing time:             Mon 31 Jul 2023 00:13:34 +0000
ROA not before:           Mon 31 Jul 2023 00:08:34 +0000
ROA not after:            Mon 29 Jul 2024 00:13:34 +0000
asID:                     9785
IP address blocks:        2403:7200::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
                          rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 10:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b4:58:28:fc:f8:69:dd:72:c0:0b:4a:a5:45:52:19:ab:79:43:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
        Validity
            Not Before: Jul 31 00:08:34 2023 GMT
            Not After : Jul 29 00:13:34 2024 GMT
        Subject: CN=CED19B6D6E681912DF6BB94801E95D9963BB066E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:15:de:69:98:08:60:47:d7:50:54:6d:c6:
                    ed:ee:ca:7e:fa:25:6f:f2:78:f5:53:98:17:e5:da:
                    b6:bc:00:4c:61:72:10:25:b2:45:7d:b5:6f:0d:2b:
                    6e:a3:a9:a7:03:3b:22:5d:06:04:ab:15:24:d8:26:
                    fb:33:b7:c6:f3:30:4a:52:5a:66:3f:d8:a8:5c:3c:
                    33:98:c3:fe:9b:cc:fa:61:e3:8d:d3:20:3d:e7:94:
                    b6:d8:ac:df:9d:58:08:0f:21:ee:2c:70:e7:c8:92:
                    93:5e:47:ff:a6:30:b9:f8:aa:7e:d0:ba:46:1b:61:
                    5a:87:6b:0b:41:31:8e:80:4e:ce:ab:41:ea:9b:6b:
                    5b:f3:5d:88:8f:ac:44:77:dc:6a:b2:55:1d:ac:85:
                    a4:89:71:c7:bb:54:c5:40:a1:b8:b7:94:e4:d0:2a:
                    31:b6:c4:36:5b:b1:86:e4:35:00:3c:89:ba:d7:72:
                    e7:c8:7d:be:32:fe:e6:41:c6:37:6f:d1:0a:d4:87:
                    a3:40:17:cf:c4:04:a1:95:ef:26:07:4e:36:1b:5c:
                    87:e8:b4:5e:39:be:89:f1:5b:a8:98:3a:fc:b0:40:
                    1a:68:ab:dc:ac:42:ed:15:2a:4d:6e:77:a0:27:c4:
                    0f:f5:ba:1d:35:d9:ba:4e:e2:96:5d:8d:e5:f5:1f:
                    b2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D1:9B:6D:6E:68:19:12:DF:6B:B9:48:01:E9:5D:99:63:BB:06:6E
            X509v3 Authority Key Identifier:
                keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/323430333a373230303a3a2f33322d3438203d3e2039373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7200::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:9e:88:7c:33:c5:8e:eb:c3:53:7a:ed:20:f8:9f:80:db:c7:
         d2:a8:bd:96:15:08:82:56:84:31:00:be:df:d2:2b:9b:b4:25:
         61:48:89:8e:88:e3:80:0c:85:83:54:9e:eb:c4:e9:56:ae:c5:
         30:0f:d4:9c:45:45:4a:0b:26:4e:d9:34:8d:ec:e7:01:7f:37:
         76:21:cb:55:1b:95:e0:95:e8:e2:cb:39:47:41:26:12:14:a5:
         7e:dd:15:4b:4f:1a:aa:f7:cc:1d:db:f1:3f:94:97:ab:9e:6d:
         6e:df:b7:13:99:0a:fe:e6:ba:7e:a3:53:f3:38:d1:57:d9:0f:
         a5:88:6b:d2:0b:b9:cc:af:29:8f:9f:ac:65:db:ea:f5:e3:bf:
         c0:28:43:5c:7a:48:c3:2a:a1:86:d6:df:ea:f2:6f:3a:43:92:
         39:1a:cb:80:9a:a8:0c:f9:d2:61:22:f3:1e:2b:57:ad:4e:a5:
         4b:5b:3f:3d:a0:37:63:b0:73:74:50:a3:fa:54:17:55:83:91:
         ee:04:eb:61:df:fb:9b:73:88:58:c7:12:f9:6d:5b:a0:fd:9c:
         e9:64:ff:17:f4:8d:cb:58:71:0d:57:d0:3e:50:16:ec:da:bc:
         13:af:81:fa:99:2d:7b:d6:b8:6c:66:ce:eb:8e:e0:43:30:05:
         09:4c:1d:87
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUDbRYKPz4ad1ywAtKpUVSGat5QxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw
RjFDNDg5RTAeFw0yMzA3MzEwMDA4MzRaFw0yNDA3MjkwMDEzMzRaMDMxMTAvBgNV
BAMTKENFRDE5QjZENkU2ODE5MTJERjZCQjk0ODAxRTk1RDk5NjNCQjA2NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClhRXeaZgIYEfXUFRtxu3uyn76
JW/yePVTmBfl2ra8AExhchAlskV9tW8NK26jqacDOyJdBgSrFSTYJvszt8bzMEpS
WmY/2KhcPDOYw/6bzPph443TID3nlLbYrN+dWAgPIe4scOfIkpNeR/+mMLn4qn7Q
ukYbYVqHawtBMY6ATs6rQeqba1vzXYiPrER33GqyVR2shaSJcce7VMVAobi3lOTQ
KjG2xDZbsYbkNQA8ibrXcufIfb4y/uZBxjdv0QrUh6NAF8/EBKGV7yYHTjYbXIfo
tF45vonxW6iYOvywQBpoq9ysQu0VKk1ud6AnxA/1uh012bpO4pZdjeX1H7KRAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUztGbbW5oGRLfa7lIAeldmWO7Bm4wHwYDVR0j
BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC
RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD
NDg5RS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx
ODMtMzRiMzQ1N2JlYTAzLzAvMzIzNDMwMzMzYTM3MzIzMDMwM2EzYTJmMzMzMjJk
MzQzODIwM2QzZTIwMzkzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA3IAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQnoh8M8WO68NTeu0g+J+A28fSqL2WFQiCVoQxAL7f0iubtCVhSImO
iOOADIWDVJ7rxOlWrsUwD9ScRUVKCyZO2TSN7OcBfzd2IctVG5XglejiyzlHQSYS
FKV+3RVLTxqq98wd2/E/lJernm1u37cTmQr+5rp+o1PzONFX2Q+liGvSC7nMrymP
n6xl2+r147/AKENcekjDKqGG1t/q8m86Q5I5GsuAmqgM+dJhIvMeK1etTqVLWz89
oDdjsHN0UKP6VBdVg5HuBOth3/ubc4hYxxL5bVug/ZzpZP8X9I3LWHENV9A+UBbs
2rwTr4H6mS171rhsZs7rjuBDMAUJTB2H
-----END CERTIFICATE-----
Generated at Wed Apr 24 08:33:50 2024 by rpki-client on console-fra.rpki-client.org