Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa
File:                     323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (raw, json)
Hash identifier:          oO1LgCK6hqahvpOAH2BUM0GLspdBFVPB4428TLyKNDY=
Subject key identifier:   00:0B:AA:92:93:48:96:41:67:24:AA:AA:43:D2:69:3C:A2:6C:8B:C1
Certificate issuer:       /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F
Certificate serial:       4A2F51E502811818C073345AFB4B54397F7E724A
Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa
Signing time:             Mon 31 Jul 2023 00:05:38 +0000
ROA not before:           Mon 31 Jul 2023 00:00:38 +0000
ROA not after:            Mon 29 Jul 2024 00:05:38 +0000
asID:                     141057
IP address blocks:        2001:df4:aa80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl
                          rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2f:51:e5:02:81:18:18:c0:73:34:5a:fb:4b:54:39:7f:7e:72:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F
        Validity
            Not Before: Jul 31 00:00:38 2023 GMT
            Not After : Jul 29 00:05:38 2024 GMT
        Subject: CN=000BAA92934896416724AAAA43D2693CA26C8BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:24:c0:89:f1:31:4a:f6:68:1f:c0:a3:9a:
                    ed:25:d4:8d:37:a6:9a:66:d0:94:73:1c:fa:60:f2:
                    41:03:75:4b:60:de:6e:97:12:37:b6:e3:55:b8:63:
                    b0:e4:20:a7:b7:68:b2:3f:34:31:7c:b9:e6:61:79:
                    4c:43:60:96:ab:a8:4b:24:84:d5:94:80:55:15:7f:
                    e7:43:a5:f1:2d:16:5a:9f:22:79:4e:78:72:9c:06:
                    b6:44:ac:9f:f8:2f:c7:af:90:0a:5f:43:b1:0f:27:
                    5b:22:4a:10:9b:16:73:cc:af:be:46:82:eb:a5:e9:
                    db:4c:3e:1a:85:ac:d2:bc:c0:0d:c1:73:18:f4:79:
                    dc:b3:de:24:60:75:19:66:a4:82:65:2d:7f:b4:92:
                    8c:49:b9:56:2e:0a:bd:89:ce:9e:11:4e:73:97:4f:
                    00:74:75:e1:79:e9:1a:87:78:62:1e:fa:8a:36:e8:
                    38:b2:44:d4:20:5c:0b:1e:de:63:7d:c7:8f:83:0b:
                    42:2c:bc:0c:10:74:a0:57:5f:76:fd:43:7f:f0:ed:
                    ed:3f:36:4c:82:f5:d5:a0:e7:16:8b:28:f3:3a:a5:
                    90:c0:bd:79:04:71:04:fb:9c:de:89:9c:66:8e:ed:
                    1d:91:ed:44:47:3c:56:c5:f2:a7:a5:aa:d0:3b:db:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0B:AA:92:93:48:96:41:67:24:AA:AA:43:D2:69:3C:A2:6C:8B:C1
            X509v3 Authority Key Identifier:
                keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:aa80::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:b4:06:1c:ae:f4:17:24:54:54:c0:b2:05:be:50:6d:52:69:
         71:9f:74:d1:7f:6d:b4:5a:dc:9c:49:28:3c:b1:fb:7f:ce:e3:
         f9:da:9e:c7:69:b8:6c:0b:6f:3e:2c:8d:12:31:c5:45:13:30:
         73:4b:ad:3b:df:6c:e0:ef:d6:83:1e:00:7f:a6:0b:01:c4:78:
         b3:af:c8:26:bc:c6:a2:80:04:47:91:be:4b:d8:4d:50:10:6d:
         6a:2c:b7:38:34:14:e5:ee:3c:5d:4d:9b:89:79:43:c9:48:06:
         2c:30:9c:fd:c4:e2:5c:33:73:2a:bd:49:bf:c1:90:a8:e4:4b:
         4c:49:81:ef:ff:55:9e:9d:48:83:2a:40:cc:3c:c8:8f:60:04:
         11:4c:64:d2:f9:70:4e:0f:e5:77:a5:48:ad:ab:53:84:63:7b:
         ee:63:12:48:82:40:f7:4d:1c:82:f7:90:e7:69:55:71:33:ad:
         6c:ed:4f:e5:de:d9:c7:73:e3:bb:d6:ac:32:18:29:d7:25:db:
         f6:b5:60:4a:39:3c:33:44:50:2f:15:4c:94:9c:cc:b5:8e:86:
         38:5d:75:44:08:e5:92:81:27:6b:71:39:82:08:e0:f9:b7:62:
         96:6b:a9:bf:74:a4:88:54:06:f6:c9:b2:57:88:2c:49:0e:11:
         a2:af:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 00:09:45 2024 by rpki-client on console-fra.rpki-client.org