Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa
File:                     323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier:          pqa046/kDgWridI0eeVsLbVA7W9TBemm+G5uW07nV7A=
Subject key identifier:   93:1E:C8:B4:6A:E9:3E:38:78:39:07:12:EF:22:77:1E:AE:28:9A:EE
Certificate issuer:       /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial:       6133A6F4DD76E9B978BE27BAF6A27D559BF49A76
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa
Signing time:             Mon 31 Jul 2023 00:07:18 +0000
ROA not before:           Mon 31 Jul 2023 00:02:18 +0000
ROA not after:            Mon 29 Jul 2024 00:07:18 +0000
asID:                     136088
IP address blocks:        2400:d940:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
                          rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 20:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:33:a6:f4:dd:76:e9:b9:78:be:27:ba:f6:a2:7d:55:9b:f4:9a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
        Validity
            Not Before: Jul 31 00:02:18 2023 GMT
            Not After : Jul 29 00:07:18 2024 GMT
        Subject: CN=931EC8B46AE93E3878390712EF22771EAE289AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:6a:f8:5c:6b:2a:aa:95:fd:20:d8:38:63:
                    3c:df:30:38:e2:5b:7b:71:9c:ee:77:34:0d:fb:5e:
                    77:7a:04:72:b7:9e:61:7d:07:1b:5b:1c:a5:6b:ff:
                    5f:65:d7:64:c5:3f:05:6f:b3:58:51:07:be:7a:d0:
                    ea:9e:31:ba:cc:43:b0:63:d3:0a:5f:73:14:e8:2b:
                    2a:7b:31:98:b8:20:cd:56:1c:ed:fa:05:ed:19:5f:
                    a6:4e:87:76:1f:a2:f9:ac:0e:4a:03:97:20:0a:51:
                    3f:27:d4:05:13:45:0f:df:37:d2:64:5f:3e:d4:09:
                    7a:9c:5b:bf:87:ec:76:bb:0b:ea:1e:7c:ba:3e:f7:
                    8f:d5:43:0c:41:a9:da:05:08:6a:1c:2d:f0:82:2e:
                    b7:ad:c3:f1:98:ff:93:ad:99:fc:cf:06:6c:9e:63:
                    98:5c:87:1e:90:75:da:41:4c:65:11:46:66:17:29:
                    81:40:c9:43:00:d0:32:26:24:e2:15:d7:ca:e4:13:
                    8f:a3:02:b6:c1:94:d6:1b:9b:27:68:f4:ed:2f:c5:
                    7a:f5:d4:7f:08:54:c8:38:23:19:26:55:c1:f5:c2:
                    dc:ad:14:cd:9e:1b:5f:15:29:66:8e:7f:1c:ad:e6:
                    ee:92:0e:e4:1f:d8:02:0b:71:6b:55:28:78:3e:5c:
                    0d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1E:C8:B4:6A:E9:3E:38:78:39:07:12:EF:22:77:1E:AE:28:9A:EE
            X509v3 Authority Key Identifier:
                keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d940:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:02:85:76:27:30:74:c5:5c:7a:a4:d4:a9:30:f6:72:82:e9:
         9d:81:6d:69:cb:d1:4f:5b:4e:cb:1e:60:22:c4:3a:11:e3:66:
         10:d6:61:e9:ba:0e:ae:17:b4:8b:1f:7a:64:3b:0c:79:b6:ef:
         e9:52:db:f1:40:13:88:47:b7:96:01:4d:bf:1d:e0:b4:84:2c:
         36:9d:af:b9:9d:fe:37:49:30:e7:a5:c6:47:99:a8:5d:76:8e:
         fe:cb:fa:8a:16:0c:39:a4:60:46:67:be:9d:08:54:0b:3d:04:
         70:14:8c:79:49:ce:7b:69:b1:c4:06:26:10:b1:d2:dd:11:b9:
         6b:5b:cb:b3:73:ad:79:85:b3:fd:9c:b5:d5:9b:07:71:ae:51:
         e7:d3:4d:c7:f8:5b:5d:f5:d8:ff:97:76:58:fb:c7:ce:da:4b:
         7c:29:0f:57:2c:98:04:3a:7f:c0:d7:70:db:28:a5:a1:7d:85:
         9c:64:51:21:33:cd:dd:05:d3:6a:f3:9f:74:c1:c6:4a:67:5f:
         c6:57:95:c5:b4:84:c2:6c:3d:13:60:4f:6c:40:37:f2:03:85:
         b8:0d:bd:31:f0:d8:32:d4:74:68:ef:d6:19:4c:0b:23:af:cb:
         35:f1:a9:41:7a:fd:e2:6e:5f:ce:80:6d:32:d6:bb:cc:d0:4b:
         89:2c:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:27:43 2024 by rpki-client on console-fra.rpki-client.org