Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa
File:                     323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier:          HAikvyoZYFbSWqOQlZGFhknKh+zJh+n4L5U9bwOzPgA=
Subject key identifier:   EB:9B:9E:3F:7C:A1:9F:0D:A0:F0:B7:95:24:B0:7D:42:07:50:62:AA
Certificate issuer:       /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial:       1BE2A1C5DB9E735C14259C06D222275E0F01A30D
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa
Signing time:             Mon 31 Jul 2023 00:07:17 +0000
ROA not before:           Mon 31 Jul 2023 00:02:17 +0000
ROA not after:            Mon 29 Jul 2024 00:07:17 +0000
asID:                     136088
IP address blocks:        2400:d940:30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
                          rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e2:a1:c5:db:9e:73:5c:14:25:9c:06:d2:22:27:5e:0f:01:a3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
        Validity
            Not Before: Jul 31 00:02:17 2023 GMT
            Not After : Jul 29 00:07:17 2024 GMT
        Subject: CN=EB9B9E3F7CA19F0DA0F0B79524B07D42075062AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e2:d3:9a:cb:6a:47:ca:cc:ba:dc:4d:6d:ed:
                    ae:bf:76:fd:3d:69:6c:fc:5e:77:fc:06:4b:47:9a:
                    3c:ce:6e:fd:74:7d:38:b6:79:ca:ef:7e:3f:29:53:
                    04:76:cd:99:47:dd:b4:06:f8:ff:c9:68:9f:65:f0:
                    34:c9:67:f7:fb:5d:0c:f8:c7:ef:b3:f7:a0:11:d5:
                    bd:46:99:e4:c8:04:81:22:78:cd:86:53:46:bf:54:
                    d4:91:13:14:37:4b:72:33:80:27:68:de:4e:57:bf:
                    56:92:60:ff:0d:c6:95:c5:86:bf:fb:09:b4:14:95:
                    27:bc:7d:c9:36:dc:e5:2b:b7:b5:ab:97:4a:89:f8:
                    bf:17:78:24:0b:cc:a3:3f:ee:85:77:6e:8e:88:54:
                    b8:b5:f4:11:b7:97:59:d0:8c:fb:22:34:55:af:10:
                    73:f0:00:68:40:69:70:a1:6c:13:f0:f6:6a:7a:bc:
                    d1:2e:58:c8:eb:7b:1e:48:57:ba:bf:e5:2e:d1:e4:
                    dc:7c:fd:3c:58:9c:c7:c0:88:cf:e2:d9:c8:e8:14:
                    b4:a9:b1:77:69:79:78:85:e3:72:33:18:82:54:1c:
                    7f:16:6f:58:e1:f8:b0:b6:3e:00:3c:9b:03:16:50:
                    22:a9:10:ec:73:96:77:9f:49:b3:fd:4c:da:12:33:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9B:9E:3F:7C:A1:9F:0D:A0:F0:B7:95:24:B0:7D:42:07:50:62:AA
            X509v3 Authority Key Identifier:
                keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d940:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:9b:c9:4d:b0:04:75:ef:7c:9b:e9:70:bb:16:c9:0a:c5:4e:
         82:f4:fd:7d:c2:b2:f3:8b:5d:fc:b0:78:50:86:75:6c:01:de:
         80:11:d4:4a:b2:51:ee:30:8d:17:e0:c0:2b:45:d3:b2:d1:28:
         cc:e4:8a:12:53:55:c8:99:e7:c1:54:e3:65:58:a9:b4:45:a1:
         46:e0:b2:c4:eb:c7:1e:58:fa:7b:58:a4:7b:14:95:58:6b:32:
         dd:c1:08:ba:16:3c:8c:e4:19:d9:ae:3d:c4:e1:19:e2:31:7c:
         79:1f:9b:31:18:d3:43:a7:4b:2d:c2:70:4c:62:de:73:dd:5b:
         02:59:79:b8:a7:81:c2:c3:1d:7a:5c:06:04:24:10:34:0b:38:
         9f:62:1e:b7:f2:b4:d9:22:8e:eb:fa:a0:56:21:5c:ef:c8:e7:
         76:7f:af:f1:7c:64:cd:74:a2:9f:58:19:00:ca:ab:6f:14:a4:
         0e:a9:7a:5a:19:5f:99:74:6f:5e:6b:7e:24:70:fb:ba:3d:ce:
         b4:d3:57:0b:a2:3e:08:51:95:2e:04:9e:7e:43:27:83:eb:3c:
         eb:c6:fe:af:11:8e:79:fe:4c:fc:03:ef:0b:4f:45:d6:f2:17:
         0c:ae:c9:ff:8a:4b:85:c8:85:4b:a0:2c:05:b0:78:69:4e:0a:
         90:f6:6b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 22:29:03 2024 by rpki-client on console-fra.rpki-client.org