Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa
File:                     323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier:          lfQk188MA7Fg4901KKGuu0eq4gU1IsurmKrl78X8x1I=
Subject key identifier:   C5:45:7B:DC:0D:89:40:34:04:0F:90:D0:E5:73:B7:7C:A4:23:F9:32
Certificate issuer:       /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial:       7C3C1555C27A01AAC17D553716E59E3EF3465E0E
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa
Signing time:             Mon 31 Jul 2023 00:07:18 +0000
ROA not before:           Mon 31 Jul 2023 00:02:18 +0000
ROA not after:            Mon 29 Jul 2024 00:07:18 +0000
asID:                     136088
IP address blocks:        2400:d940:50::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
                          rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 05:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3c:15:55:c2:7a:01:aa:c1:7d:55:37:16:e5:9e:3e:f3:46:5e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
        Validity
            Not Before: Jul 31 00:02:18 2023 GMT
            Not After : Jul 29 00:07:18 2024 GMT
        Subject: CN=C5457BDC0D894034040F90D0E573B77CA423F932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0a:3c:83:67:b5:e3:a8:84:e1:f9:54:ae:3f:
                    71:10:6c:78:f6:6f:c1:eb:e1:a6:f1:a6:d5:aa:c2:
                    f2:be:36:df:90:d4:d6:94:3f:0b:1d:42:80:54:98:
                    05:04:d4:12:a8:71:d4:cd:29:fe:a8:2b:41:b1:ee:
                    ff:02:f9:5f:b4:2f:b2:97:ed:89:2c:fa:55:ca:20:
                    59:a8:98:9d:83:22:ae:45:e0:fb:07:af:5a:ff:bd:
                    78:d4:28:5d:fb:fe:6f:dd:64:9e:f9:4b:2f:23:f6:
                    50:3d:87:64:07:28:a5:de:75:9d:96:83:60:67:a1:
                    2c:6b:c8:d1:29:04:4e:03:89:1d:66:b2:39:a7:c4:
                    c1:be:d3:26:f7:35:7a:eb:97:e2:92:70:63:38:b3:
                    94:a6:72:a2:97:ab:6e:af:25:1c:a4:9b:46:9c:fd:
                    08:84:05:a0:b8:c0:4e:ff:28:7f:c4:13:40:ec:86:
                    ae:03:b4:f8:0a:d7:e8:7b:7f:82:3d:82:72:ec:5e:
                    95:02:91:6f:be:fc:6a:7d:78:57:38:ad:8c:8c:86:
                    4b:48:69:e1:bd:2f:97:2a:14:24:fe:69:5a:7a:d5:
                    81:d6:3a:62:73:15:87:30:12:0d:f4:55:51:c4:88:
                    63:dd:42:56:b0:45:4f:a2:9a:28:6f:2e:2c:9f:3a:
                    7f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:45:7B:DC:0D:89:40:34:04:0F:90:D0:E5:73:B7:7C:A4:23:F9:32
            X509v3 Authority Key Identifier:
                keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d940:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:cf:8e:40:0e:a5:52:30:21:c9:77:0b:f5:94:ff:96:1f:88:
         c8:6d:ba:ea:01:32:7d:29:71:87:1f:f0:5f:65:bf:ba:d7:8f:
         ea:ca:7c:b2:9c:cb:de:9a:01:25:89:8b:0c:1a:c3:78:3c:a7:
         e0:5e:98:11:2f:21:f8:92:97:9c:86:0f:5a:96:6a:fa:9a:e4:
         75:30:98:2b:2e:87:4f:ce:ef:6f:89:cd:87:b2:00:71:c2:09:
         41:05:07:b9:f8:d5:9a:f5:b4:22:65:12:6c:17:44:a5:6d:c0:
         c4:bd:fd:4f:2a:c8:3a:e5:1c:70:3e:3e:b8:ca:b5:8f:81:08:
         25:86:e1:b8:76:79:94:e0:96:ce:87:14:d5:ec:71:50:14:a3:
         ca:b0:7c:b6:a1:d9:d4:65:7c:1a:e7:7e:93:eb:6f:0e:1d:63:
         0d:e3:48:2b:81:d0:3f:ae:d4:4e:52:d6:75:28:9d:d8:70:b0:
         23:64:2a:d9:df:d5:11:52:43:e0:3d:04:b0:72:68:50:7b:da:
         5f:49:e6:b7:a1:f6:02:50:e3:28:1a:e2:36:6b:11:ee:23:e3:
         fd:dc:59:fb:1b:ca:92:7a:a1:07:c1:23:bd:06:40:71:03:f4:
         14:6e:9a:31:f8:3f:ad:9c:a4:24:ab:b3:c7:82:d9:4b:fb:95:
         03:14:77:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 23:07:51 2024 by rpki-client on console-fra.rpki-client.org