Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/323430343a313034303a3a2f33322d3332203d3e20313338313133.roa
File:                     323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (raw, json)
Hash identifier:          2WLJ+rEgAPDo1hU0HNK07FK2W6QSdCym8G23LAxHFpU=
Subject key identifier:   44:B0:3D:55:4E:5F:8D:7A:2F:2D:22:6E:FF:47:42:39:C7:B1:9B:DA
Certificate issuer:       /CN=8CFA88063D5C0A51C1D737A5170338865A245358
Certificate serial:       053DD908932338B49308EFD974EE713C6D503778
Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/323430343a313034303a3a2f33322d3332203d3e20313338313133.roa
Signing time:             Mon 31 Jul 2023 00:03:17 +0000
ROA not before:           Sun 30 Jul 2023 23:58:17 +0000
ROA not after:            Mon 29 Jul 2024 00:03:17 +0000
asID:                     138113
IP address blocks:        2404:1040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl
                          rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3d:d9:08:93:23:38:b4:93:08:ef:d9:74:ee:71:3c:6d:50:37:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358
        Validity
            Not Before: Jul 30 23:58:17 2023 GMT
            Not After : Jul 29 00:03:17 2024 GMT
        Subject: CN=44B03D554E5F8D7A2F2D226EFF474239C7B19BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:0c:ec:9e:72:61:55:10:08:51:8c:77:16:
                    fc:1d:36:a9:61:f2:c7:81:fc:0d:07:b9:39:80:e3:
                    7f:a6:59:89:17:ad:11:dd:ec:d3:6b:82:86:e1:43:
                    27:46:c0:b8:73:ab:bc:eb:b7:02:19:5a:9d:bd:3d:
                    99:cd:3d:d1:78:33:b0:50:cc:6a:c0:69:0c:8c:d9:
                    0d:d8:13:bd:02:26:24:c5:58:a1:30:c7:b8:e9:df:
                    22:ee:2d:74:6d:69:d3:99:91:f0:61:84:80:b2:f7:
                    fe:5c:f5:06:75:fd:29:55:30:4f:bb:5b:6f:9f:1b:
                    61:7d:7b:1f:26:41:3b:45:31:e2:aa:6a:4f:46:b9:
                    3a:82:8e:e1:2e:9c:4e:2b:73:14:82:e7:e1:f8:8f:
                    8b:f2:48:67:b2:16:94:bb:0e:18:9a:01:38:40:34:
                    85:7c:9d:02:4a:6f:b3:bf:e8:18:c8:af:19:a6:e1:
                    4e:0c:e2:6b:91:cc:79:42:df:00:85:b1:00:94:63:
                    49:00:46:73:b4:dc:ea:ac:dc:8d:88:ce:ea:a5:be:
                    09:b5:42:02:85:b3:d7:2d:9f:22:bc:f0:af:32:d6:
                    81:61:d1:56:6e:a9:98:33:a3:a8:e7:68:6f:c9:d7:
                    41:32:d0:f0:74:62:84:35:a7:cb:2e:85:56:a4:42:
                    a3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B0:3D:55:4E:5F:8D:7A:2F:2D:22:6E:FF:47:42:39:C7:B1:9B:DA
            X509v3 Authority Key Identifier:
                keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/323430343a313034303a3a2f33322d3332203d3e20313338313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:1040::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:1b:8c:9a:c4:86:87:c8:20:28:7b:ab:1b:88:3a:69:5b:11:
         50:e8:e2:34:a8:c5:97:12:9b:b3:aa:07:ef:30:55:d1:77:2d:
         c3:51:50:29:d2:a3:78:9f:e4:aa:01:82:86:20:c8:13:ae:bc:
         13:c9:4f:d2:27:4e:70:f8:b1:86:7e:5d:30:e5:e3:f6:58:0b:
         b1:25:90:e9:2d:05:b3:f7:72:79:34:77:10:9a:60:dc:5f:1f:
         22:fb:93:3c:66:ae:a9:12:68:46:bd:84:01:6e:bb:7b:df:45:
         c0:2f:c7:d5:3d:83:cd:e3:46:69:3f:95:80:d1:93:5c:d8:3f:
         7f:fa:c5:a1:36:ee:0f:f4:eb:fd:b0:ff:69:b9:05:cc:e0:e4:
         10:9f:8b:2c:f0:cc:fb:da:fb:70:ee:e5:47:d3:8a:7f:7e:4b:
         b5:b3:e5:c3:ac:15:61:7b:0f:e9:e5:c9:2b:d6:4f:03:12:a7:
         8b:78:3c:48:84:12:ef:95:f7:d0:08:ca:8e:1a:96:85:2b:60:
         33:d7:2b:fc:f3:81:2b:a8:05:ef:59:19:05:ee:9b:99:d4:eb:
         44:07:61:d1:a7:ea:3a:0c:d8:9b:02:cc:ab:c8:ba:1c:bf:61:
         a4:23:7d:e9:3b:ec:46:d0:a4:b4:06:d4:b4:40:59:e8:28:90:
         06:ed:8c:37
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUBT3ZCJMjOLSTCO/ZdO5xPG1QN3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1
QTI0NTM1ODAeFw0yMzA3MzAyMzU4MTdaFw0yNDA3MjkwMDAzMTdaMDMxMTAvBgNV
BAMTKDQ0QjAzRDU1NEU1RjhEN0EyRjJEMjI2RUZGNDc0MjM5QzdCMTlCREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVwzsnnJhVRAIUYx3FvwdNqlh
8seB/A0HuTmA43+mWYkXrRHd7NNrgobhQydGwLhzq7zrtwIZWp29PZnNPdF4M7BQ
zGrAaQyM2Q3YE70CJiTFWKEwx7jp3yLuLXRtadOZkfBhhICy9/5c9QZ1/SlVME+7
W2+fG2F9ex8mQTtFMeKqak9GuTqCjuEunE4rcxSC5+H4j4vySGeyFpS7DhiaAThA
NIV8nQJKb7O/6BjIrxmm4U4M4muRzHlC3wCFsQCUY0kARnO03Oqs3I2Izuqlvgm1
QgKFs9ctnyK88K8y1oFh0VZuqZgzo6jnaG/J10Ey0PB0YoQ1p8suhVakQqPDAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQURLA9VU5fjXovLSJu/0dCOcexm9owHwYDVR0j
BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE
NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0
NTM1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhMmU1YjY5LWFkYmQtNGUyZC04
NDdkLTM3NDgxNTU4MWQ4Ni8wLzMyMzQzMDM0M2EzMTMwMzQzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzODMxMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEEEAwDQYJKoZI
hvcNAQELBQADggEBAHobjJrEhofIICh7qxuIOmlbEVDo4jSoxZcSm7OqB+8wVdF3
LcNRUCnSo3if5KoBgoYgyBOuvBPJT9InTnD4sYZ+XTDl4/ZYC7ElkOktBbP3cnk0
dxCaYNxfHyL7kzxmrqkSaEa9hAFuu3vfRcAvx9U9g83jRmk/lYDRk1zYP3/6xaE2
7g/06/2w/2m5Bczg5BCfiyzwzPva+3Du5UfTin9+S7Wz5cOsFWF7D+nlySvWTwMS
p4t4PEiEEu+V99AIyo4aloUrYDPXK/zzgSuoBe9ZGQXum5nU60QHYdGn6joM2JsC
zKvIuhy/YaQjfek77EbQpLQG1LRAWegokAbtjDc=
-----END CERTIFICATE-----
Generated at Thu Apr 25 00:30:07 2024 by rpki-client on console-fra.rpki-client.org