Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa
File:                     323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (raw, json)
Hash identifier:          tb5ix4/rpAM8quJsHYAvVqVGf/Xo8zPu+CW62lIhG/U=
Subject key identifier:   A0:C3:27:57:43:8B:91:EE:5D:F4:33:4F:CA:6F:85:B3:2B:52:89:CA
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       773C9E08AA123252E6C36BF1CD5ACFD4379848D7
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa
Signing time:             Mon 31 Jul 2023 00:03:13 +0000
ROA not before:           Sun 30 Jul 2023 23:58:13 +0000
ROA not after:            Mon 29 Jul 2024 00:03:13 +0000
asID:                     131717
IP address blocks:        2401:10c0:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Apr 2024 00:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3c:9e:08:aa:12:32:52:e6:c3:6b:f1:cd:5a:cf:d4:37:98:48:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Jul 30 23:58:13 2023 GMT
            Not After : Jul 29 00:03:13 2024 GMT
        Subject: CN=A0C32757438B91EE5DF4334FCA6F85B32B5289CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:7d:89:e7:b3:e5:55:43:08:de:09:c2:0e:
                    e6:ca:42:61:5f:8f:2d:32:67:4d:62:e4:bc:0c:b9:
                    bc:8a:4f:93:e6:6e:36:b3:6a:0f:0f:3e:20:15:81:
                    76:4c:f5:47:39:7c:08:54:ad:5f:25:8e:a9:f7:65:
                    e1:36:4e:5a:a3:e2:b2:d2:5d:9c:97:77:54:35:51:
                    1a:38:48:35:68:c4:23:b9:cf:34:30:41:0f:da:8d:
                    f1:8d:7f:9b:2c:f1:d5:7f:b5:af:ce:07:f5:5e:b7:
                    a5:9c:0f:da:80:7a:1e:71:a6:cc:63:53:0b:79:5b:
                    e6:f8:d7:cd:86:7e:53:79:86:c0:22:4c:f5:84:b5:
                    8d:c2:00:89:02:f4:a1:84:d5:19:c8:dc:53:92:54:
                    bf:0d:a1:83:7b:70:14:e3:8b:7f:d4:02:69:ab:c3:
                    a2:23:a1:e7:21:64:ce:16:0e:65:a6:0b:eb:a8:34:
                    c3:74:4d:db:f3:d8:9d:66:d8:9d:1c:79:81:1d:77:
                    bf:fe:d3:9b:cb:bb:fe:27:d8:82:4c:65:a6:7b:a9:
                    d3:28:1f:0c:c9:83:44:39:89:cf:da:cc:3f:7d:03:
                    4f:cd:46:99:b2:f6:6f:cd:10:eb:bb:d7:be:7e:63:
                    3a:eb:bd:c4:36:9e:b9:b1:96:39:eb:1e:81:30:88:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C3:27:57:43:8B:91:EE:5D:F4:33:4F:CA:6F:85:B3:2B:52:89:CA
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:10c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4d:42:0a:72:5d:7e:c3:7d:29:c2:2d:bd:fd:a2:9f:fc:31:c1:
         ca:fd:da:ec:99:e3:00:d8:41:14:bf:be:eb:06:3f:06:f6:73:
         54:ba:46:48:e1:fc:7d:33:a3:f3:74:86:b1:fd:b7:ca:fe:d7:
         62:96:3b:80:3c:1e:a1:58:62:92:be:d5:59:df:c4:64:c5:e3:
         45:57:a1:f3:23:67:59:4b:d5:49:73:ad:8b:39:a0:91:87:02:
         e5:a8:96:88:fc:61:9e:48:06:90:c9:2c:18:73:ec:5f:f7:32:
         03:8f:6d:ae:b7:19:94:99:d1:13:0c:68:c7:15:b6:c8:40:c5:
         b3:c0:dc:99:cf:3d:c9:98:13:47:87:92:bc:7c:6e:59:df:f8:
         47:83:a5:24:34:81:8b:46:f0:d7:d5:e0:38:70:45:0c:92:5d:
         fd:07:e5:b2:39:e9:a2:db:d6:1b:e9:22:19:44:f6:26:ac:24:
         a9:df:20:b8:26:eb:6f:fc:2a:38:ab:a0:55:f3:83:f8:4b:e1:
         c3:05:17:37:06:a0:3d:5a:15:ab:86:df:2e:a6:6c:45:7a:f3:
         63:04:a7:e4:f8:eb:e0:c5:95:ca:a1:b8:78:f4:70:3b:8a:ac:
         d6:3b:b8:0d:8f:6a:67:06:d7:45:ce:30:1c:95:fc:86:6f:6d:
         14:e8:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 15:09:15 2024 by rpki-client on console-fra.rpki-client.org