Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa
File:                     323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa (raw, json)
Hash identifier:          bISj+OttS8Umc4/sXz+/rPgFtlBKv0BOB8YeFe3nCWU=
Subject key identifier:   FF:CF:9C:50:02:60:87:6A:B7:0F:8D:02:24:A1:23:BD:21:23:10:B1
Certificate issuer:       /CN=5782DE79396EB62186D082F936F3AB7084CB59CB
Certificate serial:       66A0397CA62EC80E90D40049560583CCFF4678AB
Authority key identifier: 57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa
Signing time:             Wed 21 Jun 2023 08:00:00 +0000
ROA not before:           Wed 21 Jun 2023 07:55:00 +0000
ROA not after:            Wed 19 Jun 2024 08:00:00 +0000
asID:                     64315
IP address blocks:        2001:df7:1a00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl
                          rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a0:39:7c:a6:2e:c8:0e:90:d4:00:49:56:05:83:cc:ff:46:78:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5782DE79396EB62186D082F936F3AB7084CB59CB
        Validity
            Not Before: Jun 21 07:55:00 2023 GMT
            Not After : Jun 19 08:00:00 2024 GMT
        Subject: CN=FFCF9C500260876AB70F8D0224A123BD212310B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:96:43:36:17:03:74:68:2e:fd:e6:a4:6b:c9:
                    22:06:cc:5f:ac:80:b5:ae:f9:9d:55:a3:a9:06:9c:
                    9d:85:f8:4c:bf:89:23:79:77:c4:c8:28:4a:b1:18:
                    b3:30:b3:30:73:dc:1c:4e:aa:59:71:6d:9c:69:cb:
                    9f:c4:5c:d1:cb:83:7c:1c:5b:d7:b4:6c:50:03:48:
                    d0:88:0e:4c:8a:7c:bc:79:75:27:b6:41:51:2a:98:
                    2c:11:fd:03:ae:8a:23:82:f7:d7:5d:7d:14:5f:fd:
                    34:66:7b:79:57:9c:d7:2f:ca:07:9b:ef:f7:1e:b2:
                    ee:31:f1:e4:27:ab:40:47:48:fc:04:02:de:81:5e:
                    89:a7:31:cb:b0:97:63:60:03:cd:45:74:65:aa:61:
                    43:40:65:2b:b5:0a:1f:81:de:bc:78:a3:94:b5:69:
                    85:06:5b:bc:94:10:0d:bb:38:52:25:04:e1:d6:a0:
                    12:a5:3d:cb:7f:d2:4c:25:76:32:48:71:a5:f3:1b:
                    01:af:f7:60:bb:0a:58:90:a7:4c:da:6e:76:f7:3a:
                    47:57:c1:1d:ab:fb:ef:6e:0c:8a:fd:7c:18:50:35:
                    ce:34:04:af:bd:a2:be:28:81:3f:c6:c7:0e:8e:fd:
                    ff:d8:0c:6b:06:00:81:49:57:76:31:50:21:2f:c6:
                    30:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CF:9C:50:02:60:87:6A:B7:0F:8D:02:24:A1:23:BD:21:23:10:B1
            X509v3 Authority Key Identifier:
                keyid:57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:1a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:c4:34:29:eb:6b:f4:cc:99:0c:e4:94:b9:46:a1:a6:8f:d9:
         3d:15:6f:50:ef:4a:0b:a4:7d:ae:a2:43:29:fb:34:98:e1:f0:
         63:90:c2:31:03:54:dd:4d:4a:29:4f:77:c0:59:71:90:ff:65:
         58:b4:0b:09:ed:a9:1f:f1:98:46:f1:cf:7d:5a:de:fb:5c:3f:
         ec:32:76:d9:09:04:ca:39:b7:a9:2d:38:81:6c:51:01:aa:8b:
         7e:3d:fc:68:cd:c1:16:ab:dd:c6:c1:fe:29:f8:2c:1f:e5:f2:
         38:e7:96:1e:27:49:24:49:6a:db:ba:24:de:eb:e0:e1:75:42:
         94:ac:c0:6b:33:c6:c8:db:fd:61:ca:69:32:81:8c:17:13:7a:
         94:e2:64:3c:fa:06:b9:78:87:4a:91:28:8a:9a:e5:90:9a:1e:
         bd:b3:77:97:40:b6:e3:81:5f:7b:07:dd:3f:7b:50:c9:d8:97:
         e0:46:80:bc:18:56:a4:40:52:45:04:6b:46:f6:20:f2:df:53:
         c4:ef:a4:18:a9:45:12:0a:be:d0:45:f8:dd:09:c2:a8:73:56:
         26:01:b0:6b:ab:16:53:25:28:8d:bb:ee:6b:76:db:cd:7d:07:
         09:56:63:44:90:e3:05:cc:36:5d:72:37:e5:77:f9:f2:c3:1a:
         cd:bc:97:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:30 2024 by rpki-client on console-fra.rpki-client.org