Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a3a2f33322d3438203d3e2034373837.roa
File:                     323030313a6431303a3a2f33322d3438203d3e2034373837.roa (raw, json)
Hash identifier:          29ToBip427R4Oa95G4slhfhWZaSQr6Gv+b5v9HBvhBY=
Subject key identifier:   4A:6C:99:B5:9C:96:AD:CB:9F:B2:6E:CD:C2:2C:D8:B2:93:9C:0E:75
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       459C22A83DD29650BC2D700E7D3966F19B7FD47F
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a3a2f33322d3438203d3e2034373837.roa
Signing time:             Mon 31 Jul 2023 00:02:27 +0000
ROA not before:           Sun 30 Jul 2023 23:57:27 +0000
ROA not after:            Mon 29 Jul 2024 00:02:27 +0000
asID:                     4787
IP address blocks:        2001:d10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 05:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9c:22:a8:3d:d2:96:50:bc:2d:70:0e:7d:39:66:f1:9b:7f:d4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:27 2023 GMT
            Not After : Jul 29 00:02:27 2024 GMT
        Subject: CN=4A6C99B59C96ADCB9FB26ECDC22CD8B2939C0E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:dd:3f:88:24:0a:8c:64:28:99:a1:cd:c2:
                    cd:18:10:54:38:0b:0e:66:28:35:56:0d:9a:12:4c:
                    51:db:fb:eb:4a:e3:ec:57:e0:46:e5:61:80:f9:e1:
                    6c:c3:2f:4d:df:81:b1:0b:e8:a8:a9:46:e4:a0:38:
                    10:d5:31:7f:cb:6e:3b:a8:a6:5c:e5:80:33:12:8d:
                    83:aa:b3:0e:e0:87:87:39:ac:4e:38:62:7d:c5:d1:
                    0c:5f:35:01:5d:0a:8e:54:ca:3f:56:68:72:4d:06:
                    ea:15:12:75:0d:0c:be:8d:6c:c1:d1:f4:9c:a1:2f:
                    17:4b:4c:ad:93:83:bb:44:e4:72:e0:03:81:05:e5:
                    39:fa:fb:6b:9a:9e:34:38:64:18:45:ca:46:8b:4b:
                    10:a5:47:6a:44:bf:d2:16:10:82:58:f3:1e:ab:5b:
                    36:43:a4:ce:8b:16:8c:3e:63:b0:25:c6:03:28:4a:
                    64:1a:e5:72:1c:fc:27:8c:e3:bd:93:70:eb:9b:87:
                    ea:89:c7:3e:91:89:29:9c:3a:e5:fd:e9:87:8b:52:
                    57:a7:5e:cd:75:14:e5:fb:91:1e:ec:01:c0:95:3e:
                    64:e7:90:3d:21:c6:db:81:06:13:df:5f:61:9e:a5:
                    ba:6a:e9:40:5e:f4:c0:ec:3c:8c:26:29:8f:cf:82:
                    34:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6C:99:B5:9C:96:AD:CB:9F:B2:6E:CD:C2:2C:D8:B2:93:9C:0E:75
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a3a2f33322d3438203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:44:ef:e6:fa:b3:04:3b:e3:ee:17:44:16:ed:ac:cf:1b:
         47:a8:e8:02:e4:3e:95:0e:ff:1a:48:05:1b:fb:33:76:51:3b:
         37:01:e6:c0:9b:0d:c6:53:b6:46:f6:96:3d:44:a9:49:b0:9d:
         c4:fa:5f:1f:c6:7e:1b:e7:3b:b3:ed:84:a8:7d:89:38:b4:d1:
         86:56:87:ac:1e:41:25:a4:3e:8b:d3:7e:7d:df:f8:54:5a:95:
         ad:57:09:ad:ec:b5:b3:03:e3:90:eb:e7:f3:f3:46:d8:65:2c:
         87:a2:c5:c3:cc:3f:06:4b:48:1e:70:74:1f:7e:c4:b7:36:f5:
         60:fa:c9:60:2c:40:cc:b1:9a:34:b1:45:fe:76:3b:d9:e0:9e:
         db:fe:77:5b:bd:28:05:eb:2b:4b:8b:76:8f:4a:ef:48:a0:ed:
         20:4f:5d:10:98:12:74:db:64:7c:ce:87:91:b7:8b:99:29:6d:
         2d:2f:4a:c8:a4:69:f9:23:44:d0:fe:0f:01:73:44:6e:25:06:
         69:25:d1:1c:c1:10:d9:88:e6:d9:1b:0d:58:d6:fd:e4:2b:3f:
         46:97:5d:1b:d3:15:07:91:c7:c6:d9:50:6d:13:f1:6f:57:07:
         88:d6:1f:6b:b1:c6:7a:06:a4:59:5b:40:0d:b4:62:71:88:9b:
         2a:ba:a2:fe
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIURZwiqD3SllC8LXAOfTlm8Zt/1H8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yMzA3MzAyMzU3MjdaFw0yNDA3MjkwMDAyMjdaMDMxMTAvBgNV
BAMTKDRBNkM5OUI1OUM5NkFEQ0I5RkIyNkVDREMyMkNEOEIyOTM5QzBFNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWd0/iCQKjGQomaHNws0YEFQ4
Cw5mKDVWDZoSTFHb++tK4+xX4EblYYD54WzDL03fgbEL6KipRuSgOBDVMX/Lbjuo
plzlgDMSjYOqsw7gh4c5rE44Yn3F0QxfNQFdCo5Uyj9WaHJNBuoVEnUNDL6NbMHR
9JyhLxdLTK2Tg7tE5HLgA4EF5Tn6+2uanjQ4ZBhFykaLSxClR2pEv9IWEIJY8x6r
WzZDpM6LFow+Y7AlxgMoSmQa5XIc/CeM472TcOubh+qJxz6RiSmcOuX96YeLUlen
Xs11FOX7kR7sAcCVPmTnkD0hxtuBBhPfX2Gepbpq6UBe9MDsPIwmKY/PgjQLAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUSmyZtZyWrcufsm7NwizYspOcDnUwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3MDI3MjYtYjJjNi00NmZjLTgy
OTctMmRiZGVjNmQ2ZDVkLzAvMzIzMDMwMzEzYTY0MzEzMDNhM2EyZjMzMzIyZDM0
MzgyMDNkM2UyMDM0MzczODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAENEDANBgkqhkiG9w0BAQsF
AAOCAQEAeMtE7+b6swQ74+4XRBbtrM8bR6joAuQ+lQ7/GkgFG/szdlE7NwHmwJsN
xlO2RvaWPUSpSbCdxPpfH8Z+G+c7s+2EqH2JOLTRhlaHrB5BJaQ+i9N+fd/4VFqV
rVcJrey1swPjkOvn8/NG2GUsh6LFw8w/BktIHnB0H37Etzb1YPrJYCxAzLGaNLFF
/nY72eCe2/53W70oBesrS4t2j0rvSKDtIE9dEJgSdNtkfM6HkbeLmSltLS9KyKRp
+SNE0P4PAXNEbiUGaSXRHMEQ2Yjm2RsNWNb95Cs/RpddG9MVB5HHxtlQbRPxb1cH
iNYfa7HGegakWVtADbRicYibKrqi/g==
-----END CERTIFICATE-----
Generated at Fri May 3 01:27:19 2024 by rpki-client on console-fra.rpki-client.org