Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/323430353a6234303a3a2f33322d3438203d3e203535363734.roa
File:                     323430353a6234303a3a2f33322d3438203d3e203535363734.roa (raw, json)
Hash identifier:          vwG6rdNeDAh4jG1/O0P49gXsPwynq5he4dtgM3d7KkM=
Subject key identifier:   8C:DD:B5:61:0B:58:60:1E:AC:D8:D5:41:C3:C2:A6:95:12:9B:54:2E
Certificate issuer:       /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA
Certificate serial:       202862E6D5883E117FD948B65DA172865DCF5A67
Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/323430353a6234303a3a2f33322d3438203d3e203535363734.roa
Signing time:             Fri 05 Jul 2024 04:00:01 +0000
ROA not before:           Fri 05 Jul 2024 03:55:01 +0000
ROA not after:            Fri 04 Jul 2025 04:00:01 +0000
asID:                     55674
IP address blocks:        2405:b40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl
                          rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:28:62:e6:d5:88:3e:11:7f:d9:48:b6:5d:a1:72:86:5d:cf:5a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA
        Validity
            Not Before: Jul  5 03:55:01 2024 GMT
            Not After : Jul  4 04:00:01 2025 GMT
        Subject: CN=8CDDB5610B58601EACD8D541C3C2A695129B542E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:79:bb:d0:44:31:f7:32:c5:46:1b:3e:6d:
                    fe:f4:e7:46:0a:f7:37:94:80:cd:d0:96:e2:c4:8e:
                    d5:25:c2:92:aa:49:a8:56:13:dc:11:cc:b8:72:12:
                    ea:98:8d:5c:3b:2e:0c:1a:55:b2:5f:19:c7:4e:65:
                    78:12:a2:a8:cf:9d:23:85:d7:de:28:49:6c:05:7f:
                    b7:3d:2a:12:cb:4d:72:0c:43:a6:83:ff:12:bd:5e:
                    87:9c:d9:58:90:1f:19:54:4c:77:a2:9d:e3:01:ce:
                    7e:75:c1:be:c4:a2:24:f5:13:16:45:80:f9:a4:1a:
                    f9:8c:ea:f7:b6:8a:4f:88:0d:fa:5a:24:dd:ea:91:
                    36:9a:65:44:bf:fb:b2:16:ca:cf:54:94:e4:3d:a1:
                    02:09:39:54:33:ab:14:a1:9f:e2:bf:9d:50:76:9d:
                    31:68:cc:6f:e5:fa:e7:e4:1d:e3:61:30:d0:23:58:
                    bb:a8:b0:41:aa:e6:c9:12:d5:33:cc:03:46:9b:ab:
                    c8:cc:c9:9a:bf:64:de:bc:5b:d3:77:f7:45:3a:12:
                    85:90:84:c6:dc:57:6d:8e:73:29:e3:a4:95:54:d3:
                    43:70:20:23:74:24:e0:3e:98:00:ad:b8:37:3d:40:
                    f3:28:9b:78:9d:41:12:6d:19:6f:9c:49:c0:7f:4c:
                    e8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DD:B5:61:0B:58:60:1E:AC:D8:D5:41:C3:C2:A6:95:12:9B:54:2E
            X509v3 Authority Key Identifier:
                keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/323430353a6234303a3a2f33322d3438203d3e203535363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:cb:d1:e7:f4:13:4e:1f:62:67:6f:bb:33:65:8d:cc:7b:21:
         56:d4:87:0d:c9:06:4e:6b:f5:12:eb:e6:5e:d2:84:41:a8:1a:
         0f:29:3a:04:2b:6a:56:16:a6:6a:a7:bd:d7:e1:e2:b8:4d:94:
         2d:b7:a0:2a:fe:da:0d:cc:5a:c9:04:4b:b3:15:ab:c8:a6:d5:
         c1:49:65:08:11:6c:00:e4:68:21:2a:15:b2:45:f5:5e:0c:13:
         6c:9a:15:16:9b:19:c5:d0:fa:eb:f1:6b:d1:64:ad:62:91:cd:
         b4:94:52:87:c9:cb:9e:25:13:c0:66:5b:86:33:73:bb:a9:06:
         23:53:4f:ff:f1:9c:28:6b:1a:70:f3:f9:fd:c6:e4:f6:c5:24:
         11:6d:06:61:0f:d2:e1:05:89:08:6a:6d:eb:8b:3a:19:a7:1c:
         8a:8d:11:de:bf:62:d0:6c:02:e1:ea:6a:f0:83:46:9d:e7:45:
         1e:e1:33:72:05:fe:23:29:43:00:af:79:d1:c0:c4:9b:dd:62:
         85:d0:8e:5e:2c:ab:f5:b2:e6:b4:19:84:56:c8:64:93:7f:6d:
         59:f5:53:1d:3f:b6:3a:a7:5a:0e:53:3c:ac:9e:b1:c5:da:d3:
         8b:d9:bb:e8:55:13:f7:60:00:4e:8e:fd:52:56:c6:52:e0:ac:
         81:81:86:ce
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUIChi5tWIPhF/2Ui2XaFyhl3PWmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0
RDM1RjlBQTAeFw0yNDA3MDUwMzU1MDFaFw0yNTA3MDQwNDAwMDFaMDMxMTAvBgNV
BAMTKDhDRERCNTYxMEI1ODYwMUVBQ0Q4RDU0MUMzQzJBNjk1MTI5QjU0MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMq3m70EQx9zLFRhs+bf7050YK
9zeUgM3QluLEjtUlwpKqSahWE9wRzLhyEuqYjVw7LgwaVbJfGcdOZXgSoqjPnSOF
194oSWwFf7c9KhLLTXIMQ6aD/xK9Xoec2ViQHxlUTHeineMBzn51wb7EoiT1ExZF
gPmkGvmM6ve2ik+IDfpaJN3qkTaaZUS/+7IWys9UlOQ9oQIJOVQzqxShn+K/nVB2
nTFozG/l+ufkHeNhMNAjWLuosEGq5skS1TPMA0abq8jMyZq/ZN68W9N390U6EoWQ
hMbcV22OcynjpJVU00NwICN0JOA+mACtuDc9QPMom3idQRJtGW+cScB/TOgZAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUjN21YQtYYB6s2NVBw8KmlRKbVC4wHwYDVR0j
BBgwFoAUIUA1niPfETYX+asuEx0jHk01+aowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MTgwZjc1NS01YzI3LTQwZjgtODBhZi0yZmE4ZGYxMTUyODIvMC8yMTQwMzU5RTIz
REYxMTM2MTdGOUFCMkUxMzFEMjMxRTREMzVGOUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0RDM1
RjlBQS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw
YWYtMmZhOGRmMTE1MjgyLzAvMzIzNDMwMzUzYTYyMzQzMDNhM2EyZjMzMzIyZDM0
MzgyMDNkM2UyMDM1MzUzNjM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBQtAMA0GCSqGSIb3DQEB
CwUAA4IBAQBby9Hn9BNOH2Jnb7szZY3MeyFW1IcNyQZOa/US6+Ze0oRBqBoPKToE
K2pWFqZqp73X4eK4TZQtt6Aq/toNzFrJBEuzFavIptXBSWUIEWwA5GghKhWyRfVe
DBNsmhUWmxnF0Prr8WvRZK1ikc20lFKHycueJRPAZluGM3O7qQYjU0//8Zwoaxpw
8/n9xuT2xSQRbQZhD9LhBYkIam3rizoZpxyKjRHev2LQbALh6mrwg0ad50Ue4TNy
Bf4jKUMAr3nRwMSb3WKF0I5eLKv1sua0GYRWyGSTf21Z9VMdP7Y6p1oOUzysnrHF
2tOL2bvoVRP3YABOjv1SVsZS4KyBgYbO
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org