Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323235303a3a2f34382d3438203d3e20313533303837.roa
File:                     323430343a393763303a323235303a3a2f34382d3438203d3e20313533303837.roa (raw, json)
Hash identifier:          0d5gcEigTt6I3I0GQYXd2ziSuTaPcy9yT0rhjGOagEA=
Subject key identifier:   39:B1:C1:12:E6:F8:58:CF:16:57:05:B7:88:D7:A4:2F:09:10:B7:A7
Certificate issuer:       /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial:       06C95883792CE4C4E1FFE3A033353CAEDFA4DD6C
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323235303a3a2f34382d3438203d3e20313533303837.roa
Signing time:             Fri 02 Aug 2024 12:54:24 +0000
ROA not before:           Fri 02 Aug 2024 12:49:24 +0000
ROA not after:            Fri 01 Aug 2025 12:54:24 +0000
asID:                     153087
IP address blocks:        2404:97c0:2250::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
                          rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c9:58:83:79:2c:e4:c4:e1:ff:e3:a0:33:35:3c:ae:df:a4:dd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
        Validity
            Not Before: Aug  2 12:49:24 2024 GMT
            Not After : Aug  1 12:54:24 2025 GMT
        Subject: CN=39B1C112E6F858CF165705B788D7A42F0910B7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:05:47:d1:10:8d:a0:c9:00:f0:cd:13:b2:
                    2b:d8:64:71:64:d7:2b:40:da:92:da:2f:1b:88:01:
                    dd:d0:3d:fb:81:71:f6:35:a4:fa:fb:fd:3e:3f:44:
                    ee:23:03:8c:54:79:a8:07:a1:3c:ff:90:ce:80:d6:
                    f5:d3:80:f9:d3:22:10:ec:25:69:f4:76:18:b3:9c:
                    c9:e9:81:30:1e:e0:13:d9:b2:6e:22:72:15:e7:b6:
                    fb:a1:ff:29:df:70:7d:70:33:23:22:45:9c:a5:1c:
                    d1:28:09:26:6a:7a:a3:47:d4:a8:09:6f:79:b7:aa:
                    f9:76:b8:f2:39:ed:71:0b:51:2e:22:ba:9c:67:c3:
                    92:20:68:07:ef:1c:4f:26:64:62:86:10:03:8e:66:
                    9d:da:df:8a:49:4a:6b:7b:17:dc:ac:ca:1b:70:1f:
                    eb:3e:65:13:75:bd:5e:e0:e7:87:6a:bb:d9:27:99:
                    0a:d6:98:f6:8a:ea:c3:5d:a4:ca:0b:c4:b3:bb:32:
                    c2:6f:fa:da:9c:71:a2:c7:29:4f:3f:99:03:4d:6d:
                    cd:fb:d9:90:ea:f6:28:c0:4f:dd:f6:5b:1c:82:b0:
                    18:96:04:4f:d9:d5:1b:5e:39:ff:25:7a:3a:c1:47:
                    86:67:7b:71:03:95:46:80:e8:02:4a:59:43:e3:65:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B1:C1:12:E6:F8:58:CF:16:57:05:B7:88:D7:A4:2F:09:10:B7:A7
            X509v3 Authority Key Identifier:
                keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323235303a3a2f34382d3438203d3e20313533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:97c0:2250::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:c1:31:e0:c6:a8:13:5a:bc:43:8f:61:bd:d0:ba:ae:97:e6:
         f7:0e:0b:c7:b0:71:09:88:6d:bc:cb:54:d4:3a:a5:ff:34:db:
         fc:b5:7d:b2:64:e5:4d:39:4d:f5:f7:94:fa:39:98:80:db:5b:
         86:0b:df:28:b3:0e:2f:f2:c8:93:d1:41:1d:0e:9c:11:94:88:
         0b:ca:d6:36:34:d3:4a:01:54:6c:ea:b0:fe:76:e1:3b:5d:4b:
         46:e2:a5:51:c9:d2:d1:88:ea:01:02:48:04:39:98:2f:56:a0:
         42:a6:b8:44:2a:25:5c:aa:a5:6a:d0:58:28:d6:26:eb:da:3e:
         a2:13:ca:9d:89:2e:6c:b0:47:1a:ee:f4:ab:1f:fd:1e:75:87:
         f5:ce:1e:96:d0:3e:51:cf:a4:69:21:ae:34:f3:47:08:f6:65:
         5c:0b:dc:af:8c:82:5a:d4:90:0d:f4:86:1f:17:e4:bb:62:3c:
         c0:a2:c2:e1:d0:59:eb:12:ab:f7:8b:91:2e:a6:8a:98:63:9e:
         cf:2e:56:e2:c7:a8:e9:94:f1:a3:9e:ce:a3:8d:1b:f9:60:e7:
         1a:b2:b7:b9:62:76:7d:e8:5b:da:17:df:d9:52:3a:70:1e:77:
         95:1e:7c:d8:a1:28:c8:c6:37:08:fa:46:04:ac:48:19:db:d9:
         a9:45:b2:89
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUBslYg3ks5MTh/+OgMzU8rt+k3WwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky
NzI5REVFRTAeFw0yNDA4MDIxMjQ5MjRaFw0yNTA4MDExMjU0MjRaMDMxMTAvBgNV
BAMTKDM5QjFDMTEyRTZGODU4Q0YxNjU3MDVCNzg4RDdBNDJGMDkxMEI3QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJwVH0RCNoMkA8M0TsivYZHFk
1ytA2pLaLxuIAd3QPfuBcfY1pPr7/T4/RO4jA4xUeagHoTz/kM6A1vXTgPnTIhDs
JWn0dhiznMnpgTAe4BPZsm4ichXntvuh/ynfcH1wMyMiRZylHNEoCSZqeqNH1KgJ
b3m3qvl2uPI57XELUS4iupxnw5IgaAfvHE8mZGKGEAOOZp3a34pJSmt7F9ysyhtw
H+s+ZRN1vV7g54dqu9knmQrWmPaK6sNdpMoLxLO7MsJv+tqccaLHKU8/mQNNbc37
2ZDq9ijAT932WxyCsBiWBE/Z1RteOf8lejrBR4Zne3EDlUaA6AJKWUPjZQoFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUObHBEub4WM8WVwW3iNekLwkQt6cwHwYDVR0j
BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC
MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5
REVFRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04
MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMjM1MzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
BJfAIlAwDQYJKoZIhvcNAQELBQADggEBAI3BMeDGqBNavEOPYb3Quq6X5vcOC8ew
cQmIbbzLVNQ6pf802/y1fbJk5U05TfX3lPo5mIDbW4YL3yizDi/yyJPRQR0OnBGU
iAvK1jY000oBVGzqsP524TtdS0bipVHJ0tGI6gECSAQ5mC9WoEKmuEQqJVyqpWrQ
WCjWJuvaPqITyp2JLmywRxru9Ksf/R51h/XOHpbQPlHPpGkhrjTzRwj2ZVwL3K+M
glrUkA30hh8X5LtiPMCiwuHQWesSq/eLkS6miphjns8uVuLHqOmU8aOezqONG/lg
5xqyt7lidn3oW9oX39lSOnAed5UefNihKMjGNwj6RgSsSBnb2alFsok=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org