Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3a2f33322d3332203d3e20313533303837.roa
File:                     323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (raw, json)
Hash identifier:          LlvO11EU/iS2M2YGJcEiY6u5jR3toApu67cubUfdPII=
Subject key identifier:   F8:0F:33:68:5B:5A:8B:5A:7C:D3:6D:08:67:1E:73:1B:91:C1:C1:FB
Certificate issuer:       /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial:       05F59CB913BAE146C7966DAD56A786106DF81C3F
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3a2f33322d3332203d3e20313533303837.roa
Signing time:             Fri 02 Aug 2024 13:03:19 +0000
ROA not before:           Fri 02 Aug 2024 12:58:19 +0000
ROA not after:            Fri 01 Aug 2025 13:03:19 +0000
asID:                     153087
IP address blocks:        2404:97c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
                          rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f5:9c:b9:13:ba:e1:46:c7:96:6d:ad:56:a7:86:10:6d:f8:1c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
        Validity
            Not Before: Aug  2 12:58:19 2024 GMT
            Not After : Aug  1 13:03:19 2025 GMT
        Subject: CN=F80F33685B5A8B5A7CD36D08671E731B91C1C1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f9:9e:8f:87:26:bb:c2:aa:06:a5:e2:72:5e:
                    76:8b:cb:6b:78:90:52:6b:b2:da:c9:cf:5d:d3:92:
                    10:99:a6:b5:99:23:8a:73:2d:3e:0f:69:33:1d:f8:
                    bf:e9:54:02:d8:f9:1d:a3:2c:43:28:1e:ed:36:ab:
                    7d:9e:56:c3:2f:c3:cc:49:a9:ae:f3:d7:f1:4d:98:
                    6a:97:c8:50:7f:2a:27:f7:7a:2f:60:4d:d2:8a:a9:
                    b3:ea:60:83:00:ee:3d:db:39:a0:ed:41:de:89:8a:
                    bb:3c:77:24:1f:14:6d:3a:ed:36:62:9c:0e:81:8d:
                    26:97:23:c5:7a:d6:ce:3b:b7:ae:a1:35:26:46:61:
                    c9:53:c9:28:3d:b9:1b:d4:96:82:f3:70:b1:36:69:
                    88:0d:34:16:51:27:07:c7:4c:f0:27:2d:b9:a0:e8:
                    f5:28:e6:d4:ae:c9:59:4a:a3:ba:f0:3a:e8:0f:98:
                    62:b7:63:82:a2:d7:0f:f2:c3:3d:ee:7d:d6:f4:0a:
                    3c:24:55:2b:c1:29:bc:57:8d:7d:41:8c:e3:c4:f5:
                    c2:b0:1e:f8:6f:b3:3a:bd:1e:fb:e4:c4:ff:41:02:
                    97:1f:de:25:be:d1:12:6e:db:59:95:2f:31:01:7e:
                    95:59:90:5f:fe:7e:cb:9c:84:d5:8d:08:32:c8:e9:
                    2f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0F:33:68:5B:5A:8B:5A:7C:D3:6D:08:67:1E:73:1B:91:C1:C1:FB
            X509v3 Authority Key Identifier:
                keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3a2f33322d3332203d3e20313533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:97c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:dc:88:1e:20:d6:68:d4:32:41:54:bf:7b:cd:4d:47:e9:32:
         b9:45:0c:71:7a:e5:d1:87:31:bc:d9:d8:73:28:5c:f5:53:04:
         74:2a:65:4f:3a:8f:8e:31:8c:5f:3a:eb:f6:62:49:60:65:a4:
         aa:ad:25:08:0c:13:e4:0c:91:2a:bb:12:55:79:8e:47:87:e3:
         6f:8d:07:1d:c3:f7:0c:0f:f0:0c:04:8e:d2:2f:24:a4:d1:91:
         46:68:39:5f:97:68:d1:5b:34:bd:04:44:73:a6:40:b7:a9:b9:
         86:51:c2:64:26:9c:53:19:df:e9:75:50:f8:06:98:0e:63:ee:
         69:b6:32:a2:82:92:cd:ab:d5:ae:af:d5:62:23:56:70:f1:fa:
         70:e1:75:b9:8e:3a:71:33:62:69:fe:5b:76:81:e4:48:8e:cc:
         7e:6e:e8:d1:6d:b4:8d:b9:72:3f:7b:b7:7e:e4:df:5e:d1:20:
         1d:f5:6a:24:01:14:df:b3:46:85:25:1c:23:9b:97:40:c3:93:
         31:f3:81:3a:a1:3a:87:67:ac:87:e4:ea:ba:00:de:f1:43:7f:
         62:27:a7:11:8f:80:ab:93:f9:71:9d:48:9a:42:f7:3b:11:7f:
         77:93:33:2f:c0:e9:a4:ff:b6:46:ee:46:ff:67:c0:79:02:58:
         9b:41:a9:e9
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUBfWcuRO64UbHlm2tVqeGEG34HD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky
NzI5REVFRTAeFw0yNDA4MDIxMjU4MTlaFw0yNTA4MDExMzAzMTlaMDMxMTAvBgNV
BAMTKEY4MEYzMzY4NUI1QThCNUE3Q0QzNkQwODY3MUU3MzFCOTFDMUMxRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+Z6Phya7wqoGpeJyXnaLy2t4
kFJrstrJz13TkhCZprWZI4pzLT4PaTMd+L/pVALY+R2jLEMoHu02q32eVsMvw8xJ
qa7z1/FNmGqXyFB/Kif3ei9gTdKKqbPqYIMA7j3bOaDtQd6Jirs8dyQfFG067TZi
nA6BjSaXI8V61s47t66hNSZGYclTySg9uRvUloLzcLE2aYgNNBZRJwfHTPAnLbmg
6PUo5tSuyVlKo7rwOugPmGK3Y4Ki1w/ywz3ufdb0CjwkVSvBKbxXjX1BjOPE9cKw
Hvhvszq9HvvkxP9BApcf3iW+0RJu21mVLzEBfpVZkF/+fsuchNWNCDLI6S93AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQU+A8zaFtai1p8020IZx5zG5HBwfswHwYDVR0j
BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC
MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5
REVFRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04
MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzUzMzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEl8AwDQYJKoZI
hvcNAQELBQADggEBABDciB4g1mjUMkFUv3vNTUfpMrlFDHF65dGHMbzZ2HMoXPVT
BHQqZU86j44xjF866/ZiSWBlpKqtJQgME+QMkSq7ElV5jkeH42+NBx3D9wwP8AwE
jtIvJKTRkUZoOV+XaNFbNL0ERHOmQLepuYZRwmQmnFMZ3+l1UPgGmA5j7mm2MqKC
ks2r1a6v1WIjVnDx+nDhdbmOOnEzYmn+W3aB5EiOzH5u6NFttI25cj97t37k317R
IB31aiQBFN+zRoUlHCObl0DDkzHzgTqhOodnrIfk6roA3vFDf2InpxGPgKuT+XGd
SJpC9zsRf3eTMy/A6aT/tkbuRv9nwHkCWJtBqek=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:02 2024 by rpki-client on console-fra.rpki-client.org