Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a3a2f33322d3332203d3e20313334363337.roa
File:                     323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (raw, json)
Hash identifier:          jPX3C8a+EfYbSwXn3JX3/8TD5p8yCFs6+vh7wN7rU1U=
Subject key identifier:   73:69:44:BC:33:29:F4:A0:83:51:26:E9:96:FA:A0:B6:29:3B:C1:4C
Certificate issuer:       /CN=027DBEC91021154263BB0CF1565833705023D987
Certificate serial:       1532F9E78BF02A389584CB505C48C20C36A3CB5E
Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a3a2f33322d3332203d3e20313334363337.roa
Signing time:             Tue 20 Feb 2024 08:30:38 +0000
ROA not before:           Tue 20 Feb 2024 08:25:38 +0000
ROA not after:            Tue 18 Feb 2025 08:30:38 +0000
asID:                     134637
IP address blocks:        2403:e380::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl
                          rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:32:f9:e7:8b:f0:2a:38:95:84:cb:50:5c:48:c2:0c:36:a3:cb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027DBEC91021154263BB0CF1565833705023D987
        Validity
            Not Before: Feb 20 08:25:38 2024 GMT
            Not After : Feb 18 08:30:38 2025 GMT
        Subject: CN=736944BC3329F4A0835126E996FAA0B6293BC14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b0:e1:c5:70:e2:9d:a6:c8:6c:3a:00:2a:db:
                    55:80:17:23:a2:43:e0:9e:1c:67:ed:67:97:74:61:
                    98:96:ea:20:82:94:06:d9:b9:59:8f:45:87:28:48:
                    b3:a7:4c:5d:22:76:77:1f:42:a3:b0:46:dd:4a:3d:
                    bb:14:f0:2f:d8:fd:4f:3f:84:12:28:14:59:d3:63:
                    20:ad:9a:7e:ae:56:1e:69:2d:36:30:05:ea:68:4a:
                    f6:8b:06:95:43:ef:94:29:38:10:43:4f:88:43:88:
                    cc:31:f2:ba:34:30:c2:6a:a4:27:23:16:1c:0e:d3:
                    0d:0a:37:49:7b:a8:37:c5:bc:47:a4:75:d2:11:d0:
                    b9:b8:5f:0a:63:39:30:4e:01:7d:56:f9:c5:1d:1c:
                    bd:c2:71:19:f9:87:44:47:2b:c3:64:a0:b0:30:0b:
                    55:10:12:c0:4d:fa:d6:a1:f1:2d:66:8f:3c:9b:13:
                    f5:e3:69:35:e8:fc:de:00:7a:02:5b:32:7a:4b:c0:
                    fe:b4:14:30:c4:df:fb:71:01:33:2c:eb:0f:b3:41:
                    6e:56:58:12:5e:e0:e9:45:29:d2:ff:c3:45:c7:e3:
                    12:9d:f9:c9:8c:1b:9b:a6:43:89:4d:34:22:95:45:
                    3c:5c:44:cd:ff:a1:31:5c:1c:c1:7f:bd:c9:e1:6e:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:69:44:BC:33:29:F4:A0:83:51:26:E9:96:FA:A0:B6:29:3B:C1:4C
            X509v3 Authority Key Identifier:
                keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a3a2f33322d3332203d3e20313334363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:e380::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:a1:0c:8b:85:fc:b5:6b:05:0f:06:b0:a1:c6:1a:90:3a:55:
         ca:60:91:af:86:e3:75:92:b4:71:03:39:2a:65:c9:cc:d1:ec:
         6b:36:d7:f9:c6:79:37:bd:6c:3f:7f:7a:ce:e2:48:a3:30:ae:
         2c:69:84:98:58:0e:f9:ba:3a:2a:0f:d5:6f:7c:74:68:93:40:
         5c:4c:c3:d6:aa:63:ae:5d:51:f5:a9:a8:f5:59:53:32:8f:d4:
         9b:5c:b1:c6:7b:65:eb:a3:60:e4:ae:83:99:f0:cd:a2:8b:d4:
         f5:8f:6a:f0:21:11:18:c9:d3:04:42:ef:6c:0b:df:9e:64:88:
         1c:34:da:72:e7:2a:bd:1f:ec:53:62:1e:9e:5d:ad:60:c6:dc:
         f5:42:95:6f:a9:23:59:24:b1:34:2a:f4:40:2e:71:fa:29:52:
         06:61:c6:0a:02:34:8f:2f:ac:98:ad:27:66:41:46:be:d5:8a:
         c7:a0:4e:2e:aa:4f:50:ee:e0:dd:dd:3b:d5:a0:b6:8e:fb:66:
         c8:75:bb:b1:4c:ae:d1:1a:62:17:25:5a:ba:99:2e:2f:dd:6b:
         09:a1:51:93:c2:71:e5:4a:61:6b:57:13:cd:59:02:0a:20:11:
         00:e7:2e:a3:0c:6e:f5:84:c1:c5:4b:7c:b7:5e:ab:8f:aa:86:
         5f:b7:4d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org