Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa
File:                     323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (raw, json)
Hash identifier:          v/LVExkOdHJSs39Ln60dSD2Ymb7RaEdl9PQca5+c1lg=
Subject key identifier:   15:76:34:5F:8C:6D:32:2D:32:0B:1F:ED:74:AE:EA:21:01:10:B2:7E
Certificate issuer:       /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial:       39EA79796C9A8480427A787CB2BF24000B1F81E6
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa
Signing time:             Thu 08 Jun 2023 03:00:02 +0000
ROA not before:           Thu 08 Jun 2023 02:55:02 +0000
ROA not after:            Thu 06 Jun 2024 03:00:02 +0000
asID:                     137330
IP address blocks:        2402:aa40:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
                          rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 16:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ea:79:79:6c:9a:84:80:42:7a:78:7c:b2:bf:24:00:0b:1f:81:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
        Validity
            Not Before: Jun  8 02:55:02 2023 GMT
            Not After : Jun  6 03:00:02 2024 GMT
        Subject: CN=1576345F8C6D322D320B1FED74AEEA210110B27E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:66:b6:1a:00:15:65:13:2e:56:89:8d:61:
                    f5:a2:41:ed:04:cd:3f:fa:06:61:4a:ff:63:b6:8f:
                    b0:18:b7:90:e0:fb:91:6a:1a:66:55:fb:76:7f:ed:
                    58:24:07:84:d4:48:b0:cd:95:3d:34:d4:75:8a:25:
                    0a:7f:fb:19:e2:fb:73:df:40:56:6d:ba:58:78:9d:
                    b3:f4:c0:10:94:e6:28:24:88:aa:59:c0:bf:7c:8d:
                    ef:b6:4e:bb:62:90:e4:10:2e:79:b0:0c:29:29:e4:
                    e8:b3:a9:6b:88:35:ab:a7:7b:ae:01:52:75:c0:30:
                    f1:97:94:8f:58:fe:a7:30:ee:13:6a:7a:56:14:8f:
                    63:af:6d:e0:e2:66:38:b1:09:78:02:15:5f:1f:ef:
                    6d:3a:f5:44:d3:e2:f6:90:6f:57:46:e2:a6:ad:e7:
                    b5:42:cf:68:96:05:5c:f5:54:b7:91:9e:5b:a5:37:
                    1a:8c:04:a6:8e:19:9f:13:83:03:f1:81:fe:c5:75:
                    4e:75:09:71:03:f1:93:a6:99:5f:76:2b:1a:04:e8:
                    41:b2:7b:00:7c:99:d5:0e:fd:aa:e9:d8:43:eb:eb:
                    66:1a:9e:8d:9b:0a:eb:3a:cc:8a:49:1d:73:50:2f:
                    7b:4c:52:17:36:84:0e:0d:60:6d:d1:64:2e:a7:6a:
                    fb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:76:34:5F:8C:6D:32:2D:32:0B:1F:ED:74:AE:EA:21:01:10:B2:7E
            X509v3 Authority Key Identifier:
                keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:aa40:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:13:d1:89:63:bd:66:71:22:6b:29:59:a1:98:de:c5:14:ae:
         5d:3d:cb:a1:b2:6d:84:e9:78:18:3f:fd:da:04:bb:bf:71:f1:
         ef:0b:de:7d:5e:df:a0:85:66:a9:02:99:20:70:df:4f:45:26:
         25:5d:18:71:96:c5:02:11:f6:da:26:81:8b:55:4d:0f:cb:9b:
         bf:e8:cc:d5:f8:90:bd:fd:25:18:75:f3:c9:23:ec:54:4e:ab:
         8e:ac:cb:3d:44:05:c4:95:8e:d0:0e:f8:b5:13:55:5e:77:86:
         e3:3e:91:40:1a:ab:8e:c3:25:30:ba:49:8b:8d:64:07:1d:ab:
         0f:d7:db:4d:91:f3:79:b3:4e:ec:1a:d9:a8:9e:08:ff:5f:50:
         21:21:4d:c2:7e:ef:68:27:b1:bb:20:a7:5f:ca:72:83:72:be:
         65:ab:d3:32:39:14:2f:5f:8c:30:5b:cf:a3:01:c3:eb:23:4b:
         8a:89:a9:95:6b:47:db:2a:52:27:a5:17:70:9a:15:9f:2a:90:
         8c:d7:55:28:02:fa:4f:49:8f:cb:0a:ba:73:aa:39:86:fa:34:
         f5:f5:dd:59:61:e5:6d:6d:76:65:10:3c:76:dc:2b:32:91:11:
         c3:7e:5c:07:45:35:2a:04:30:ee:2e:b3:cc:4d:a5:15:f3:23:
         28:d0:c0:ed
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUOep5eWyahIBCenh8sr8kAAsfgeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF
NEMxRDAwMzAeFw0yMzA2MDgwMjU1MDJaFw0yNDA2MDYwMzAwMDJaMDMxMTAvBgNV
BAMTKDE1NzYzNDVGOEM2RDMyMkQzMjBCMUZFRDc0QUVFQTIxMDExMEIyN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg02a2GgAVZRMuVomNYfWiQe0E
zT/6BmFK/2O2j7AYt5Dg+5FqGmZV+3Z/7VgkB4TUSLDNlT001HWKJQp/+xni+3Pf
QFZtulh4nbP0wBCU5igkiKpZwL98je+2TrtikOQQLnmwDCkp5OizqWuINaune64B
UnXAMPGXlI9Y/qcw7hNqelYUj2OvbeDiZjixCXgCFV8f72069UTT4vaQb1dG4qat
57VCz2iWBVz1VLeRnlulNxqMBKaOGZ8TgwPxgf7FdU51CXED8ZOmmV92KxoE6EGy
ewB8mdUO/arp2EPr62Yano2bCus6zIpJHXNQL3tMUhc2hA4NYG3RZC6navtHAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUFXY0X4xtMi0yCx/tdK7qIQEQsn4wHwYDVR0j
BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx
REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx
RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04
N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzQzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAQw
DQYJKoZIhvcNAQELBQADggEBAA8T0YljvWZxImspWaGY3sUUrl09y6GybYTpeBg/
/doEu79x8e8L3n1e36CFZqkCmSBw309FJiVdGHGWxQIR9tomgYtVTQ/Lm7/ozNX4
kL39JRh188kj7FROq46syz1EBcSVjtAO+LUTVV53huM+kUAaq47DJTC6SYuNZAcd
qw/X202R83mzTuwa2aieCP9fUCEhTcJ+72gnsbsgp1/KcoNyvmWr0zI5FC9fjDBb
z6MBw+sjS4qJqZVrR9sqUielF3CaFZ8qkIzXVSgC+k9Jj8sKunOqOYb6NPX13Vlh
5W1tdmUQPHbcKzKREcN+XAdFNSoEMO4us8xNpRXzIyjQwO0=
-----END CERTIFICATE-----
Generated at Fri Apr 26 10:57:37 2024 by rpki-client on console-ams.rpki-client.org