Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/323430363a353463303a3a2f33322d3332203d3e20313430343739.roa
File:                     323430363a353463303a3a2f33322d3332203d3e20313430343739.roa (raw, json)
Hash identifier:          fnWrt89yLpCNBSbd7sM/rNv0ago1J7pOp7haPL1Qn9k=
Subject key identifier:   1E:80:FC:C0:45:79:5E:9B:1C:2D:9D:22:1A:E3:EB:E4:25:AE:CB:40
Certificate issuer:       /CN=7470038419B67CD1743CE4D96953077ECE6928FE
Certificate serial:       4BF93B4548B7556E79D339A7227474646B1F8014
Authority key identifier: 74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/323430363a353463303a3a2f33322d3332203d3e20313430343739.roa
Signing time:             Tue 05 Dec 2023 11:00:02 +0000
ROA not before:           Tue 05 Dec 2023 10:55:02 +0000
ROA not after:            Tue 03 Dec 2024 11:00:02 +0000
asID:                     140479
IP address blocks:        2406:54c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl
                          rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f9:3b:45:48:b7:55:6e:79:d3:39:a7:22:74:74:64:6b:1f:80:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7470038419B67CD1743CE4D96953077ECE6928FE
        Validity
            Not Before: Dec  5 10:55:02 2023 GMT
            Not After : Dec  3 11:00:02 2024 GMT
        Subject: CN=1E80FCC045795E9B1C2D9D221AE3EBE425AECB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:dc:4f:1f:de:cc:38:e0:a2:9d:e0:11:ff:
                    e4:be:11:81:9e:c3:d4:07:40:cf:c9:b8:a1:fd:e0:
                    61:79:9f:fc:1d:e0:9a:bd:a9:45:75:59:7f:58:84:
                    a8:14:ce:e9:6e:df:03:21:2f:8b:d2:11:22:1d:13:
                    cc:d7:1f:fa:2c:c8:46:63:bf:e6:9f:58:f2:fe:91:
                    66:5a:f1:5f:30:4a:b8:84:eb:cf:5f:e0:91:8b:7b:
                    e6:12:18:18:53:9e:e8:13:b8:d1:c4:20:1b:c6:28:
                    9d:92:b5:5f:d0:05:e6:96:45:45:5a:1e:f4:4e:d8:
                    e3:57:b9:4d:d2:72:ad:33:22:dc:be:01:af:7f:b2:
                    a5:5d:9a:10:b0:25:1b:4d:d1:f8:3f:be:c4:37:11:
                    46:6d:d0:ea:a4:21:ef:73:5a:95:9d:06:4d:db:8e:
                    93:7d:1f:f7:19:b1:37:fd:1b:2c:86:71:2c:b3:73:
                    72:1e:b7:65:80:73:88:3f:e4:50:f5:bd:8a:43:c1:
                    c3:2b:a8:cb:da:c4:ef:74:08:3a:d8:d1:d4:79:cb:
                    7f:04:2f:21:30:76:59:00:ba:2e:94:9c:79:46:46:
                    e9:db:a4:e4:65:fc:33:de:bd:30:d6:96:32:a1:cc:
                    af:f3:4f:84:b5:8e:44:21:43:be:28:7f:46:de:0d:
                    ce:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:80:FC:C0:45:79:5E:9B:1C:2D:9D:22:1A:E3:EB:E4:25:AE:CB:40
            X509v3 Authority Key Identifier:
                keyid:74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/323430363a353463303a3a2f33322d3332203d3e20313430343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:54c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:23:01:13:19:8f:2d:51:5e:c3:1e:ee:48:e0:0c:08:10:15:
         07:87:5c:d4:3f:da:bd:3e:b4:42:4e:9e:fd:73:3e:a1:4b:b8:
         bf:c4:e5:24:1f:ed:00:a0:d5:11:ae:56:47:70:8a:e4:ea:cb:
         8a:22:68:1e:8f:35:fa:48:1e:4b:df:8b:58:7d:fc:0a:d9:b1:
         1a:4f:29:fb:ad:a0:77:6a:33:80:f5:76:a4:d6:0f:bc:73:b2:
         90:28:d0:5e:9a:bf:74:bb:62:32:f0:eb:59:5f:89:c2:f2:bb:
         a5:36:96:0a:2d:7f:3b:bd:71:32:49:06:fb:ab:ac:a8:d7:1f:
         24:9a:ac:81:78:06:c1:87:dd:72:4b:8a:af:dc:16:12:1b:c1:
         be:c0:ae:65:1d:f6:17:68:97:e0:e3:33:df:f7:47:79:89:8a:
         3d:ab:09:52:c6:1d:c5:d3:e1:e8:9c:b6:e3:80:94:62:03:ca:
         24:7c:24:6a:e0:c4:f0:01:76:1a:0b:16:f0:ef:0e:3d:2a:0b:
         fa:ae:a9:2e:36:bb:41:31:12:ac:ec:60:80:7e:13:5f:9f:f9:
         a9:e0:30:66:c0:a7:dc:e5:f1:56:b7:64:03:f6:f8:f1:d5:53:
         48:b0:7f:a2:18:65:16:bc:fd:94:2f:c3:1c:3d:26:69:f2:4b:
         f7:c9:71:43
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUS/k7RUi3VW550zmnInR0ZGsfgBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3N0VD
RTY5MjhGRTAeFw0yMzEyMDUxMDU1MDJaFw0yNDEyMDMxMTAwMDJaMDMxMTAvBgNV
BAMTKDFFODBGQ0MwNDU3OTVFOUIxQzJEOUQyMjFBRTNFQkU0MjVBRUNCNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi4txPH97MOOCineAR/+S+EYGe
w9QHQM/JuKH94GF5n/wd4Jq9qUV1WX9YhKgUzulu3wMhL4vSESIdE8zXH/osyEZj
v+afWPL+kWZa8V8wSriE689f4JGLe+YSGBhTnugTuNHEIBvGKJ2StV/QBeaWRUVa
HvRO2ONXuU3Scq0zIty+Aa9/sqVdmhCwJRtN0fg/vsQ3EUZt0OqkIe9zWpWdBk3b
jpN9H/cZsTf9GyyGcSyzc3Iet2WAc4g/5FD1vYpDwcMrqMvaxO90CDrY0dR5y38E
LyEwdlkAui6UnHlGRunbpORl/DPevTDWljKhzK/zT4S1jkQhQ74of0beDc5JAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUHoD8wEV5XpscLZ0iGuPr5CWuy0AwHwYDVR0j
BBgwFoAUdHADhBm2fNF0POTZaVMHfs5pKP4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
Yzc2NWQ1MS1iMGIxLTQzNWQtYTY2Yi02MDRjNmU1ZDI5ZWYvMC83NDcwMDM4NDE5
QjY3Q0QxNzQzQ0U0RDk2OTUzMDc3RUNFNjkyOEZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3N0VDRTY5
MjhGRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjNzY1ZDUxLWIwYjEtNDM1ZC1h
NjZiLTYwNGM2ZTVkMjllZi8wLzMyMzQzMDM2M2EzNTM0NjMzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzQzMDM0MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGVMAwDQYJKoZI
hvcNAQELBQADggEBABAjARMZjy1RXsMe7kjgDAgQFQeHXNQ/2r0+tEJOnv1zPqFL
uL/E5SQf7QCg1RGuVkdwiuTqy4oiaB6PNfpIHkvfi1h9/ArZsRpPKfutoHdqM4D1
dqTWD7xzspAo0F6av3S7YjLw61lficLyu6U2lgotfzu9cTJJBvurrKjXHySarIF4
BsGH3XJLiq/cFhIbwb7ArmUd9hdol+DjM9/3R3mJij2rCVLGHcXT4eictuOAlGID
yiR8JGrgxPABdhoLFvDvDj0qC/quqS42u0ExEqzsYIB+E1+f+angMGbAp9zl8Va3
ZAP2+PHVU0iwf6IYZRa8/ZQvwxw9JmnyS/fJcUM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 02:54:54 2024 by rpki-client on console-fra.rpki-client.org