Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa
File:                     323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (raw, json)
Hash identifier:          XqWIDcod31e38VgeahW9dRMzM4JKlsw/6vSF5Hd9Xv4=
Subject key identifier:   86:F4:34:B0:39:C0:FD:52:B4:2D:20:62:4D:32:7D:1E:5C:51:CF:CB
Certificate issuer:       /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F
Certificate serial:       2313525BF582298CA55FE705C80128A23AFA2151
Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa
Signing time:             Thu 15 Aug 2024 04:01:32 +0000
ROA not before:           Thu 15 Aug 2024 03:56:32 +0000
ROA not after:            Thu 14 Aug 2025 04:01:32 +0000
asID:                     58404
IP address blocks:        2001:df2:e300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl
                          rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 14:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:13:52:5b:f5:82:29:8c:a5:5f:e7:05:c8:01:28:a2:3a:fa:21:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F
        Validity
            Not Before: Aug 15 03:56:32 2024 GMT
            Not After : Aug 14 04:01:32 2025 GMT
        Subject: CN=86F434B039C0FD52B42D20624D327D1E5C51CFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:c5:58:f2:7e:75:5d:37:b8:e8:96:23:65:
                    2b:07:36:43:8c:71:a7:d5:f9:f2:ea:88:09:ac:8d:
                    e0:0f:61:ea:f4:42:d1:ad:be:d6:e2:b4:59:f3:f2:
                    50:57:9f:d7:ea:8b:b6:93:db:e1:cc:5c:b5:0b:3e:
                    10:ae:6e:86:48:81:a9:cd:a4:19:84:21:52:12:71:
                    3e:67:34:42:cf:89:80:c0:48:b3:43:51:ce:31:07:
                    d7:7a:e3:26:3e:69:56:e3:36:90:9b:5b:1c:61:89:
                    e6:d2:bc:f5:6d:87:16:94:d3:61:8a:7d:a8:e9:06:
                    34:1b:67:31:b2:08:25:20:43:63:8d:56:30:3f:4a:
                    97:38:fb:44:1b:f0:a8:46:ac:70:c2:c4:26:97:71:
                    5e:ab:af:e3:d6:8c:7d:64:4b:07:25:6c:4d:d7:db:
                    8a:27:ac:36:5a:5c:f0:d7:af:1a:f5:44:3b:87:b2:
                    d6:b1:7d:73:a3:d0:cb:71:6c:74:01:d7:02:a0:b8:
                    99:ab:7e:f0:4b:ae:18:cb:c9:fa:d2:11:0f:06:dc:
                    82:e5:ec:0a:4f:be:b1:c5:bf:70:42:9c:9e:10:d7:
                    95:1b:75:ea:84:55:39:32:ca:2b:4e:75:b4:5d:a0:
                    b8:61:74:92:ac:d5:c2:db:83:10:a6:3a:13:ab:2e:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F4:34:B0:39:C0:FD:52:B4:2D:20:62:4D:32:7D:1E:5C:51:CF:CB
            X509v3 Authority Key Identifier:
                keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:e300::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:60:56:50:15:dd:83:9a:ea:0a:2e:8c:2b:48:81:bd:03:ae:
         f1:39:50:3b:71:d2:34:68:09:4f:08:58:48:f4:e1:b4:fc:dc:
         b6:80:e3:73:ed:94:1f:e2:a0:0c:07:ef:00:85:2c:28:02:50:
         5b:86:9f:97:ad:f1:23:d5:3f:ff:f4:73:b2:a4:c0:43:c3:93:
         9a:df:68:19:32:9e:ae:78:25:70:fd:71:04:10:73:4d:d4:2d:
         3e:37:31:b9:19:c2:0c:65:1b:91:72:e5:ef:28:d2:21:bf:cc:
         54:25:a5:4c:11:cb:dd:d0:3a:14:4f:d4:eb:6e:33:5a:2b:32:
         bb:02:23:8d:24:06:aa:61:a1:6a:0b:87:c3:6c:61:79:e1:56:
         c7:76:cb:1b:67:a1:36:8a:56:0a:d9:8c:34:c1:5f:23:a7:d6:
         4e:04:eb:53:b6:d5:55:5f:eb:e6:7d:43:5e:f2:11:7b:6a:3c:
         c9:b1:db:73:6d:89:0f:de:01:2c:e0:37:a7:ee:34:7b:78:99:
         f2:bc:e7:10:08:4e:f7:2e:18:b6:60:a5:69:db:ac:e8:96:c7:
         e1:21:86:6b:bb:60:55:8c:35:0d:84:dd:ce:dc:45:c3:dc:fc:
         bf:4a:18:c0:87:3d:9a:3e:9e:b7:e0:41:e0:9e:bb:e7:40:2b:
         13:aa:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org