Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa
File:                     323430333a666438303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier:          53eT4pOJGsMf72Ko9zeBz69h64D8zcRMKxfGNvsnZGg=
Subject key identifier:   70:09:56:C3:F7:63:4E:1C:FF:10:3F:B3:14:C0:DB:8A:EF:F5:DF:4A
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       7B560560D5E2F64A22EC677F450A49C15F4E73A7
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa
Signing time:             Fri 05 Jan 2024 10:55:37 +0000
ROA not before:           Fri 05 Jan 2024 10:50:37 +0000
ROA not after:            Fri 03 Jan 2025 10:55:37 +0000
asID:                     58369
IP address blocks:        2403:fd80::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:56:05:60:d5:e2:f6:4a:22:ec:67:7f:45:0a:49:c1:5f:4e:73:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jan  5 10:50:37 2024 GMT
            Not After : Jan  3 10:55:37 2025 GMT
        Subject: CN=700956C3F7634E1CFF103FB314C0DB8AEFF5DF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2f:d2:b6:31:bc:56:97:1e:aa:71:3e:75:8e:
                    ae:ab:ec:84:fe:01:91:a5:34:30:03:0d:bb:30:0c:
                    78:22:7d:9b:18:0d:98:04:17:a8:3c:29:07:31:e9:
                    66:d2:61:4f:cc:b9:c2:f2:80:9d:fc:9a:6b:c5:c6:
                    9b:55:b0:c2:28:72:96:7b:75:cf:e6:18:39:07:88:
                    f2:5c:17:18:04:8c:a9:d6:d3:af:bd:b8:3e:56:cf:
                    75:8a:12:61:db:75:ea:09:03:19:d0:59:b7:eb:5a:
                    4a:cb:eb:76:eb:21:b2:8f:0a:7c:e2:70:64:df:53:
                    f7:9b:fe:81:61:50:02:00:70:e5:28:da:45:e1:4d:
                    a9:e4:4c:74:52:9f:d3:9e:82:b4:84:35:e8:07:27:
                    a6:13:81:0d:bc:12:b3:0b:fe:de:da:75:6e:bd:01:
                    5a:91:c0:ec:fd:cf:a0:81:4e:e8:a3:78:d5:8e:fc:
                    f7:6d:d4:a8:9b:e1:7b:1d:03:26:c3:60:af:39:45:
                    10:28:1e:30:9e:a5:9d:37:6a:f3:3b:16:ad:ac:d9:
                    2c:27:cf:65:08:89:84:c5:6d:a1:c8:d7:c5:9f:98:
                    19:36:ff:64:81:83:68:e5:1d:e2:2f:e5:16:e6:c4:
                    c5:bb:fb:a7:7b:ba:ff:b3:bd:1e:95:c0:67:b8:ed:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:09:56:C3:F7:63:4E:1C:FF:10:3F:B3:14:C0:DB:8A:EF:F5:DF:4A
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fd80::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:79:8d:48:d8:e0:f0:c0:6d:07:43:d0:23:39:81:70:dd:
         1e:f1:ba:fb:98:7a:15:17:39:25:00:c1:d8:5c:94:76:ca:04:
         d9:c0:0f:2a:ad:a5:d4:28:c7:4e:b9:04:e6:ca:27:bc:ab:f2:
         2d:8d:09:bc:78:fa:47:0e:36:ef:df:ba:4f:60:70:38:1c:d8:
         89:33:64:f7:08:f6:8a:56:a2:64:da:ed:89:65:6a:8d:a3:33:
         37:55:c0:85:01:ed:07:86:92:89:35:7f:d0:db:ef:75:35:f8:
         0d:05:6c:91:28:f7:5d:f2:ef:19:af:68:b2:e6:cd:fe:7a:f2:
         28:7b:dd:71:6b:cb:6f:2e:5c:b6:39:b3:66:b1:c3:b0:00:8b:
         e3:c7:9e:21:60:13:c2:13:25:75:2f:50:3c:eb:5b:5c:a0:15:
         a2:7a:16:a4:08:d6:23:7f:18:f3:69:ac:47:c1:c1:fd:18:93:
         1c:42:52:3c:5f:c1:f7:35:94:c1:a6:77:5c:36:c4:01:b4:6a:
         eb:18:13:e0:a5:72:ea:42:8f:90:71:cb:0f:fe:c3:fd:ef:33:
         17:f4:6c:83:d0:a7:a6:67:01:3c:b3:51:04:8d:89:d8:07:ff:
         4f:57:69:a5:d0:1c:b0:1d:78:ed:22:09:29:db:bc:ac:78:e2:
         9b:ae:c4:6e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUe1YFYNXi9koi7Gd/RQpJwV9Oc6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNDAxMDUxMDUwMzdaFw0yNTAxMDMxMDU1MzdaMDMxMTAvBgNV
BAMTKDcwMDk1NkMzRjc2MzRFMUNGRjEwM0ZCMzE0QzBEQjhBRUZGNURGNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiL9K2MbxWlx6qcT51jq6r7IT+
AZGlNDADDbswDHgifZsYDZgEF6g8KQcx6WbSYU/MucLygJ38mmvFxptVsMIocpZ7
dc/mGDkHiPJcFxgEjKnW06+9uD5Wz3WKEmHbdeoJAxnQWbfrWkrL63brIbKPCnzi
cGTfU/eb/oFhUAIAcOUo2kXhTankTHRSn9OegrSENegHJ6YTgQ28ErML/t7adW69
AVqRwOz9z6CBTuijeNWO/Pdt1Kib4XsdAybDYK85RRAoHjCepZ03avM7Fq2s2Swn
z2UIiYTFbaHI18WfmBk2/2SBg2jlHeIv5RbmxMW7+6d7uv+zvR6VwGe47d0ZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUcAlWw/djThz/ED+zFMDbiu/130owHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMyMzQzMDMzM2E2NjY0MzgzMDNhM2EyZjMzMzYy
ZDMzMzYyMDNkM2UyMDM1MzgzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkA/2AADANBgkqhkiG
9w0BAQsFAAOCAQEAIF95jUjY4PDAbQdD0CM5gXDdHvG6+5h6FRc5JQDB2FyUdsoE
2cAPKq2l1CjHTrkE5sonvKvyLY0JvHj6Rw4279+6T2BwOBzYiTNk9wj2ilaiZNrt
iWVqjaMzN1XAhQHtB4aSiTV/0NvvdTX4DQVskSj3XfLvGa9osubN/nryKHvdcWvL
by5ctjmzZrHDsACL48eeIWATwhMldS9QPOtbXKAVonoWpAjWI38Y82msR8HB/RiT
HEJSPF/B9zWUwaZ3XDbEAbRq6xgT4KVy6kKPkHHLD/7D/e8zF/Rsg9CnpmcBPLNR
BI2J2Af/T1dppdAcsB147SIJKdu8rHjim67Ebg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org