Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa
File:                     323430303a636438303a3a2f33322d3438203d3e203539323831.roa (raw, json)
Hash identifier:          W5mKGPdSYzgUw2a09CxLXwSAuYwW6WWIOPXMYy/NjWc=
Subject key identifier:   88:61:6F:53:15:D2:69:7B:BF:98:48:F1:76:37:1F:CA:1D:CA:FE:CE
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       5AC95528ABA47979574EC6E1BB2327A51F5E070A
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa
Signing time:             Wed 13 Mar 2024 07:21:11 +0000
ROA not before:           Wed 13 Mar 2024 07:16:11 +0000
ROA not after:            Wed 12 Mar 2025 07:21:11 +0000
asID:                     59281
IP address blocks:        2400:cd80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Jun 2024 17:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c9:55:28:ab:a4:79:79:57:4e:c6:e1:bb:23:27:a5:1f:5e:07:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Mar 13 07:16:11 2024 GMT
            Not After : Mar 12 07:21:11 2025 GMT
        Subject: CN=88616F5315D2697BBF9848F176371FCA1DCAFECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:78:1c:06:c7:f8:35:3e:32:34:01:1d:1b:6b:
                    70:ec:c2:9f:d7:91:6d:37:ea:c8:03:e5:d8:5c:4f:
                    37:1d:3c:b2:7c:40:a0:d5:f3:9c:b9:44:f4:dd:81:
                    cc:14:1c:d0:e7:ef:6b:31:bb:af:46:16:1c:1c:e7:
                    3a:24:62:76:25:dc:43:b9:15:92:4c:77:0d:52:5b:
                    8e:10:7f:1d:14:50:f5:06:75:b7:63:e6:94:01:cb:
                    7c:3f:62:1b:93:e0:9e:0e:64:76:b9:46:19:7d:ed:
                    9d:d9:b6:c8:95:ba:28:d9:bc:7c:b9:e5:38:bf:8f:
                    10:df:04:1a:ba:40:1a:26:52:26:cd:21:52:2c:da:
                    61:db:80:44:f8:8e:11:00:cb:f0:2b:7b:bd:1b:94:
                    7c:55:e1:c3:ec:08:fc:c9:44:db:1b:4b:2f:a1:c4:
                    79:f1:d2:f4:f4:70:7e:bd:90:f5:0d:f3:49:64:72:
                    f7:2f:27:4b:8e:58:6f:4c:d9:df:34:df:6c:13:ac:
                    ab:57:ec:88:72:23:43:0b:04:bc:5c:50:ed:aa:be:
                    7b:69:a9:18:e4:d1:4e:d2:f1:02:80:09:41:a5:64:
                    c7:79:a0:b0:2e:3c:93:9c:5c:b3:a3:78:8b:21:c7:
                    a5:55:59:1f:0f:d4:bb:a3:39:3c:07:14:d2:94:5a:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:61:6F:53:15:D2:69:7B:BF:98:48:F1:76:37:1F:CA:1D:CA:FE:CE
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:cd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:2d:d9:8b:d5:95:a1:6b:a3:77:1f:9f:6d:a2:3b:df:d1:a9:
         ec:92:8e:4c:58:43:77:d2:bd:0d:b0:a1:4e:5e:bc:6e:19:8f:
         89:37:4f:1c:19:d2:05:90:e9:34:1d:50:77:72:58:61:77:f5:
         ba:df:d4:f8:9f:ae:7d:4f:e0:27:c2:26:d9:a3:25:df:93:77:
         24:4d:ff:cc:2a:11:60:03:1c:aa:54:4d:c1:be:4e:ec:f4:10:
         22:3c:0c:94:35:6d:de:2b:ad:6b:9f:72:e2:1e:c9:a7:50:d0:
         1d:31:5a:46:4e:38:c0:d9:67:86:f9:98:4e:ef:72:72:a9:37:
         6b:68:de:43:40:b4:4c:d4:b6:b1:5e:da:8b:09:5a:be:a3:9c:
         76:a5:58:0d:37:3c:a3:1b:b1:28:de:1c:8c:14:1d:a4:6f:e7:
         9a:fe:b9:4d:a9:c2:14:10:a2:88:e8:9a:77:4a:f5:db:73:01:
         46:af:c6:f4:59:7a:cb:b2:fb:12:98:4a:9c:1d:75:cb:52:3c:
         ff:b8:a1:ca:30:15:74:10:62:c4:1b:48:3a:4d:9b:30:50:bc:
         ce:03:78:67:3b:fd:01:4d:de:c6:4f:1d:82:df:55:97:03:c5:
         9e:13:69:b3:47:27:90:47:7b:ff:fc:69:bc:8d:71:96:f6:fe:
         98:28:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 19:35:35 2024 by rpki-client on console-fra.rpki-client.org