Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/323430343a336530303a3a2f33322d3438203d3e203338373538.roa
File:                     323430343a336530303a3a2f33322d3438203d3e203338373538.roa (raw, json)
Hash identifier:          p56aDnFiB/sHhi4D9oPCP6BupyFFvyZDIPu2wfqqfRI=
Subject key identifier:   CC:0A:8E:EA:C4:41:1C:55:5C:C4:61:E2:69:A3:05:5B:CA:A2:79:18
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       7E17C2A499C8378663F5D153E136C4142D51DB30
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/323430343a336530303a3a2f33322d3438203d3e203338373538.roa
Signing time:             Mon 01 Jul 2024 00:02:13 +0000
ROA not before:           Sun 30 Jun 2024 23:57:13 +0000
ROA not after:            Mon 30 Jun 2025 00:02:13 +0000
asID:                     38758
IP address blocks:        2404:3e00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 04:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:17:c2:a4:99:c8:37:86:63:f5:d1:53:e1:36:c4:14:2d:51:db:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Jun 30 23:57:13 2024 GMT
            Not After : Jun 30 00:02:13 2025 GMT
        Subject: CN=CC0A8EEAC4411C555CC461E269A3055BCAA27918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:28:d4:c1:5a:00:0d:bc:16:bc:b7:a2:b5:
                    23:70:69:03:10:77:65:08:cd:84:50:96:1e:03:5d:
                    eb:32:82:65:05:a6:81:76:3c:01:f6:64:ad:7c:ba:
                    cc:8f:92:8f:7e:15:0e:b1:f1:58:0f:18:c7:97:a9:
                    2e:05:83:9e:50:c5:86:5d:6c:9e:57:f3:6e:41:47:
                    13:f1:4d:78:9e:34:d4:2d:a1:26:09:3f:97:11:e8:
                    fd:f9:31:89:33:31:95:99:31:c4:b3:7a:aa:d2:93:
                    7d:3b:e6:34:54:06:29:c7:d8:93:dd:96:5d:9d:92:
                    66:fd:cd:da:46:27:de:00:89:34:74:ce:fd:ce:33:
                    74:3b:d2:bd:5f:36:39:cc:19:54:cc:79:25:fd:54:
                    b1:58:18:70:0f:ac:e5:b3:1a:cf:5d:2a:77:88:fd:
                    e8:23:90:af:c9:8d:96:41:86:76:58:79:70:ef:96:
                    f5:c4:5f:9e:b8:b7:e5:df:a2:46:0c:f7:1e:bc:6b:
                    36:45:8a:95:f3:b6:4b:81:6b:7d:d8:0c:65:8e:80:
                    74:61:73:fa:44:0b:62:6d:ec:8b:c6:b8:25:b6:4b:
                    01:42:cf:8f:85:a8:38:a0:f2:bf:f8:f0:c7:d0:8f:
                    35:17:29:a2:b1:e4:77:a8:f8:98:58:c3:61:32:e2:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0A:8E:EA:C4:41:1C:55:5C:C4:61:E2:69:A3:05:5B:CA:A2:79:18
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/323430343a336530303a3a2f33322d3438203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:3e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:1f:e1:8e:86:b9:31:e7:eb:5b:81:3a:81:78:27:60:93:b6:
         96:0e:35:54:3b:24:fd:dd:af:83:37:3d:23:d6:97:db:5e:e8:
         11:b7:70:74:19:b8:f1:68:5f:c5:4e:ba:1a:ff:0e:bb:6c:88:
         a2:dd:82:06:2d:bb:03:b6:dc:dc:10:00:43:c9:ff:56:f4:8b:
         f7:2c:29:b5:27:2b:f1:5b:85:9c:32:cb:27:52:0a:08:c2:48:
         ab:b6:c5:56:05:96:37:35:36:2b:cd:fb:a6:2c:24:5b:6b:12:
         ae:77:70:0f:25:be:ab:08:27:f9:b2:1b:34:6c:2f:f2:6a:d7:
         4d:e6:c7:a0:ba:bf:7f:a8:04:c4:a7:fb:a5:8f:b2:08:7c:a5:
         fd:27:13:e1:6b:47:6e:2d:96:e8:4b:cf:73:f4:b4:e0:fe:86:
         29:02:2d:be:89:ae:ab:1a:11:a0:9f:3e:75:8a:04:df:b7:f1:
         2f:68:fa:a4:af:2e:ea:49:07:65:1f:2d:92:c3:ee:0d:5e:40:
         d8:57:50:52:e5:d9:c4:75:92:18:f1:b5:a6:89:f9:ef:ee:44:
         42:0d:55:2a:12:d0:1a:c2:b7:3f:26:9a:08:bf:a8:ab:c0:4c:
         d8:69:58:6c:dc:90:f5:b9:88:9f:b5:28:a6:ab:f5:22:c3:b9:
         5d:b1:2d:b9
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUfhfCpJnIN4Zj9dFT4TbEFC1R2zAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1
NTQ5ODZGNDAeFw0yNDA2MzAyMzU3MTNaFw0yNTA2MzAwMDAyMTNaMDMxMTAvBgNV
BAMTKENDMEE4RUVBQzQ0MTFDNTU1Q0M0NjFFMjY5QTMwNTVCQ0FBMjc5MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2UyjUwVoADbwWvLeitSNwaQMQ
d2UIzYRQlh4DXesygmUFpoF2PAH2ZK18usyPko9+FQ6x8VgPGMeXqS4Fg55QxYZd
bJ5X825BRxPxTXieNNQtoSYJP5cR6P35MYkzMZWZMcSzeqrSk3075jRUBinH2JPd
ll2dkmb9zdpGJ94AiTR0zv3OM3Q70r1fNjnMGVTMeSX9VLFYGHAPrOWzGs9dKneI
/egjkK/JjZZBhnZYeXDvlvXEX564t+XfokYM9x68azZFipXztkuBa33YDGWOgHRh
c/pEC2Jt7IvGuCW2SwFCz4+FqDig8r/48MfQjzUXKaKx5Heo+JhYw2Ey4gzLAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUzAqO6sRBHFVcxGHiaaMFW8qieRgwHwYDVR0j
BBgwFoAUn+slFVzxr/kK4R2gKY8WTVVJhvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YjRlMTk1ZS0xMmRlLTRjM2MtOTNlNS01MjJlZTU0MDE4ZDYvMC85RkVCMjUxNTVD
RjFBRkY5MEFFMTFEQTAyOThGMTY0RDU1NDk4NkY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1NTQ5
ODZGNC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNGUxOTVlLTEyZGUtNGMzYy05
M2U1LTUyMmVlNTQwMThkNi8wLzMyMzQzMDM0M2EzMzY1MzAzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMzMzgzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBD4AMA0GCSqGSIb3
DQEBCwUAA4IBAQCTH+GOhrkx5+tbgTqBeCdgk7aWDjVUOyT93a+DNz0j1pfbXugR
t3B0GbjxaF/FTroa/w67bIii3YIGLbsDttzcEABDyf9W9Iv3LCm1JyvxW4WcMssn
UgoIwkirtsVWBZY3NTYrzfumLCRbaxKud3APJb6rCCf5shs0bC/yatdN5segur9/
qATEp/ulj7IIfKX9JxPha0duLZboS89z9LTg/oYpAi2+ia6rGhGgnz51igTft/Ev
aPqkry7qSQdlHy2Sw+4NXkDYV1BS5dnEdZIY8bWmifnv7kRCDVUqEtAawrc/JpoI
v6irwEzYaVhs3JD1uYiftSimq/Uiw7ldsS25
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:05 2024 by rpki-client on console-ams.rpki-client.org