Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa
File:                     323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (raw, json)
Hash identifier:          Z3MEJUBKuK5Ks+vZhWLe3K7SiU2/JoM82Z1iatWTSR0=
Subject key identifier:   53:65:8B:37:DF:20:17:80:48:03:6B:7C:20:ED:5D:5C:68:48:52:64
Certificate issuer:       /CN=139934661CE07BEBBFA824F7225502B15AE8B653
Certificate serial:       013F8F58D2A5B1F91847722435BF2C2A7F600A9A
Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa
Signing time:             Tue 01 Aug 2023 10:48:18 +0000
ROA not before:           Tue 01 Aug 2023 10:43:18 +0000
ROA not after:            Tue 30 Jul 2024 10:48:18 +0000
asID:                     141596
IP address blocks:        2001:df0:54c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl
                          rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3f:8f:58:d2:a5:b1:f9:18:47:72:24:35:bf:2c:2a:7f:60:0a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653
        Validity
            Not Before: Aug  1 10:43:18 2023 GMT
            Not After : Jul 30 10:48:18 2024 GMT
        Subject: CN=53658B37DF20178048036B7C20ED5D5C68485264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:79:a8:45:2e:7a:c8:a9:9c:d0:e7:79:cd:
                    e5:fb:48:9a:16:43:a0:17:81:07:a8:e3:6f:d3:e7:
                    fa:f9:86:dd:b4:07:a3:08:f2:cf:0a:91:fd:ba:70:
                    92:23:e6:2e:e8:81:dc:62:4d:75:5d:20:ae:e3:5d:
                    90:1b:40:ee:6f:96:dd:4c:c5:cb:bb:0c:98:35:81:
                    bd:bd:43:20:6a:8a:c7:84:6d:3e:46:66:98:d0:09:
                    2c:fa:62:61:9c:bb:53:20:e5:91:57:26:69:2a:21:
                    d7:a4:dd:f5:ec:d2:03:49:62:8a:2c:f2:ac:35:91:
                    02:99:41:b5:75:71:a4:13:2c:fa:4f:72:2d:f2:7e:
                    72:6d:20:22:25:8d:db:53:16:07:22:bd:23:b2:5e:
                    7a:1e:2b:fa:4f:cd:af:51:2e:0a:43:ca:2d:5d:92:
                    69:5a:da:4b:b2:09:ba:08:81:4e:28:90:2b:5b:18:
                    10:78:f1:03:c2:d1:bb:27:71:b6:13:e7:cb:5b:03:
                    ce:39:21:8e:9a:a5:6b:9f:3f:e2:d9:fe:26:e2:f5:
                    db:d1:91:ab:73:52:d1:f2:75:be:cc:90:3f:c7:39:
                    69:04:69:05:a7:64:5e:76:d8:62:2d:71:32:bc:05:
                    31:0f:7f:03:b6:d0:9f:04:4b:78:b3:26:39:ff:6d:
                    87:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:65:8B:37:DF:20:17:80:48:03:6B:7C:20:ED:5D:5C:68:48:52:64
            X509v3 Authority Key Identifier:
                keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:54c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:4e:7c:26:90:1b:4a:22:52:d9:06:e1:0c:e3:8b:03:b6:09:
         20:e1:27:cd:92:eb:83:21:d5:b6:61:3f:79:86:37:5f:25:29:
         e3:9e:6f:07:9d:d7:5c:61:f3:45:20:9a:9e:ea:95:65:cc:63:
         d5:7e:c3:38:64:f4:99:44:8d:6d:cf:10:80:0c:a9:3e:e4:ae:
         52:bf:55:76:0e:d5:56:63:f7:96:38:e1:f1:15:f9:da:a3:00:
         d8:0c:12:52:d6:41:0a:81:ef:d2:b3:c5:6d:c3:f9:72:ef:e0:
         04:bf:4e:f9:d1:aa:ea:8f:2c:c9:59:59:1f:52:52:22:67:2f:
         2b:72:7b:82:e3:63:88:59:76:8e:43:ea:bb:89:ac:17:9c:ce:
         a3:23:1f:5b:3b:e9:33:f2:ea:8c:f2:3a:a9:f1:74:c4:bc:99:
         1e:7d:b9:1f:93:bc:2d:74:d4:8d:8c:b0:0b:c0:0e:cf:bd:8a:
         8a:d9:e0:1f:98:11:78:f2:d1:b2:11:f9:35:48:9d:52:b4:fb:
         9d:47:df:6f:73:a6:fa:fe:48:69:7d:a9:0e:35:ad:ba:c5:b1:
         90:fa:15:95:8e:1a:a1:2a:57:8b:33:f0:10:0e:a3:d5:de:02:
         9a:d7:4f:81:65:ef:fc:8d:e1:19:95:13:9f:82:36:34:a2:f0:
         e1:2a:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:28:55 2024 by rpki-client on console-ams.rpki-client.org