Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa
File:                     323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (raw, json)
Hash identifier:          gnvkAYb2umU0griV4VC5cvG1nJTwGT+tn0HlX2+7sXk=
Subject key identifier:   9D:BC:E2:64:DE:C3:67:B8:5B:99:4B:A1:66:10:CC:F1:FA:CA:F6:CC
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       15163BCA17C8D2E2560C3D07F30B2B1E676CAB46
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa
Signing time:             Fri 14 Jun 2024 11:00:00 +0000
ROA not before:           Fri 14 Jun 2024 10:55:00 +0000
ROA not after:            Fri 13 Jun 2025 11:00:00 +0000
asID:                     149953
IP address blocks:        2001:df1:1c40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:16:3b:ca:17:c8:d2:e2:56:0c:3d:07:f3:0b:2b:1e:67:6c:ab:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Jun 14 10:55:00 2024 GMT
            Not After : Jun 13 11:00:00 2025 GMT
        Subject: CN=9DBCE264DEC367B85B994BA16610CCF1FACAF6CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:a7:ba:72:d5:17:65:e9:30:e2:b2:ed:3d:
                    a1:68:dd:4d:f8:1c:b1:75:17:ed:80:94:f0:fd:3c:
                    2d:05:65:b4:e5:ea:fb:3d:c2:75:c7:62:e6:0d:94:
                    9d:45:27:4a:4d:7c:d9:58:51:a1:ce:6b:ed:69:e1:
                    ec:44:10:1f:d7:40:9e:4a:12:bd:4e:2e:b0:f5:d3:
                    26:31:29:6a:93:0e:a9:7f:fc:40:cd:94:7f:90:0f:
                    6b:22:1f:7a:e8:d5:7d:20:72:f5:bb:42:47:d1:a6:
                    55:f1:5c:57:3c:ed:7e:3c:4c:41:c1:84:95:41:6c:
                    e8:57:25:bd:f6:28:74:f0:6d:34:a0:e8:f5:78:05:
                    e4:ef:e0:72:cd:93:04:d1:fd:28:45:5a:dc:7e:01:
                    7f:70:0b:d3:d9:ad:8d:6f:3c:97:f6:f2:4d:d6:49:
                    96:3a:cb:2c:2f:1d:e9:46:1d:ba:85:4f:04:d5:4f:
                    b9:1a:ad:50:7d:25:02:36:75:e6:0a:cd:3f:66:bc:
                    67:fb:47:ac:93:29:37:4a:27:99:2c:77:bb:4f:b5:
                    23:b2:04:8d:82:c0:73:45:56:0e:56:af:0f:04:10:
                    cd:a8:3b:c1:9d:ad:96:70:5a:c3:f6:18:b8:43:a6:
                    12:9c:f2:88:74:24:58:23:5d:c8:53:ec:ba:0c:f7:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BC:E2:64:DE:C3:67:B8:5B:99:4B:A1:66:10:CC:F1:FA:CA:F6:CC
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:1c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:51:d3:77:b4:7c:56:05:cd:14:33:63:9c:74:45:62:7c:05:
         57:cb:14:8b:d0:8b:09:4b:e1:c8:a9:77:3a:9a:c8:ec:35:f6:
         d1:2d:b7:23:96:18:00:94:d2:d4:75:86:81:06:76:89:af:3c:
         44:f3:a7:a5:d4:e4:7e:27:d1:d9:b1:8d:28:39:87:ee:5f:9e:
         5c:d2:06:08:9a:e1:57:81:39:73:9e:a8:be:f7:19:48:e3:f6:
         68:01:78:93:ae:d1:03:8a:86:38:7d:d8:47:85:43:f5:4e:a0:
         4c:8d:b7:ca:42:d5:57:a9:32:a8:af:8b:2d:f1:9a:32:d8:24:
         23:a4:de:5d:80:b6:bf:72:c9:ed:c2:50:1e:3d:69:b2:cf:0f:
         ee:78:47:6c:21:ef:89:d3:d9:75:08:26:f1:50:eb:77:63:b5:
         37:94:fd:61:9b:4e:3f:41:d9:58:72:cd:40:85:9a:a6:0d:8b:
         75:97:b2:f0:40:aa:06:62:6c:bd:af:f0:f8:10:70:ce:52:76:
         a2:bf:26:96:ca:80:5a:4e:f4:cf:33:a4:76:8b:58:cb:d0:54:
         38:7e:73:8b:69:b8:f0:c4:ea:98:38:aa:96:16:dc:d6:c5:c3:
         e7:02:41:14:95:ae:d4:15:7b:a4:65:c5:21:db:10:02:c6:2b:
         ab:2b:00:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org