Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/323030313a6466313a373830303a3a2f34382d3438203d3e203538343837.roa
File:                     323030313a6466313a373830303a3a2f34382d3438203d3e203538343837.roa (raw, json)
Hash identifier:          mmUsPi/Barz3tnTi3vShx3aNt+unavxybSee9azLvUg=
Subject key identifier:   22:4D:68:AD:AC:76:F5:71:71:A3:EA:F9:F0:4E:E1:B3:1E:50:40:C5
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       416D182AFA950FAFDA5039B7C1C83CCC28342F4D
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/323030313a6466313a373830303a3a2f34382d3438203d3e203538343837.roa
Signing time:             Wed 20 Dec 2023 09:00:02 +0000
ROA not before:           Wed 20 Dec 2023 08:55:02 +0000
ROA not after:            Wed 18 Dec 2024 09:00:02 +0000
asID:                     58487
IP address blocks:        2001:df1:7800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6d:18:2a:fa:95:0f:af:da:50:39:b7:c1:c8:3c:cc:28:34:2f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Dec 20 08:55:02 2023 GMT
            Not After : Dec 18 09:00:02 2024 GMT
        Subject: CN=224D68ADAC76F57171A3EAF9F04EE1B31E5040C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:4a:d4:0f:6d:52:31:f7:d9:4b:19:00:9d:
                    72:5c:32:84:09:9a:69:51:f0:de:55:14:5a:84:7a:
                    4a:4f:16:45:25:2f:17:10:0c:ee:9e:3b:dd:ac:b4:
                    2a:7d:35:76:dd:7d:ec:e8:e7:28:0e:7a:1e:97:fc:
                    4c:99:02:f0:20:5e:0f:80:68:5c:f4:0d:f2:ed:5e:
                    ff:93:23:8e:f9:6e:fc:da:ba:b4:25:da:f5:cb:f2:
                    92:d1:f1:c3:f2:9e:a5:67:c0:4d:c7:f3:05:8f:b0:
                    8d:16:ae:bc:a7:df:d3:74:34:0b:a3:e1:92:4b:6d:
                    33:0f:6f:b1:86:20:d6:0a:c3:9d:08:02:3b:14:bc:
                    32:ae:0a:2d:fb:9b:07:60:94:42:fe:e9:f1:8f:76:
                    1d:05:c6:8d:94:cf:4a:fc:c6:d3:b6:42:13:08:a7:
                    56:df:c9:d1:aa:54:6f:ad:a3:65:56:e0:b5:c5:a0:
                    19:e8:37:a9:1c:3e:79:09:2d:45:3b:f0:6c:8d:09:
                    98:80:a6:1b:c4:ee:f3:d5:9a:f5:9e:1c:56:a4:df:
                    73:23:ee:69:8d:a1:1e:2c:ba:ea:ed:51:57:81:c1:
                    c9:e8:1a:37:9b:d3:ec:2c:a7:23:4e:4b:1e:ec:00:
                    e5:c7:1b:36:72:da:a3:14:5c:b4:8b:7f:3d:42:8a:
                    fc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4D:68:AD:AC:76:F5:71:71:A3:EA:F9:F0:4E:E1:B3:1E:50:40:C5
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/323030313a6466313a373830303a3a2f34382d3438203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:d9:a6:5f:0b:ab:e9:bb:30:c2:b1:5d:b5:6f:b3:ae:f3:f7:
         63:02:3e:ee:7f:7f:d9:48:c0:58:2d:a3:de:2f:2d:28:d4:40:
         29:2d:c4:a8:23:f8:e2:6e:c2:9a:6a:78:76:e6:cd:3f:b0:32:
         ed:f6:2e:52:6c:12:10:c0:28:4d:99:6f:ff:9d:40:12:97:b6:
         30:9a:78:b1:d1:f1:00:a2:72:21:8d:34:18:95:fd:1c:f8:8d:
         f8:e5:45:37:e7:36:42:b8:28:19:70:6e:63:be:eb:60:30:ea:
         51:7d:a5:80:e3:65:ca:a6:6f:a4:c7:ae:b9:98:76:d1:11:65:
         20:c5:e2:22:ad:56:77:84:54:38:22:e3:30:84:a3:c0:bd:7c:
         51:e0:95:36:e9:f9:7d:4f:ec:d0:f0:32:8d:f4:b3:0a:a4:60:
         07:da:05:7c:7a:b5:b3:69:ab:73:c7:e5:a0:81:ad:12:d6:dc:
         b8:87:92:9f:82:3b:1b:d2:c6:33:84:81:c2:bd:c2:d2:fb:3e:
         7b:ac:ab:29:67:f1:b1:da:95:3b:d3:ad:a2:43:f7:1a:63:96:
         e6:f8:66:19:98:b7:61:c0:7a:12:0c:48:79:0b:4a:97:39:ce:
         1e:de:4d:06:d8:2b:b7:ad:13:b2:11:37:03:fe:a6:d4:8e:a2:
         64:98:96:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:28 2024 by rpki-client on console-ams.rpki-client.org