Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa
File:                     323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (raw, json)
Hash identifier:          K244iScN8M4O5u7S2cH3/W0yr++iJmaE7tZQk4Lm388=
Subject key identifier:   11:62:55:4E:96:DF:AF:53:A4:E2:C3:D8:F3:84:EE:37:A0:3C:A1:2F
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       6D4CC2E89D693D4E9256AE7A03C4E654CADFDD91
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa
Signing time:             Wed 21 Aug 2024 02:00:00 +0000
ROA not before:           Wed 21 Aug 2024 01:55:00 +0000
ROA not after:            Wed 20 Aug 2025 02:00:00 +0000
asID:                     131749
IP address blocks:        2402:be80:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4c:c2:e8:9d:69:3d:4e:92:56:ae:7a:03:c4:e6:54:ca:df:dd:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Aug 21 01:55:00 2024 GMT
            Not After : Aug 20 02:00:00 2025 GMT
        Subject: CN=1162554E96DFAF53A4E2C3D8F384EE37A03CA12F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:94:98:b8:ca:21:73:07:bc:bd:b3:12:04:
                    2b:4a:8f:74:e0:e5:ca:4c:f8:91:84:48:3b:69:0c:
                    7d:12:12:82:12:76:69:b5:41:bf:1c:6e:b5:8f:f7:
                    7a:7d:c7:98:4a:38:e0:2b:dc:ea:c3:8d:cd:d4:4e:
                    26:6f:fd:e8:45:9d:74:44:59:97:aa:5f:4d:4b:e0:
                    59:65:21:b4:62:7d:ed:4b:dd:71:b6:68:1f:26:38:
                    30:ab:f7:10:6f:23:63:78:b2:06:8e:8b:99:2c:52:
                    d1:11:56:6c:54:32:c6:ca:0a:b5:6b:d7:be:8b:bc:
                    24:3e:b0:96:04:dd:a9:34:a5:83:60:7a:2b:16:32:
                    f9:d2:c1:98:5b:df:83:36:9f:2c:29:ea:73:53:29:
                    b5:8a:2b:e1:d4:ed:24:ba:47:83:d7:c5:a2:96:5e:
                    89:d8:02:44:7a:63:7c:7d:c5:0c:09:a0:44:87:a2:
                    3d:06:13:72:69:09:91:56:a3:ce:9c:2e:d7:36:15:
                    ed:54:1b:94:b5:e4:30:5d:b1:17:57:9f:bf:fc:e7:
                    4c:a7:22:26:ed:1a:03:6f:2d:33:4c:82:b4:df:47:
                    c1:a0:33:d9:9a:a9:db:a2:f5:78:39:08:b6:13:43:
                    cd:37:b3:8f:f4:af:c5:42:fe:a1:33:c6:b0:66:72:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:62:55:4E:96:DF:AF:53:A4:E2:C3:D8:F3:84:EE:37:A0:3C:A1:2F
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be80:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:58:43:b5:1c:e3:ad:18:0b:36:3d:16:8e:4c:7c:c8:ed:a6:
         cf:fd:1e:12:58:42:46:72:9e:6d:3d:b5:51:51:35:1c:d8:9d:
         23:13:46:55:69:7c:3f:5a:1e:38:07:be:a7:04:f7:e0:d9:db:
         8c:7c:fc:f9:f9:25:4e:22:72:ff:83:c2:07:48:74:c8:a7:3f:
         1b:8c:c3:1a:44:f4:c8:6c:5a:cf:a8:3a:e2:70:13:f3:d3:da:
         3e:b0:ca:4f:ed:db:76:70:e0:32:0a:f1:d5:70:7c:76:7f:4a:
         c6:c2:6f:4a:76:0d:68:ec:a6:52:b3:e5:be:21:90:7e:6f:b9:
         ff:5d:42:3c:9e:3d:9f:e1:ee:db:23:9e:f6:83:68:bf:06:fa:
         98:b0:7b:76:e7:ae:ea:49:65:31:02:81:f3:40:6a:92:38:bc:
         52:dc:99:e9:bc:43:04:ec:2f:d4:07:30:17:e0:b8:e8:a7:2a:
         3b:5b:1b:5d:41:d8:aa:24:de:91:f1:e2:a1:9d:d2:4f:43:90:
         60:8e:71:35:39:7a:f3:73:fb:2b:02:91:69:ec:39:be:9e:65:
         45:77:06:7d:8e:0c:c4:54:b2:6e:d8:1f:6e:94:5e:15:2a:e7:
         9b:40:29:df:6d:36:85:03:66:e5:6c:9d:e1:30:06:0b:75:d4:
         53:f6:ae:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:03 2024 by rpki-client on console-fra.rpki-client.org