Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa
File:                     323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (raw, json)
Hash identifier:          jzRutxmwCaj+qL/12+BUDxY9FM50TTowvhnOTHxn89o=
Subject key identifier:   20:28:C7:C4:80:DC:17:C0:71:D0:84:D8:B3:C4:13:70:EE:99:94:4C
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       721A0982607FF336BA0E05C84CA288BBDA974CA5
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa
Signing time:             Mon 01 Jul 2024 01:02:35 +0000
ROA not before:           Mon 01 Jul 2024 00:57:35 +0000
ROA not after:            Mon 30 Jun 2025 01:02:35 +0000
asID:                     131749
IP address blocks:        2402:be80:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1a:09:82:60:7f:f3:36:ba:0e:05:c8:4c:a2:88:bb:da:97:4c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul  1 00:57:35 2024 GMT
            Not After : Jun 30 01:02:35 2025 GMT
        Subject: CN=2028C7C480DC17C071D084D8B3C41370EE99944C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:1d:59:dd:d7:d7:13:7d:75:67:d9:f0:1c:
                    ca:b2:e6:60:40:91:93:24:e3:6c:51:45:c3:a5:74:
                    23:0e:f1:2c:b4:03:78:fc:97:34:1c:7c:18:a8:5c:
                    bb:e6:1a:8b:15:a4:d8:aa:ff:b7:34:6e:bc:db:0c:
                    7d:1b:e1:62:6b:78:70:4a:78:92:9f:ff:b5:73:cc:
                    24:0e:fa:6a:2f:0d:d3:8c:b4:ea:70:cd:d6:6e:c3:
                    92:4e:50:c4:87:8d:ea:fd:e7:d3:74:53:b4:36:45:
                    14:7b:c9:1e:e3:2c:dd:07:6f:9e:24:65:9d:73:61:
                    b2:82:7a:45:1c:8f:47:ae:9d:e6:49:7a:10:97:4b:
                    b0:2e:22:f9:d1:6b:5a:cd:54:12:a5:c4:c0:80:93:
                    d2:b7:9c:c3:8d:a9:c0:02:5e:8d:ee:85:b5:10:1f:
                    35:32:2e:52:b2:f5:1d:31:2c:d1:a1:a9:a0:0e:73:
                    64:a8:cd:28:1d:98:e7:e9:23:92:3a:8d:95:51:83:
                    bc:04:67:5b:a1:4a:bb:8f:11:b9:94:83:71:f0:08:
                    f7:25:e2:3e:5d:f2:e3:8a:33:dd:bb:a2:a0:05:35:
                    0f:d1:c8:30:17:bf:84:51:49:3b:7a:61:d0:e3:dd:
                    b6:7f:91:4d:cd:f8:27:c1:a2:90:ce:2a:f3:59:05:
                    d5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:28:C7:C4:80:DC:17:C0:71:D0:84:D8:B3:C4:13:70:EE:99:94:4C
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be80:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         44:e5:db:d7:88:c5:0d:23:75:73:b5:5d:3e:64:7e:dd:08:e1:
         77:8c:51:1c:df:50:a6:50:7b:a7:ea:f7:c5:07:78:9c:2f:d9:
         40:0d:f8:d1:8a:d4:56:1d:50:73:23:69:e2:72:86:c2:63:07:
         a8:5c:f3:df:52:47:40:36:77:e6:f4:d9:d4:d4:09:31:79:c7:
         36:21:91:f1:29:30:b0:96:9f:a7:ed:ce:b5:62:1f:35:4c:a5:
         b7:42:39:76:38:25:4f:3d:aa:37:1a:4a:d2:82:50:8f:0e:0e:
         d8:bb:10:89:f7:31:70:66:1b:b5:78:1b:67:a9:ff:0e:85:5a:
         54:5b:9a:4a:a0:5b:de:5f:dd:3f:76:77:41:ce:ba:9f:15:3e:
         16:f6:05:bc:3a:66:82:2b:eb:cd:e4:90:88:82:34:74:35:2a:
         d5:4c:f4:2d:b6:b7:03:54:34:f6:7d:6c:3b:bb:17:30:6d:78:
         24:ae:16:7e:1f:ef:2a:2b:de:f7:ac:99:36:c2:dc:26:06:d9:
         98:3b:ac:50:a8:86:d8:67:a4:79:fe:cf:5d:67:87:7b:b7:aa:
         db:40:d3:ad:65:c9:cd:d8:dd:98:52:cd:71:55:36:75:14:0a:
         77:ca:3a:77:3f:cc:9d:a6:c0:1f:8f:03:0b:73:07:0c:7f:6c:
         b9:07:27:28
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUchoJgmB/8za6DgXITKKIu9qXTKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5
NTIyNDZGRjAeFw0yNDA3MDEwMDU3MzVaFw0yNTA2MzAwMTAyMzVaMDMxMTAvBgNV
BAMTKDIwMjhDN0M0ODBEQzE3QzA3MUQwODREOEIzQzQxMzcwRUU5OTk0NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRB1Z3dfXE311Z9nwHMqy5mBA
kZMk42xRRcOldCMO8Sy0A3j8lzQcfBioXLvmGosVpNiq/7c0brzbDH0b4WJreHBK
eJKf/7VzzCQO+movDdOMtOpwzdZuw5JOUMSHjer959N0U7Q2RRR7yR7jLN0Hb54k
ZZ1zYbKCekUcj0euneZJehCXS7AuIvnRa1rNVBKlxMCAk9K3nMONqcACXo3uhbUQ
HzUyLlKy9R0xLNGhqaAOc2SozSgdmOfpI5I6jZVRg7wEZ1uhSruPEbmUg3HwCPcl
4j5d8uOKM927oqAFNQ/RyDAXv4RRSTt6YdDj3bZ/kU3N+CfBopDOKvNZBdWbAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUICjHxIDcF8Bx0ITYs8QTcO6ZlEwwHwYDVR0j
BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw
RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy
NDZGRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04
YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhMzgzMDMwMzAz
YTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgck
Ar6AgDANBgkqhkiG9w0BAQsFAAOCAQEAROXb14jFDSN1c7VdPmR+3Qjhd4xRHN9Q
plB7p+r3xQd4nC/ZQA340YrUVh1QcyNp4nKGwmMHqFzz31JHQDZ35vTZ1NQJMXnH
NiGR8SkwsJafp+3OtWIfNUylt0I5djglTz2qNxpK0oJQjw4O2LsQifcxcGYbtXgb
Z6n/DoVaVFuaSqBb3l/dP3Z3Qc66nxU+FvYFvDpmgivrzeSQiII0dDUq1Uz0Lba3
A1Q09n1sO7sXMG14JK4Wfh/vKive96yZNsLcJgbZmDusUKiG2Gekef7PXWeHe7eq
20DTrWXJzdjdmFLNcVU2dRQKd8o6dz/MnabAH48DC3MHDH9suQcnKA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org