Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa
File:                     323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (raw, json)
Hash identifier:          xp9Yt+QgIOFGTJ0EWMSSSxYFyLJGG1Wsr7vVcpcuymo=
Subject key identifier:   FB:EA:D1:A5:C8:50:41:89:68:95:AC:39:95:24:C0:0B:42:8D:25:8C
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       4CE56BCF6A141C59071D13F7905D18DE345C47D2
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa
Signing time:             Mon 01 Jul 2024 01:02:34 +0000
ROA not before:           Mon 01 Jul 2024 00:57:34 +0000
ROA not after:            Mon 30 Jun 2025 01:02:34 +0000
asID:                     131749
IP address blocks:        2402:be80:a000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e5:6b:cf:6a:14:1c:59:07:1d:13:f7:90:5d:18:de:34:5c:47:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul  1 00:57:34 2024 GMT
            Not After : Jun 30 01:02:34 2025 GMT
        Subject: CN=FBEAD1A5C85041896895AC399524C00B428D258C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:62:a2:34:d7:a4:19:4a:cd:4d:b1:23:17:
                    3a:60:55:86:93:cc:af:af:7b:36:0f:47:59:db:3e:
                    08:23:cb:e0:5e:22:e2:f7:3d:67:ca:45:31:95:fd:
                    34:70:fe:a8:5d:5e:02:a8:a1:9e:f5:2f:df:9b:27:
                    f4:0d:f5:94:0a:39:5b:1e:0c:29:87:82:c4:b5:eb:
                    a5:c2:11:1a:eb:ee:e1:ce:a2:92:93:0c:00:93:03:
                    b5:da:c7:e5:a3:c3:c4:5c:b9:09:4d:0e:f2:42:90:
                    77:ba:47:c0:2c:0d:84:ae:68:52:a7:d7:4a:1b:22:
                    05:de:18:bc:14:99:66:12:93:7c:3a:82:c6:3e:60:
                    f8:a6:0c:49:c5:f9:8d:19:15:be:02:f5:c2:6f:c3:
                    e8:1e:19:ea:56:b9:74:01:78:2d:94:88:db:cd:94:
                    3e:c5:09:89:93:db:8f:c4:c6:9a:84:87:36:da:12:
                    7b:50:d9:02:3a:11:ea:84:3b:5a:19:4f:b1:a2:e7:
                    14:69:2d:8e:b1:4b:7c:fa:b9:57:6f:64:b9:da:66:
                    0f:00:35:1d:2b:1a:aa:60:aa:20:27:41:c7:3b:99:
                    00:36:ff:46:84:79:28:7f:5c:9f:56:1c:1b:3b:59:
                    a6:64:d8:6d:f2:4d:dc:81:7e:0e:5e:c9:36:09:a3:
                    23:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EA:D1:A5:C8:50:41:89:68:95:AC:39:95:24:C0:0B:42:8D:25:8C
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be80:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8d:66:b1:38:a8:a0:96:c3:6e:f4:89:cd:df:a1:28:1f:39:03:
         af:68:6f:1d:6f:42:77:a4:e5:e1:7e:24:34:63:26:79:8a:d0:
         cb:6b:9a:3a:2f:27:e9:5d:2d:59:93:ed:2a:d7:31:64:9a:32:
         71:64:a6:ae:eb:c8:d4:01:5e:3f:46:fa:7e:3b:f9:57:48:d5:
         2b:d0:ed:4a:3c:48:43:b5:b1:93:e3:46:6b:1e:c5:b8:77:8e:
         99:5c:0d:91:93:bc:19:27:67:84:95:cb:04:23:f7:a9:e8:e5:
         50:b4:98:f0:ff:da:90:6f:f8:39:c7:b5:cb:bc:d0:11:c6:5a:
         94:da:53:97:23:a0:c2:db:80:58:a9:3c:a8:f4:9e:f5:00:28:
         86:fb:fb:d9:13:0d:b1:86:0e:c3:68:50:01:c5:a8:e5:4f:44:
         af:a4:c9:1c:c1:be:f8:17:59:69:69:06:cc:fb:0a:e6:65:33:
         16:b5:4f:24:93:1f:29:23:d9:d7:a3:c5:5b:b3:98:54:c8:14:
         d6:73:c8:3f:36:f5:8b:00:89:2c:7e:4b:cd:a6:f1:ce:bd:4c:
         78:f9:2e:fc:95:67:75:76:ac:d8:5e:90:ca:e7:89:b9:18:4e:
         59:54:9b:f3:38:1e:b9:36:62:4e:5a:58:01:6d:5d:37:d9:70:
         a7:b4:91:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:03 2024 by rpki-client on console-fra.rpki-client.org