Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa
File:                     323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (raw, json)
Hash identifier:          j3c7OitxuKvIpFGS9jKK2X/pOGi+fYKXTMgr7Tiyp6A=
Subject key identifier:   51:1F:37:9F:32:DF:13:3D:70:31:BE:7F:C7:CB:D3:0F:4C:FB:62:4F
Certificate issuer:       /CN=5509BA3B36B8E5C809C09949749272FEF605F530
Certificate serial:       66DBE48BDDC2D4B8CC4F38ABD1ACD474E811938A
Authority key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa
Signing time:             Thu 18 Jan 2024 04:01:01 +0000
ROA not before:           Thu 18 Jan 2024 03:56:01 +0000
ROA not after:            Thu 16 Jan 2025 04:01:01 +0000
asID:                     138097
IP address blocks:        2001:df6:ef00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl
                          rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:db:e4:8b:dd:c2:d4:b8:cc:4f:38:ab:d1:ac:d4:74:e8:11:93:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5509BA3B36B8E5C809C09949749272FEF605F530
        Validity
            Not Before: Jan 18 03:56:01 2024 GMT
            Not After : Jan 16 04:01:01 2025 GMT
        Subject: CN=511F379F32DF133D7031BE7FC7CBD30F4CFB624F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:b5:db:2e:8e:2b:52:68:a0:2f:29:2a:0d:
                    2c:6a:df:ca:18:fe:37:82:c4:2d:80:ae:e1:96:ff:
                    fd:a7:19:74:d2:db:05:83:5b:67:a3:b0:92:ba:75:
                    08:d6:60:69:43:66:99:91:28:b4:65:38:36:97:21:
                    09:ce:66:14:f6:f9:c4:0c:29:ac:ae:dc:8b:85:78:
                    8e:56:6d:4e:6f:1a:c2:5a:7d:81:be:72:62:cd:96:
                    31:b3:06:9e:c6:ac:b0:8d:46:ec:f1:04:64:36:ec:
                    41:38:7b:82:2c:59:af:7d:af:e0:aa:3f:40:b2:a4:
                    b2:3a:3e:6c:a7:25:3c:1a:cd:70:6b:84:17:e5:86:
                    d4:2b:b6:ac:39:99:58:7a:3b:95:81:0b:37:ff:58:
                    bc:4a:7b:dc:5d:30:1c:36:f8:e4:90:b0:77:49:b3:
                    4f:1b:93:a6:a8:3d:62:60:9b:d8:0d:86:4b:8b:0d:
                    64:d8:a4:12:d6:7f:ca:d7:54:5d:23:02:95:65:eb:
                    82:1d:a2:7d:dc:29:8a:ec:4c:b4:08:61:c9:63:82:
                    ca:99:85:8d:49:49:6d:3b:83:ad:cc:41:91:73:bc:
                    5f:76:90:8f:be:6c:90:7c:18:cf:31:14:76:1f:9f:
                    f7:95:4c:40:c4:a6:92:07:4f:88:0d:d8:29:4b:5a:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:37:9F:32:DF:13:3D:70:31:BE:7F:C7:CB:D3:0F:4C:FB:62:4F
            X509v3 Authority Key Identifier:
                keyid:55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:ef00::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:67:6d:a6:2a:b3:08:ed:33:f9:bb:40:4e:22:c8:4e:6b:7c:
         cc:d5:c9:2b:a4:ce:4d:52:ec:40:81:43:25:5a:7b:ca:6f:72:
         38:25:d3:12:b1:23:fb:c4:69:93:6c:d9:8a:38:d8:40:c9:af:
         36:61:ce:18:9b:87:91:d6:05:21:a9:7d:80:d2:0b:5a:83:6e:
         cd:59:90:83:77:55:c1:c0:5d:1d:06:ac:11:21:90:e0:b6:18:
         9d:c9:d2:9a:2b:bc:a0:31:9a:c4:72:4a:b7:8c:e7:49:3c:0b:
         ff:3c:18:fc:8b:0f:c7:f2:ef:26:c2:12:3d:46:f4:05:96:af:
         f3:47:fc:b2:4e:af:92:4c:c7:7a:af:23:b7:34:fc:18:c1:ed:
         8f:b3:5b:25:f4:13:72:78:ae:65:91:94:db:57:be:93:b2:1a:
         ea:4b:b8:38:49:d2:79:bc:9d:df:37:44:6f:10:71:4b:a4:de:
         57:59:e4:07:2a:a1:ed:59:de:53:f0:0d:45:af:15:5f:ba:7b:
         d0:76:07:63:ca:68:98:43:46:fa:f7:5c:e2:cc:fd:e0:15:67:
         bb:22:a5:8b:7c:2e:48:ba:14:f8:f3:11:e9:b3:9d:f2:7f:bf:
         78:5b:fc:9a:65:fa:07:a7:a1:02:da:23:a9:06:db:81:16:3c:
         c1:03:86:35
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZtvki93C1LjMTzir0azUdOgRk4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5MjcyRkVG
NjA1RjUzMDAeFw0yNDAxMTgwMzU2MDFaFw0yNTAxMTYwNDAxMDFaMDMxMTAvBgNV
BAMTKDUxMUYzNzlGMzJERjEzM0Q3MDMxQkU3RkM3Q0JEMzBGNENGQjYyNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5LXbLo4rUmigLykqDSxq38oY
/jeCxC2AruGW//2nGXTS2wWDW2ejsJK6dQjWYGlDZpmRKLRlODaXIQnOZhT2+cQM
Kayu3IuFeI5WbU5vGsJafYG+cmLNljGzBp7GrLCNRuzxBGQ27EE4e4IsWa99r+Cq
P0CypLI6PmynJTwazXBrhBflhtQrtqw5mVh6O5WBCzf/WLxKe9xdMBw2+OSQsHdJ
s08bk6aoPWJgm9gNhkuLDWTYpBLWf8rXVF0jApVl64Idon3cKYrsTLQIYcljgsqZ
hY1JSW07g63MQZFzvF92kI++bJB8GM8xFHYfn/eVTEDEppIHT4gN2ClLWtfhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUUR83nzLfEz1wMb5/x8vTD0z7Yk8wHwYDVR0j
BBgwFoAUVQm6Oza45cgJwJlJdJJy/vYF9TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MGEzOTJkYy0yZTRlLTQ3NzAtOGY2OC1iYzYxZjgwYjc0YTcvMC81NTA5QkEzQjM2
QjhFNUM4MDlDMDk5NDk3NDkyNzJGRUY2MDVGNTMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5MjcyRkVGNjA1
RjUzMC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwYTM5MmRjLTJlNGUtNDc3MC04
ZjY4LWJjNjFmODBiNzRhNy8wLzMyMzAzMDMxM2E2NDY2MzYzYTY1NjYzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM4MzAzOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
9u8AMA0GCSqGSIb3DQEBCwUAA4IBAQBRZ22mKrMI7TP5u0BOIshOa3zM1ckrpM5N
UuxAgUMlWnvKb3I4JdMSsSP7xGmTbNmKONhAya82Yc4Ym4eR1gUhqX2A0gtag27N
WZCDd1XBwF0dBqwRIZDgthidydKaK7ygMZrEckq3jOdJPAv/PBj8iw/H8u8mwhI9
RvQFlq/zR/yyTq+STMd6ryO3NPwYwe2Ps1sl9BNyeK5lkZTbV76TshrqS7g4SdJ5
vJ3fN0RvEHFLpN5XWeQHKqHtWd5T8A1FrxVfunvQdgdjymiYQ0b691zizP3gFWe7
IqWLfC5IuhT48xHps53yf794W/yaZfoHp6EC2iOpBtuBFjzBA4Y1
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org