Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/323430343a666230303a3a2f33322d3332203d3e203538343734.roa
File:                     323430343a666230303a3a2f33322d3332203d3e203538343734.roa (raw, json)
Hash identifier:          grgdG8OoUNxpOhcfTbbut/WvBOQGDavrGHNbzyqo7TA=
Subject key identifier:   14:F6:47:EB:9D:90:D9:13:28:81:FD:E3:34:EE:94:48:73:27:7C:37
Certificate issuer:       /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Certificate serial:       1516E78A564BF91ECE12A6C3A1A784AC987E8AD9
Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/323430343a666230303a3a2f33322d3332203d3e203538343734.roa
Signing time:             Sun 25 Aug 2024 05:00:02 +0000
ROA not before:           Sun 25 Aug 2024 04:55:02 +0000
ROA not after:            Sun 24 Aug 2025 05:00:02 +0000
asID:                     58474
IP address blocks:        2404:fb00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl
                          rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:16:e7:8a:56:4b:f9:1e:ce:12:a6:c3:a1:a7:84:ac:98:7e:8a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
        Validity
            Not Before: Aug 25 04:55:02 2024 GMT
            Not After : Aug 24 05:00:02 2025 GMT
        Subject: CN=14F647EB9D90D9132881FDE334EE944873277C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:e3:89:47:61:10:05:67:7e:ae:c7:60:da:
                    a0:61:d1:73:6c:25:b4:82:ee:3d:90:4b:b1:e5:af:
                    08:c4:ba:45:59:71:d2:77:11:f3:16:df:cb:b1:d7:
                    cc:01:26:c4:9f:dc:34:f1:5f:fd:80:d6:84:9d:48:
                    ad:6e:e8:cb:7d:8b:0a:70:d4:64:76:b3:32:a9:3f:
                    ff:1d:74:eb:f3:08:ed:df:c3:45:80:7b:1f:fe:b8:
                    71:b4:9c:28:bf:7f:85:86:f9:41:34:99:76:0f:60:
                    f3:a6:53:ee:35:14:30:9a:f8:10:c2:bf:2b:e9:8a:
                    6d:45:bd:c3:f4:3f:28:16:50:60:bd:98:c5:1a:c9:
                    12:a5:96:8e:c7:91:bb:ee:1d:5d:af:1a:29:57:49:
                    68:29:9d:b3:ec:07:8e:b9:f8:16:97:07:a6:58:58:
                    e9:87:57:0c:38:56:ff:1b:87:0c:c1:5a:34:89:f4:
                    8d:32:b2:f5:d4:80:5e:b9:8b:7a:d4:bf:e2:e3:d1:
                    f7:1d:11:2d:d1:38:78:86:03:e3:1b:b9:81:9f:75:
                    16:72:f8:dd:da:ff:cb:f5:9e:d1:aa:71:c3:d7:9f:
                    73:7b:8b:e9:1b:29:57:45:65:84:69:23:e7:66:cd:
                    61:e0:e0:bf:7d:12:97:36:30:71:c5:fc:a8:63:2a:
                    13:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F6:47:EB:9D:90:D9:13:28:81:FD:E3:34:EE:94:48:73:27:7C:37
            X509v3 Authority Key Identifier:
                keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/323430343a666230303a3a2f33322d3332203d3e203538343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fb00::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:95:92:85:4c:c0:47:3d:53:90:cc:aa:75:a1:3b:24:45:ab:
         5a:05:0c:ba:2d:39:09:82:66:6d:20:a0:b0:7d:d5:55:38:49:
         51:c8:82:cc:39:58:37:f5:75:f2:4b:33:f6:8a:b1:94:b4:ba:
         14:e7:49:83:34:7d:38:7d:ea:02:a4:84:0c:bd:5e:d4:3e:79:
         94:47:be:3f:b1:d5:c0:6e:57:67:55:b6:14:ed:0c:c3:6a:d8:
         e6:b1:1d:aa:84:6c:0e:fd:14:c9:95:73:a3:ea:85:ae:bb:02:
         9a:95:55:49:79:aa:74:4f:99:28:8b:e0:33:17:31:7f:4f:61:
         8b:05:0d:d6:99:2c:fc:4a:10:b2:53:5e:d0:cf:d0:02:08:1a:
         7d:15:c1:d9:d5:a9:80:e8:7e:41:22:17:48:2a:af:72:6f:e1:
         42:38:d6:e3:55:4d:d7:9f:97:c5:b0:17:fe:55:87:eb:fe:79:
         b6:c9:46:61:c3:9b:ff:3a:74:12:17:0c:72:e4:c3:c0:53:a3:
         e7:86:2f:2c:fc:2c:29:fe:86:b2:30:d6:ca:aa:7a:b5:b0:f5:
         99:5a:ab:8f:e3:37:4c:49:e8:8b:3e:6d:dd:ee:a6:9d:f8:96:
         1c:22:bc:c1:5a:df:0c:9e:36:ea:68:dc:9f:8e:e2:34:f2:79:
         3d:b7:fc:9e
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUFRbnilZL+R7OEqbDoaeErJh+itkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQz
REEyRjA5ODAeFw0yNDA4MjUwNDU1MDJaFw0yNTA4MjQwNTAwMDJaMDMxMTAvBgNV
BAMTKDE0RjY0N0VCOUQ5MEQ5MTMyODgxRkRFMzM0RUU5NDQ4NzMyNzdDMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFAeOJR2EQBWd+rsdg2qBh0XNs
JbSC7j2QS7HlrwjEukVZcdJ3EfMW38ux18wBJsSf3DTxX/2A1oSdSK1u6Mt9iwpw
1GR2szKpP/8ddOvzCO3fw0WAex/+uHG0nCi/f4WG+UE0mXYPYPOmU+41FDCa+BDC
vyvpim1FvcP0PygWUGC9mMUayRKllo7HkbvuHV2vGilXSWgpnbPsB465+BaXB6ZY
WOmHVww4Vv8bhwzBWjSJ9I0ysvXUgF65i3rUv+Lj0fcdES3ROHiGA+MbuYGfdRZy
+N3a/8v1ntGqccPXn3N7i+kbKVdFZYRpI+dmzWHg4L99Epc2MHHF/KhjKhP1AgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUFPZH652Q2RMogf3jNO6USHMnfDcwHwYDVR0j
BBgwFoAUlfxgcqSmkKYaC18Us2iCtD2i8JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzA1MTc3YS1hNTAwLTQ5OTYtYjNmZi03MGMxNDRlZGZlY2UvMC85NUZDNjA3MkE0
QTY5MEE2MUEwQjVGMTRCMzY4ODJCNDNEQTJGMDk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQzREEy
RjA5OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMDUxNzdhLWE1MDAtNDk5Ni1i
M2ZmLTcwYzE0NGVkZmVjZS8wLzMyMzQzMDM0M2E2NjYyMzAzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDM1MzgzNDM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBPsAMA0GCSqGSIb3
DQEBCwUAA4IBAQB6lZKFTMBHPVOQzKp1oTskRataBQy6LTkJgmZtIKCwfdVVOElR
yILMOVg39XXySzP2irGUtLoU50mDNH04feoCpIQMvV7UPnmUR74/sdXAbldnVbYU
7QzDatjmsR2qhGwO/RTJlXOj6oWuuwKalVVJeap0T5koi+AzFzF/T2GLBQ3WmSz8
ShCyU17Qz9ACCBp9FcHZ1amA6H5BIhdIKq9yb+FCONbjVU3Xn5fFsBf+VYfr/nm2
yUZhw5v/OnQSFwxy5MPAU6Pnhi8s/Cwp/oayMNbKqnq1sPWZWquP4zdMSeiLPm3d
7qad+JYcIrzBWt8MnjbqaNyfjuI08nk9t/ye
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org