Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/323430313a313363303a3a2f33322d3336203d3e20313332363532.roa
File:                     323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (raw, json)
Hash identifier:          r0QuI+SLpYXoVba1tCRzlfTj3XW+5z023kxe3rM0l1M=
Subject key identifier:   00:79:23:24:C4:CC:84:29:ED:29:79:D0:5A:DA:2E:D9:70:0D:4C:EF
Certificate issuer:       /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF
Certificate serial:       615BDB11E30711609CF617EB2F3002A86636C3A1
Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/323430313a313363303a3a2f33322d3336203d3e20313332363532.roa
Signing time:             Tue 13 Feb 2024 05:00:02 +0000
ROA not before:           Tue 13 Feb 2024 04:55:02 +0000
ROA not after:            Tue 11 Feb 2025 05:00:02 +0000
asID:                     132652
IP address blocks:        2401:13c0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl
                          rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5b:db:11:e3:07:11:60:9c:f6:17:eb:2f:30:02:a8:66:36:c3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF
        Validity
            Not Before: Feb 13 04:55:02 2024 GMT
            Not After : Feb 11 05:00:02 2025 GMT
        Subject: CN=00792324C4CC8429ED2979D05ADA2ED9700D4CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6c:5c:25:7e:8f:f8:c9:0d:a0:e4:9f:19:63:
                    05:62:db:a5:a1:11:53:ef:9c:ec:7f:4c:dd:9f:f4:
                    ce:03:96:2c:e4:a9:bf:f4:95:5b:2e:b4:e2:55:ff:
                    f0:b1:04:14:44:26:99:24:1a:38:e0:9d:a9:cf:d6:
                    98:ba:3c:19:2c:ca:c2:ec:c8:94:53:39:a9:43:f6:
                    14:4b:85:97:db:dd:97:ac:94:7e:fc:60:99:4a:9e:
                    9d:e0:8d:6b:4c:30:9e:21:6e:cc:dc:a0:16:65:81:
                    3c:fb:d2:4e:26:07:6b:86:f3:b7:44:49:44:a5:d6:
                    7e:0a:65:25:16:eb:d8:bf:f7:ea:37:37:1e:ec:9b:
                    62:79:10:e3:cd:11:96:90:16:c6:ee:c9:d6:39:f9:
                    5c:af:9a:24:ca:5e:69:bf:17:7b:4b:8f:ec:15:58:
                    e4:cc:e5:0e:56:6b:b5:c4:24:c3:b7:5f:a3:2c:17:
                    68:11:c8:ef:ad:1e:1f:bb:0b:9a:17:9f:6f:ac:20:
                    e5:a9:4b:6c:8c:69:0c:80:45:b8:25:fc:03:5f:88:
                    0a:c7:75:e0:3e:be:c6:a5:8f:ea:55:49:82:44:c8:
                    3e:e3:4b:08:0c:4b:71:00:4d:05:6d:76:99:27:b5:
                    5c:80:ed:96:fd:94:b8:f3:00:b3:cd:c6:9e:20:a9:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:79:23:24:C4:CC:84:29:ED:29:79:D0:5A:DA:2E:D9:70:0D:4C:EF
            X509v3 Authority Key Identifier:
                keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/323430313a313363303a3a2f33322d3336203d3e20313332363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:13c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:7d:7d:ee:4d:1b:48:18:df:6b:45:ae:06:2c:a9:57:74:ef:
         f7:41:40:88:2d:7d:5c:3c:a5:9d:c3:7b:4d:11:fe:19:26:6e:
         f9:8d:7c:47:33:39:a2:62:bf:b1:ea:15:ef:11:7a:99:aa:e4:
         c3:37:0d:fe:a4:eb:b5:bf:fc:aa:1b:69:32:46:09:4d:4c:e8:
         bb:bd:b5:4a:b6:95:86:4a:f9:5d:72:45:1e:6e:01:71:72:de:
         35:fa:74:f8:47:24:5d:55:43:96:36:c2:91:93:e5:90:67:7e:
         3b:d3:83:0e:cd:e0:09:91:fb:c6:e2:5c:94:c4:b9:d1:d1:64:
         bd:5f:be:2d:73:41:6f:69:6b:e3:49:04:f9:c6:4d:cc:9a:fd:
         4a:90:05:7c:ba:41:11:a3:8d:4b:77:55:dc:26:22:da:f3:6a:
         8f:2e:e5:fd:89:1c:02:92:d5:06:cc:9a:38:2b:44:5e:49:12:
         aa:2e:9c:1f:5c:52:3f:95:01:de:78:b4:36:ce:c2:7a:0c:20:
         f3:dd:c9:52:09:6c:92:44:6c:78:b2:52:7a:6d:8c:f8:f9:a7:
         eb:65:bf:45:cb:77:54:54:f6:20:81:c3:3a:37:fe:52:54:5d:
         86:de:e7:69:88:d7:cf:b0:28:52:aa:2a:7f:68:e0:d7:41:94:
         7f:61:32:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:56:42 2024 by rpki-client on console-fra.rpki-client.org