Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa
File:                     323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (raw, json)
Hash identifier:          1ypZTh1uqX7Kh/HgM6WUDlwDLRHdZ90Km18x/Ynnn+Y=
Subject key identifier:   E1:AF:F6:7D:25:3E:29:EF:83:17:E6:63:A8:89:5D:93:73:E5:A0:60
Certificate issuer:       /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
Certificate serial:       4746B9B7991EE7885276373DA73BC33AC0C42FAB
Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa
Signing time:             Fri 08 Nov 2024 11:00:02 +0000
ROA not before:           Fri 08 Nov 2024 10:55:02 +0000
ROA not after:            Fri 07 Nov 2025 11:00:02 +0000
asID:                     141909
IP address blocks:        2001:df7:7d80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl
                          rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:46:b9:b7:99:1e:e7:88:52:76:37:3d:a7:3b:c3:3a:c0:c4:2f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
        Validity
            Not Before: Nov  8 10:55:02 2024 GMT
            Not After : Nov  7 11:00:02 2025 GMT
        Subject: CN=E1AFF67D253E29EF8317E663A8895D9373E5A060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:11:6a:d9:93:2d:f4:14:31:5e:8f:6a:94:
                    e5:5c:13:f2:47:e0:c8:f6:ed:ed:a8:3d:88:62:b3:
                    c7:cd:7b:bd:66:91:93:13:30:a5:d7:75:bb:a2:1b:
                    1f:d1:83:25:39:fb:e8:1a:4c:5f:1f:90:92:20:db:
                    ac:17:94:46:c8:ad:38:b3:a8:53:21:73:c5:c5:d2:
                    22:53:39:4b:b5:8c:85:d7:e4:3d:b8:fa:08:84:ba:
                    15:f1:57:b7:9c:50:a8:b4:2f:d3:c9:55:dd:db:d7:
                    9c:46:2e:0a:eb:38:06:6f:c6:8d:2d:0e:97:c6:d0:
                    53:4f:4e:c8:3e:19:d7:17:15:0e:d3:1f:df:a3:ec:
                    99:fc:10:62:63:e5:3d:94:1c:23:b9:26:7f:09:ad:
                    d3:d3:7a:d3:b5:7e:db:19:32:21:71:14:bc:1f:3d:
                    a9:1a:1f:1d:1e:14:bb:a6:af:01:40:20:9d:77:8a:
                    f1:84:d4:fe:34:8f:a8:43:07:49:22:f3:e9:4a:c4:
                    34:18:65:f4:c7:1d:f4:ff:7a:ff:a9:c8:1f:82:e5:
                    06:5f:2b:c0:d5:c4:8e:ee:03:45:6b:cc:47:f7:c5:
                    24:f4:03:11:c7:d3:28:2c:2c:b6:0b:47:5c:13:ff:
                    a6:01:7f:96:1c:0c:18:61:41:00:f0:0f:5f:58:d7:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AF:F6:7D:25:3E:29:EF:83:17:E6:63:A8:89:5D:93:73:E5:A0:60
            X509v3 Authority Key Identifier:
                keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:7d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:50:7c:cd:6a:76:71:62:f6:d4:00:84:00:eb:0c:17:07:df:
         db:eb:1e:f6:d2:9f:ac:a2:48:03:11:57:cd:9f:3b:94:1e:0c:
         73:1c:e6:73:fe:b4:59:2b:2d:54:0e:05:29:e8:c0:b2:6a:bb:
         87:ab:cc:bc:fa:77:a1:79:26:86:3d:fb:ff:03:66:58:29:6b:
         00:1b:25:1e:1b:9d:60:eb:97:8a:b2:16:91:91:77:61:a5:7e:
         ba:1b:38:e8:2b:35:a0:5d:74:c8:b1:c8:ba:1e:4a:69:2d:dd:
         fe:ad:09:84:62:13:13:86:ab:e9:75:d3:57:b6:d1:39:26:e8:
         b7:f1:bb:54:b7:30:af:32:46:de:56:89:c8:ad:d7:b7:a2:bb:
         57:16:ff:69:5e:cc:a1:ea:ba:37:64:32:74:40:42:a6:51:5a:
         b4:52:ec:f6:46:a1:96:13:60:8c:26:9f:77:d9:8c:f5:6a:38:
         e9:6c:9e:fb:9c:e3:aa:d1:43:ee:4a:cf:7e:d4:a8:00:68:76:
         a8:cd:9e:47:53:69:aa:00:f6:49:9a:98:70:55:75:fc:d8:1a:
         55:58:b6:35:a1:f6:77:cb:3d:94:49:3e:61:40:59:6c:d1:d2:
         a1:f3:ab:2a:96:1b:7b:f1:d5:9a:f1:bd:de:c7:a3:0d:8f:74:
         ec:3d:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org