Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/323430373a646630303a3a2f34382d3438203d3e203338353136.roa
File:                     323430373a646630303a3a2f34382d3438203d3e203338353136.roa (raw, json)
Hash identifier:          7xtas/zgPmaVh5WLRPDoXSbPgphLFtzPv6iApP15bYo=
Subject key identifier:   7E:02:A2:32:ED:D6:A1:CE:5E:7A:B3:BE:48:98:79:C3:6C:20:36:45
Certificate issuer:       /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial:       07CB5235DDBA687A0CCC54AB7F2E2383A5F66923
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/323430373a646630303a3a2f34382d3438203d3e203338353136.roa
Signing time:             Thu 02 Nov 2023 07:50:34 +0000
ROA not before:           Thu 02 Nov 2023 07:45:34 +0000
ROA not after:            Thu 31 Oct 2024 07:50:34 +0000
asID:                     38516
IP address blocks:        2407:df00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
                          rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cb:52:35:dd:ba:68:7a:0c:cc:54:ab:7f:2e:23:83:a5:f6:69:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
        Validity
            Not Before: Nov  2 07:45:34 2023 GMT
            Not After : Oct 31 07:50:34 2024 GMT
        Subject: CN=7E02A232EDD6A1CE5E7AB3BE489879C36C203645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:98:f3:35:94:53:33:e0:3e:62:a7:df:26:
                    52:56:62:0a:cd:99:d5:10:c8:04:51:96:65:c3:2a:
                    45:03:ff:92:1a:34:b4:36:fe:70:54:fb:05:02:12:
                    30:12:97:48:b4:8e:70:49:ca:ca:c6:c1:9e:f2:4c:
                    42:da:1c:80:58:fa:01:20:6e:6f:03:6e:83:6f:79:
                    50:a3:81:0e:b3:f9:c4:ac:49:77:c7:b0:fe:a1:5c:
                    f5:06:46:1a:b2:39:15:7d:52:4f:0a:98:42:9d:4d:
                    ae:0a:c5:11:24:5b:ce:e6:76:60:fa:dc:22:f8:3f:
                    e9:5d:b8:df:53:e1:23:61:81:7d:f3:31:00:e9:81:
                    5d:16:6d:63:85:2d:44:d4:8d:57:13:54:e0:3e:d1:
                    6c:30:3d:68:e2:c8:84:44:43:db:e0:5d:10:89:86:
                    c1:20:d6:2e:84:08:82:73:ab:27:0f:f0:3f:7c:fe:
                    b0:50:09:00:b7:d7:64:b3:f2:80:66:85:7c:a7:7b:
                    fb:c2:20:cd:5f:c8:ce:9c:7f:31:88:64:93:a7:b5:
                    5e:74:58:52:db:58:d9:0b:24:29:c7:89:0f:e1:8c:
                    ad:2e:aa:38:f7:3f:52:53:48:5d:3a:8e:17:00:ec:
                    d0:a9:5c:a6:0b:54:b5:ef:50:12:69:91:8d:ee:aa:
                    64:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:02:A2:32:ED:D6:A1:CE:5E:7A:B3:BE:48:98:79:C3:6C:20:36:45
            X509v3 Authority Key Identifier:
                keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/323430373a646630303a3a2f34382d3438203d3e203338353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:df00::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:55:b3:64:af:ea:7f:59:9e:aa:bc:d8:71:be:e1:52:89:27:
         e1:b9:f0:09:83:7e:38:c1:98:c8:21:cb:58:3f:57:cb:a9:a8:
         c4:94:f2:a5:94:df:97:c9:a1:64:73:46:16:7b:ed:f9:99:68:
         54:21:74:ba:17:cd:88:83:a3:3c:98:8a:34:8d:87:58:ff:ea:
         51:52:78:b1:2a:9b:93:12:fd:bd:67:d9:8f:09:7f:bb:ab:90:
         54:80:b0:e4:a9:2f:6c:08:6c:b9:c3:33:99:58:ca:5d:14:dc:
         bd:0b:67:2c:f2:0f:41:93:b2:74:db:fa:81:c6:9c:ca:18:45:
         52:7c:1b:eb:d9:5c:3b:df:d8:28:04:02:01:86:16:27:cd:06:
         ea:fb:49:1f:73:e3:54:63:be:eb:c3:56:3f:73:07:13:05:df:
         3a:72:a9:81:92:0e:0a:aa:ee:10:b4:35:67:f4:2a:4f:a9:02:
         8b:d1:b5:57:2b:d8:d5:7d:44:68:74:97:4a:50:1a:35:4c:b6:
         5e:c3:9a:38:86:42:34:9d:9a:3a:db:5a:5f:3a:d5:2a:46:9b:
         37:a6:7d:38:7b:08:2c:87:52:7c:a8:de:52:b6:76:7e:3a:47:
         a2:e6:4d:a7:64:01:20:ba:6b:73:51:57:ee:37:1e:91:fb:0d:
         1a:fd:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:10:06 2024 by rpki-client on console-fra.rpki-client.org