Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030363a3a2f34382d3438203d3e20313338313338.roa
File:                     323430323a393830303a343030363a3a2f34382d3438203d3e20313338313338.roa (raw, json)
Hash identifier:          N4zXj0n+crGxTMpLt78WSVMbvOXWTjixttF6+IX5i6g=
Subject key identifier:   5A:73:E2:13:3E:A0:A3:01:02:69:1B:5C:07:16:FF:DA:CC:98:DD:6F
Certificate issuer:       /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Certificate serial:       1EFBAA70E1C89AA5F8A07BF4E7D54B14E7238AA0
Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030363a3a2f34382d3438203d3e20313338313338.roa
Signing time:             Fri 16 Aug 2024 01:00:02 +0000
ROA not before:           Fri 16 Aug 2024 00:55:02 +0000
ROA not after:            Fri 15 Aug 2025 01:00:02 +0000
asID:                     138138
IP address blocks:        2402:9800:4006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl
                          rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fb:aa:70:e1:c8:9a:a5:f8:a0:7b:f4:e7:d5:4b:14:e7:23:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
        Validity
            Not Before: Aug 16 00:55:02 2024 GMT
            Not After : Aug 15 01:00:02 2025 GMT
        Subject: CN=5A73E2133EA0A30102691B5C0716FFDACC98DD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:8c:71:86:d4:3f:ea:6c:50:66:11:a6:f3:
                    15:c6:ea:ee:26:b4:f5:16:e9:0b:85:00:32:b2:cb:
                    2a:49:71:69:78:b1:c0:e0:21:80:b1:a3:f9:be:3c:
                    31:f7:95:66:c0:bb:31:bd:c5:d6:4d:65:cb:42:84:
                    3e:46:6f:86:d4:86:27:08:b5:5a:3c:8d:28:6c:fc:
                    c5:5d:1e:32:75:5a:18:6c:5c:5f:3e:e8:f7:b9:8d:
                    eb:0c:52:8d:bb:5e:bf:9a:fc:af:96:aa:d3:c1:a8:
                    5a:dd:04:ad:b6:05:1c:1e:4a:5a:14:cd:8e:e3:59:
                    c1:38:4a:a4:79:35:1a:bb:cc:ff:5e:be:91:67:a1:
                    9e:1f:b7:e0:5b:12:15:40:f2:21:a7:27:de:93:05:
                    e2:07:fe:c4:15:9f:e4:92:49:ec:46:d4:0d:48:c5:
                    de:7a:0c:55:15:fd:da:d6:c0:d6:8d:5b:e8:aa:4d:
                    e2:e0:8a:e3:4c:0b:07:97:c1:0e:16:e4:ab:01:04:
                    9a:13:d5:e1:0b:df:59:a5:12:3c:ae:2e:a3:74:f3:
                    41:62:39:fd:9a:ae:44:7d:19:cb:c0:86:af:03:14:
                    eb:12:80:e0:2a:6b:4d:82:0a:fd:f6:25:4b:6e:d6:
                    5d:50:f0:e2:c6:7a:67:4d:bf:57:39:07:84:04:bf:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:73:E2:13:3E:A0:A3:01:02:69:1B:5C:07:16:FF:DA:CC:98:DD:6F
            X509v3 Authority Key Identifier:
                keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030363a3a2f34382d3438203d3e20313338313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9800:4006::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:2a:9e:8d:bc:ba:78:27:d8:ec:5a:a4:c7:4f:2b:99:3d:5d:
         90:bf:5d:ec:a3:5a:66:0d:07:7a:fd:d4:51:80:9c:3d:ec:f6:
         c0:36:c0:37:06:ba:4e:33:93:b2:7c:59:2c:2e:c2:7a:3e:29:
         29:07:09:a1:a7:9a:95:3f:bd:2b:7a:26:f0:4b:17:5b:bc:03:
         ef:0c:ae:d6:e5:46:25:74:e7:9e:1b:59:01:e2:2f:c2:72:31:
         f6:ee:49:c6:19:b7:5a:9c:da:0c:a0:a4:27:a6:00:31:b6:b5:
         06:43:e3:53:d5:d0:14:2d:b1:ee:cd:55:35:d7:f4:74:11:38:
         ca:62:ce:78:c9:ef:6c:94:be:30:0a:26:c8:3c:c8:6e:db:c1:
         fc:5b:8a:08:8e:1e:4c:7f:e0:e7:9f:96:f5:18:40:3d:d4:48:
         f6:8c:bd:20:a2:92:e3:21:94:d8:67:39:bf:26:2d:21:b9:1c:
         73:09:5f:78:b1:76:79:33:7c:12:d9:12:76:b3:c2:3a:fb:b7:
         96:69:9a:cb:17:35:6b:32:0a:16:92:b1:fd:4e:03:5b:b9:d3:
         11:ae:f2:45:bf:95:b5:e6:41:98:2a:92:18:5d:36:ec:a6:b8:
         14:74:35:a0:73:e7:9e:01:0f:66:17:d3:53:3d:7b:2c:a4:c1:
         71:a4:ed:4b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUHvuqcOHImqX4oHv059VLFOcjiqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3
MkZGQUUwRTAeFw0yNDA4MTYwMDU1MDJaFw0yNTA4MTUwMTAwMDJaMDMxMTAvBgNV
BAMTKDVBNzNFMjEzM0VBMEEzMDEwMjY5MUI1QzA3MTZGRkRBQ0M5OERENkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsIxxhtQ/6mxQZhGm8xXG6u4m
tPUW6QuFADKyyypJcWl4scDgIYCxo/m+PDH3lWbAuzG9xdZNZctChD5Gb4bUhicI
tVo8jShs/MVdHjJ1WhhsXF8+6Pe5jesMUo27Xr+a/K+WqtPBqFrdBK22BRweSloU
zY7jWcE4SqR5NRq7zP9evpFnoZ4ft+BbEhVA8iGnJ96TBeIH/sQVn+SSSexG1A1I
xd56DFUV/drWwNaNW+iqTeLgiuNMCweXwQ4W5KsBBJoT1eEL31mlEjyuLqN080Fi
Of2arkR9GcvAhq8DFOsSgOAqa02CCv32JUtu1l1Q8OLGemdNv1c5B4QEv1pDAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUWnPiEz6gowECaRtcBxb/2syY3W8wHwYDVR0j
BBgwFoAU/NBThZBOAPPBCjOe4Z2STXL/rg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMC9GQ0QwNTM4NTkw
NEUwMEYzQzEwQTMzOUVFMTlEOTI0RDcyRkZBRTBFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3MkZG
QUUwRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04
MGI3LTA2ZmMxMThkZjhlMi8wLzMyMzQzMDMyM2EzOTM4MzAzMDNhMzQzMDMwMzYz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzMTMzMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
ApgAQAYwDQYJKoZIhvcNAQELBQADggEBABoqno28ungn2OxapMdPK5k9XZC/Xeyj
WmYNB3r91FGAnD3s9sA2wDcGuk4zk7J8WSwuwno+KSkHCaGnmpU/vSt6JvBLF1u8
A+8MrtblRiV0554bWQHiL8JyMfbuScYZt1qc2gygpCemADG2tQZD41PV0BQtse7N
VTXX9HQROMpiznjJ72yUvjAKJsg8yG7bwfxbigiOHkx/4OeflvUYQD3USPaMvSCi
kuMhlNhnOb8mLSG5HHMJX3ixdnkzfBLZEnazwjr7t5ZpmssXNWsyChaSsf1OA1u5
0xGu8kW/lbXmQZgqkhhdNuymuBR0NaBz554BD2YX01M9eyykwXGk7Us=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org