Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/323430353a336463303a3a2f33322d3438203d3e20313332363432.roa
File:                     323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (raw, json)
Hash identifier:          yG8djwmjU5wWL3w72DbpQnRcPYEEUhpkWqpJyWDMSjM=
Subject key identifier:   4B:40:DF:DA:EC:8C:8D:AB:A0:A0:F7:07:C6:09:78:7F:4C:EE:B9:BF
Certificate issuer:       /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Certificate serial:       5813DBF169B7AA9A55E487A74A09AB5A63AB27A9
Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/323430353a336463303a3a2f33322d3438203d3e20313332363432.roa
Signing time:             Mon 01 Jul 2024 01:02:13 +0000
ROA not before:           Mon 01 Jul 2024 00:57:13 +0000
ROA not after:            Mon 30 Jun 2025 01:02:13 +0000
asID:                     132642
IP address blocks:        2405:3dc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:13:db:f1:69:b7:aa:9a:55:e4:87:a7:4a:09:ab:5a:63:ab:27:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
        Validity
            Not Before: Jul  1 00:57:13 2024 GMT
            Not After : Jun 30 01:02:13 2025 GMT
        Subject: CN=4B40DFDAEC8C8DABA0A0F707C609787F4CEEB9BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:eb:e3:e7:77:56:a5:b7:3d:25:7c:9c:f2:
                    39:65:75:a7:0f:f2:da:4f:ac:75:99:0e:ae:c1:02:
                    e1:23:6d:cb:29:16:7b:74:ab:cb:1d:c4:d2:f6:d1:
                    c3:07:85:bf:35:d5:14:45:17:4b:8a:0e:c9:fb:7e:
                    dc:89:e9:84:bb:12:85:c0:31:3b:a7:78:cc:46:f7:
                    d9:c0:b8:f7:91:d0:1a:18:2f:32:a6:22:d6:2a:9f:
                    a5:e2:6f:7f:fc:f3:49:8c:ef:67:8e:ba:e9:b5:c7:
                    31:c1:87:35:2d:f9:15:6e:49:3d:c3:20:6c:5b:48:
                    e1:40:94:93:70:52:ab:8b:f4:59:a8:2d:ad:57:40:
                    1c:28:99:2e:47:c3:25:1c:85:38:d4:a8:4c:22:1f:
                    cc:47:5b:48:bf:89:95:d1:00:1e:0c:8f:d4:c4:0c:
                    32:81:9a:18:8f:a8:97:3c:37:9f:5e:fc:f5:24:72:
                    f8:4c:dc:90:7a:65:41:6a:43:72:10:f5:69:4e:a4:
                    7c:dd:83:9d:17:e5:3f:18:eb:f8:cc:12:9e:31:ff:
                    38:71:9f:97:66:87:99:eb:7c:71:a8:61:bb:51:5e:
                    36:6a:a2:ee:7b:e2:0a:15:50:10:ba:e0:6d:39:c5:
                    01:45:56:41:f4:af:ee:4f:9a:ae:dd:50:c0:13:fd:
                    aa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:40:DF:DA:EC:8C:8D:AB:A0:A0:F7:07:C6:09:78:7F:4C:EE:B9:BF
            X509v3 Authority Key Identifier:
                keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/323430353a336463303a3a2f33322d3438203d3e20313332363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:16:f9:73:43:08:4b:d2:bc:7a:43:fa:4b:cd:1f:2c:08:9a:
         bb:8b:17:0a:67:1b:ad:3d:d4:1f:02:93:b4:d8:80:79:8d:25:
         2e:fd:63:c3:e6:84:4b:f7:33:27:a3:29:a9:a2:62:64:b9:bf:
         50:74:01:6d:83:f8:82:10:6d:fe:d2:82:eb:76:db:30:ac:c8:
         e0:63:a0:d6:14:73:64:53:70:a6:74:fe:a7:25:ed:6e:38:61:
         0b:d5:82:94:2c:21:97:5d:5f:ec:11:21:71:5c:15:3a:90:82:
         47:be:f3:f3:c1:15:6d:9d:e0:fa:3d:f3:55:c9:3f:35:ba:e3:
         b9:c8:24:24:ba:62:ae:c6:a6:42:da:75:ce:6b:e7:61:96:5f:
         4d:93:46:bb:46:18:f5:d5:10:68:7f:cb:bc:1e:e7:25:96:88:
         33:37:54:5f:8d:21:ac:87:07:7b:10:fe:73:b4:38:be:a2:ae:
         bf:27:ce:88:f8:c1:de:40:7f:9d:98:1f:90:ba:4a:53:29:a6:
         ed:19:04:23:e6:03:90:87:60:ca:dc:88:4c:a1:85:1a:ff:a9:
         37:0f:e3:59:f6:65:92:5f:93:af:46:8a:da:ad:ee:91:73:7a:
         3f:3a:57:73:0d:65:20:8d:22:48:81:32:26:0c:66:f0:44:65:
         f1:90:9e:88
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUWBPb8Wm3qppV5IenSgmrWmOrJ6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0
MzdDQThFOTAeFw0yNDA3MDEwMDU3MTNaFw0yNTA2MzAwMTAyMTNaMDMxMTAvBgNV
BAMTKDRCNDBERkRBRUM4QzhEQUJBMEEwRjcwN0M2MDk3ODdGNENFRUI5QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dOvj53dWpbc9JXyc8jlldacP
8tpPrHWZDq7BAuEjbcspFnt0q8sdxNL20cMHhb811RRFF0uKDsn7ftyJ6YS7EoXA
MTuneMxG99nAuPeR0BoYLzKmItYqn6Xib3/880mM72eOuum1xzHBhzUt+RVuST3D
IGxbSOFAlJNwUquL9FmoLa1XQBwomS5HwyUchTjUqEwiH8xHW0i/iZXRAB4Mj9TE
DDKBmhiPqJc8N59e/PUkcvhM3JB6ZUFqQ3IQ9WlOpHzdg50X5T8Y6/jMEp4x/zhx
n5dmh5nrfHGoYbtRXjZqou574goVUBC64G05xQFFVkH0r+5Pmq7dUMAT/aphAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUS0Df2uyMjaugoPcHxgl4f0zuub8wHwYDVR0j
BBgwFoAUgYgjtQ+NY+nZU8S3UvBNsEN8qOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MGM3NzNjOC1mYjU2LTQ0OWYtODY0OS0xMTJkNmUxNjg2YjMvMC84MTg4MjNCNTBG
OEQ2M0U5RDk1M0M0Qjc1MkYwNERCMDQzN0NBOEU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0MzdD
QThFOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUwYzc3M2M4LWZiNTYtNDQ5Zi04
NjQ5LTExMmQ2ZTE2ODZiMy8wLzMyMzQzMDM1M2EzMzY0NjMzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMxMzMzMjM2MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFPcAwDQYJKoZI
hvcNAQELBQADggEBAIkW+XNDCEvSvHpD+kvNHywImruLFwpnG6091B8Ck7TYgHmN
JS79Y8PmhEv3MyejKamiYmS5v1B0AW2D+IIQbf7Sgut22zCsyOBjoNYUc2RTcKZ0
/qcl7W44YQvVgpQsIZddX+wRIXFcFTqQgke+8/PBFW2d4Po981XJPzW647nIJCS6
Yq7GpkLadc5r52GWX02TRrtGGPXVEGh/y7we5yWWiDM3VF+NIayHB3sQ/nO0OL6i
rr8nzoj4wd5Af52YH5C6SlMppu0ZBCPmA5CHYMrciEyhhRr/qTcP41n2ZZJfk69G
itqt7pFzej86V3MNZSCNIkiBMiYMZvBEZfGQnog=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org