Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a3a2f33322d3438203d3e203338373638.roa
File:                     323430373a336538303a3a2f33322d3438203d3e203338373638.roa (raw, json)
Hash identifier:          6jBV+YbQK26iBcOQ7S5zsMw9nUVxGEuIbJ7fF7HfYs0=
Subject key identifier:   BA:79:30:A2:B6:73:CB:23:16:C2:14:A0:2D:04:30:6A:D6:75:17:3D
Certificate issuer:       /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0
Certificate serial:       147806314BEB60FA09C687B112D58270B845984C
Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a3a2f33322d3438203d3e203338373638.roa
Signing time:             Mon 15 Jul 2024 03:04:01 +0000
ROA not before:           Mon 15 Jul 2024 02:59:01 +0000
ROA not after:            Mon 14 Jul 2025 03:04:01 +0000
asID:                     38768
IP address blocks:        2407:3e80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl
                          rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:78:06:31:4b:eb:60:fa:09:c6:87:b1:12:d5:82:70:b8:45:98:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0
        Validity
            Not Before: Jul 15 02:59:01 2024 GMT
            Not After : Jul 14 03:04:01 2025 GMT
        Subject: CN=BA7930A2B673CB2316C214A02D04306AD675173D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:d6:1b:cc:f1:0c:9c:c6:9d:9d:0c:d4:d0:
                    15:6a:3c:48:71:3b:ee:50:eb:e5:c6:43:94:c6:1d:
                    fe:8e:2e:cb:db:0e:76:e4:c5:9e:30:38:c3:41:89:
                    1e:94:c7:36:d6:3a:8a:43:55:16:b0:b1:3e:b0:d3:
                    80:fb:fa:12:88:99:f9:69:37:75:28:15:a6:b9:a1:
                    4c:b1:6c:1b:7b:a5:bd:79:8d:98:fc:07:ca:30:2c:
                    9c:13:46:0a:76:1a:c7:8b:9e:f4:a7:d7:b4:c5:0e:
                    56:26:ec:cd:33:ab:a6:58:2f:13:76:59:0a:10:48:
                    5a:50:5d:99:53:5d:52:6d:3b:75:93:40:bd:0a:32:
                    49:a5:62:8c:ff:a6:4a:f0:af:20:2a:50:e0:16:15:
                    ab:10:39:2d:bf:c0:c5:13:4c:9b:10:7f:f1:bf:b9:
                    c3:3d:7a:d2:0b:0b:4f:5c:d7:9b:3e:2d:99:38:fe:
                    e4:aa:23:6c:99:66:29:64:7f:b6:05:dd:7e:a4:02:
                    1a:c5:6b:26:16:e8:e0:1a:21:60:e3:c4:0f:58:78:
                    36:05:f7:4f:0b:8e:b5:ea:82:46:a1:cb:46:9e:a7:
                    cc:2f:b1:1c:25:21:d4:8a:96:41:8c:46:6f:f8:0d:
                    04:6e:a7:36:bc:1d:8f:3a:e9:2f:e0:9f:ae:1f:04:
                    5c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:79:30:A2:B6:73:CB:23:16:C2:14:A0:2D:04:30:6A:D6:75:17:3D
            X509v3 Authority Key Identifier:
                keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a3a2f33322d3438203d3e203338373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:3e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:da:23:2c:00:e5:d6:25:41:1a:8e:7a:a0:39:fe:c6:38:b6:
         24:95:73:13:fa:e5:46:0a:d0:75:78:d9:fe:9f:28:05:bb:75:
         9b:53:55:e3:aa:c7:1d:45:1a:e0:7b:61:45:fb:7d:c0:36:55:
         e4:bd:1e:20:cf:f9:41:fd:79:6f:d9:60:f0:38:65:06:fb:8a:
         78:39:49:a9:d1:41:e7:6c:94:e6:00:bf:c4:f3:59:69:b9:a7:
         69:16:a2:9f:6b:bd:c2:48:dc:29:ec:3c:44:b9:0c:4f:77:0e:
         8f:ad:6c:51:95:7a:d0:6b:be:b4:03:21:7e:4a:cb:d1:df:03:
         cd:a2:de:bf:50:f8:d6:7c:87:f9:a4:0a:a9:58:0a:22:c3:80:
         6c:e9:d2:b7:4e:12:7d:cf:cf:8d:68:6a:e3:dd:10:15:21:45:
         fd:d7:86:02:43:7a:28:b4:fc:72:b3:0f:94:f1:de:18:56:8d:
         66:06:ba:4c:52:f0:5e:98:3e:d9:17:b1:1b:a7:8b:03:96:eb:
         87:7d:dc:fa:0a:8e:25:50:e5:78:53:c3:f0:38:1c:b4:78:49:
         62:5e:60:b6:5e:1a:7f:31:40:d1:36:b0:67:e5:a2:69:6f:77:
         62:83:63:31:6d:c8:88:34:d7:dd:05:7d:e1:d2:b3:ec:1a:71:
         cf:34:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:34 2024 by rpki-client on console-fra.rpki-client.org