Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa
File:                     323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (raw, json)
Hash identifier:          h7S6wYW5PbjWPPZImqnHAQEExu6SHfaYmZDzvVKKqG0=
Subject key identifier:   93:0E:76:A5:52:97:9F:29:89:08:1B:77:BF:AD:E9:E2:86:4A:64:1D
Certificate issuer:       /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
Certificate serial:       60F9B25468FF9C13DA4401D2966F5E25977445AF
Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa
Signing time:             Fri 26 Jul 2024 05:01:38 +0000
ROA not before:           Fri 26 Jul 2024 04:56:38 +0000
ROA not after:            Fri 25 Jul 2025 05:01:38 +0000
asID:                     149951
IP address blocks:        2001:df1:1ec0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl
                          rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f9:b2:54:68:ff:9c:13:da:44:01:d2:96:6f:5e:25:97:74:45:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
        Validity
            Not Before: Jul 26 04:56:38 2024 GMT
            Not After : Jul 25 05:01:38 2025 GMT
        Subject: CN=930E76A552979F2989081B77BFADE9E2864A641D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:f9:65:7f:3e:fe:15:11:6e:27:0f:34:89:
                    0f:34:7c:ce:fc:b8:b4:55:96:e9:8c:d2:e3:4a:5a:
                    df:35:8a:f5:f9:8f:d4:b9:58:25:e8:e6:a2:24:f3:
                    77:b9:4d:b5:d6:87:a4:2d:a6:71:a6:12:9a:c3:aa:
                    99:3b:92:25:a4:f7:c1:f3:d8:86:4f:49:95:9f:ae:
                    2f:2e:c1:b9:e7:ef:fc:6b:b3:8d:d6:c9:ab:93:11:
                    2e:08:58:0e:fc:15:b3:b7:7b:58:cb:35:fa:ca:99:
                    4f:6d:96:96:dc:97:a5:6f:e5:66:b3:e3:97:92:51:
                    ef:31:2d:e6:cb:44:3c:b5:cf:e2:61:74:88:3c:77:
                    b3:9b:43:f6:ae:ca:4e:3e:ef:e6:40:f9:9f:f4:ad:
                    3d:a2:b8:a4:5f:a3:c4:09:d1:e0:a1:ed:dc:22:5c:
                    ca:f5:78:d9:bf:78:5a:31:45:d0:9d:f5:0b:a1:d2:
                    1a:d1:66:fa:30:4e:e2:34:9e:61:00:88:d3:60:e0:
                    c4:88:b0:95:3c:be:cd:89:5f:b6:e5:bb:d9:89:f9:
                    f5:dc:06:76:b4:1a:4e:23:80:2d:8e:bf:72:d9:34:
                    c6:c7:56:5e:fb:58:f5:7d:ca:bb:81:9b:7c:07:e7:
                    77:25:e5:b0:02:59:6c:36:f1:ad:5e:b2:f6:59:98:
                    d3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0E:76:A5:52:97:9F:29:89:08:1B:77:BF:AD:E9:E2:86:4A:64:1D
            X509v3 Authority Key Identifier:
                keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:1ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:91:c5:64:96:d0:ab:de:37:40:7e:2e:fa:a4:ed:2d:ec:27:
         67:61:ea:e5:b2:d4:80:3d:2f:f2:1b:ee:46:78:eb:22:f7:e9:
         eb:32:70:31:e5:74:0c:23:44:a4:21:1d:e1:65:07:ce:14:ca:
         d5:ce:d0:aa:3d:cf:af:34:ca:6f:16:fa:c7:c7:97:6f:e9:2f:
         63:db:d9:81:95:fe:b9:f0:7e:e8:b6:5c:c7:ff:7c:b8:71:0e:
         da:7a:9e:6a:98:ea:98:8d:9c:41:f1:ad:b6:8a:41:38:ba:5b:
         30:c4:98:1d:c7:a9:27:e4:bf:99:50:7b:50:3c:67:5f:d9:51:
         45:7a:69:cc:81:7c:f9:25:2d:a0:b1:6c:e2:bf:5c:d0:cc:19:
         a6:89:6b:0f:f3:11:d3:1d:b3:78:c1:55:df:a8:13:aa:96:c9:
         de:fc:73:11:0b:2d:c9:ee:d9:b5:97:32:10:11:cb:8d:53:78:
         60:72:47:1a:7b:d0:ed:c7:4f:ca:d7:5d:25:49:f6:08:fd:75:
         49:50:63:da:80:cc:7b:29:12:45:4d:2a:cd:d0:25:9a:83:3c:
         84:0e:f3:9e:c0:5e:c5:a3:da:6f:8b:e1:31:07:1f:e3:46:ae:
         49:4c:2f:78:e1:60:40:5a:f5:b6:0f:16:37:01:b6:dd:b6:6b:
         c0:1c:2b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org