Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa
File:                     323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (raw, json)
Hash identifier:          uoYw/yUfHK3xwYpCXGbBFk1OlhQPkZr27ajCpI9Vh9s=
Subject key identifier:   96:A7:E0:7D:A2:44:73:1E:07:67:7B:E1:D6:93:45:03:82:47:71:A4
Certificate issuer:       /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
Certificate serial:       123AB6B314A571B73F6CC887DE83EF19CFC2539C
Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa
Signing time:             Wed 18 Sep 2024 05:02:20 +0000
ROA not before:           Wed 18 Sep 2024 04:57:20 +0000
ROA not after:            Wed 17 Sep 2025 05:02:20 +0000
asID:                     136128
IP address blocks:        2001:df1:6900::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl
                          rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3a:b6:b3:14:a5:71:b7:3f:6c:c8:87:de:83:ef:19:cf:c2:53:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
        Validity
            Not Before: Sep 18 04:57:20 2024 GMT
            Not After : Sep 17 05:02:20 2025 GMT
        Subject: CN=96A7E07DA244731E07677BE1D6934503824771A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:fc:61:c8:7f:97:77:47:bd:fc:89:55:b0:
                    4a:81:12:f5:1b:6d:2f:3c:39:56:61:6c:aa:87:12:
                    2e:6e:3d:7f:42:56:25:3a:43:8b:2d:ca:57:71:47:
                    45:f6:c0:93:08:8a:5c:df:e3:40:3f:f9:97:a9:18:
                    56:9f:f4:6c:4d:d9:5b:51:5d:7e:4d:ff:6e:62:cc:
                    eb:66:57:0e:17:be:e8:d0:ac:c1:3d:52:e7:c3:61:
                    e5:80:7a:95:33:93:d4:b4:84:9a:ac:42:c1:8d:a1:
                    0f:43:16:0e:0d:a3:8b:aa:49:1f:e7:9c:5d:8b:d4:
                    4f:19:e6:bd:63:1a:97:ba:93:75:6f:c8:6b:c8:fe:
                    6d:3a:02:7b:0c:11:16:0f:c4:ea:be:6e:12:8e:30:
                    aa:b2:64:6f:73:a5:c3:b3:24:c0:2a:d1:80:1b:f9:
                    ff:4b:15:fc:2e:73:c6:78:00:d2:a7:d1:d8:68:6a:
                    ab:0e:1a:8f:9a:86:d0:bf:41:a7:70:4e:08:ba:f2:
                    57:d7:b7:c9:b4:cc:00:4d:d6:87:10:80:a0:d2:40:
                    a8:4a:da:ca:02:d6:b8:57:c7:e1:02:c2:1a:00:f0:
                    0e:1a:e0:91:0e:c5:59:14:32:89:14:35:3e:9a:e6:
                    83:25:97:84:37:fe:e9:d7:2d:0e:ba:e7:19:b5:fe:
                    02:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A7:E0:7D:A2:44:73:1E:07:67:7B:E1:D6:93:45:03:82:47:71:A4
            X509v3 Authority Key Identifier:
                keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:6900::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:2e:98:c6:83:57:b4:06:07:74:10:48:64:ac:54:f7:84:eb:
         d8:a4:61:a3:cf:ec:3e:d2:df:b6:b6:77:8a:86:25:4b:08:8f:
         ec:28:ca:62:df:13:51:81:3b:52:23:8a:ed:6f:f3:a6:36:14:
         90:7c:3c:9e:22:19:92:ea:cd:0a:09:1a:a3:55:1d:fb:79:27:
         c7:21:67:6d:92:57:78:2b:52:af:21:14:09:17:11:aa:bd:a7:
         a5:72:f2:4b:08:4f:98:77:c5:ce:c2:75:ac:17:44:8c:34:17:
         75:ed:d4:2d:98:af:eb:40:87:67:4e:d8:86:4f:a6:8f:45:c2:
         d7:15:25:e1:f2:ab:9a:35:06:05:2e:53:6f:f6:02:66:45:5f:
         0c:df:c7:69:23:30:c1:16:b3:91:39:0d:5d:44:c3:b0:82:43:
         fb:59:6c:14:c9:60:c8:c5:da:d0:19:9f:6c:49:1f:40:1a:ee:
         23:15:b7:9a:e9:ad:f9:cf:2c:a4:19:de:c3:1c:5a:0f:c0:61:
         77:13:a9:84:f4:4e:8d:c3:3b:1b:ef:98:57:cb:2c:6b:73:72:
         2e:37:5c:54:dc:7d:b1:d4:bd:cd:6c:a5:54:0a:d1:8f:70:e6:
         1c:d5:2e:76:bf:b4:bf:f1:fd:2b:96:98:fa:49:d1:2a:e9:38:
         d3:d1:ae:2f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUEjq2sxSlcbc/bMiH3oPvGc/CU5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5
NDNEQTIzQzAeFw0yNDA5MTgwNDU3MjBaFw0yNTA5MTcwNTAyMjBaMDMxMTAvBgNV
BAMTKDk2QTdFMDdEQTI0NDczMUUwNzY3N0JFMUQ2OTM0NTAzODI0NzcxQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI8/xhyH+Xd0e9/IlVsEqBEvUb
bS88OVZhbKqHEi5uPX9CViU6Q4styldxR0X2wJMIilzf40A/+ZepGFaf9GxN2VtR
XX5N/25izOtmVw4XvujQrME9UufDYeWAepUzk9S0hJqsQsGNoQ9DFg4No4uqSR/n
nF2L1E8Z5r1jGpe6k3VvyGvI/m06AnsMERYPxOq+bhKOMKqyZG9zpcOzJMAq0YAb
+f9LFfwuc8Z4ANKn0dhoaqsOGo+ahtC/QadwTgi68lfXt8m0zABN1ocQgKDSQKhK
2soC1rhXx+ECwhoA8A4a4JEOxVkUMokUNT6a5oMll4Q3/unXLQ665xm1/gI9AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUlqfgfaJEcx4HZ3vh1pNFA4JHcaQwHwYDVR0j
BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4
QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE
QTIzQy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3ZWRjYjdlLWMzOGQtNGU2Ny04
MmJkLTRlODE1MGI4ODU2MS8wLzMyMzAzMDMxM2E2NDY2MzEzYTM2MzkzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzEzMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8WkAMA0GCSqGSIb3DQEBCwUAA4IBAQBMLpjGg1e0Bgd0EEhkrFT3hOvYpGGjz+w+
0t+2tneKhiVLCI/sKMpi3xNRgTtSI4rtb/OmNhSQfDyeIhmS6s0KCRqjVR37eSfH
IWdtkld4K1KvIRQJFxGqvaelcvJLCE+Yd8XOwnWsF0SMNBd17dQtmK/rQIdnTtiG
T6aPRcLXFSXh8quaNQYFLlNv9gJmRV8M38dpIzDBFrOROQ1dRMOwgkP7WWwUyWDI
xdrQGZ9sSR9AGu4jFbea6a35zyykGd7DHFoPwGF3E6mE9E6Nwzsb75hXyyxrc3Iu
N1xU3H2x1L3NbKVUCtGPcOYc1S52v7S/8f0rlpj6SdEq6TjT0a4v
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org