Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa
File:                     323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (raw, json)
Hash identifier:          4d3WLLD1ej7CJVNlQjHKVbQqTh+L7Ry9VDdwZJDIgoo=
Subject key identifier:   D3:FD:D7:91:07:F5:23:24:E8:F2:9B:66:B8:5D:DE:44:50:89:2C:10
Certificate issuer:       /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
Certificate serial:       7BA3311CAB0E5E57CA717E5730E410DCB1103D50
Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa
Signing time:             Wed 18 Oct 2023 05:01:08 +0000
ROA not before:           Wed 18 Oct 2023 04:56:08 +0000
ROA not after:            Wed 16 Oct 2024 05:01:08 +0000
asID:                     136128
IP address blocks:        2001:df1:6900::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl
                          rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 23:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a3:31:1c:ab:0e:5e:57:ca:71:7e:57:30:e4:10:dc:b1:10:3d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
        Validity
            Not Before: Oct 18 04:56:08 2023 GMT
            Not After : Oct 16 05:01:08 2024 GMT
        Subject: CN=D3FDD79107F52324E8F29B66B85DDE4450892C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:cc:15:69:0b:d7:a3:3d:b4:d0:cc:eb:fa:
                    f2:e7:84:14:ce:23:43:2a:ce:2f:fb:f0:21:8b:7d:
                    e2:74:22:ca:5b:33:90:7b:52:d7:5a:75:a6:c9:13:
                    00:63:a6:94:9f:35:ed:6a:05:4a:de:47:c7:fb:30:
                    09:75:05:7e:6c:08:f1:1f:f0:62:40:22:75:0b:fb:
                    db:2d:3a:59:d7:3c:18:0a:d9:fb:97:66:2e:16:55:
                    7f:e5:15:f4:56:c6:ec:f8:e6:95:37:5c:2e:d8:80:
                    20:27:20:d3:cf:9c:6e:59:92:4b:c4:e4:da:47:aa:
                    56:67:e4:24:45:f8:88:96:d4:83:6b:57:49:22:95:
                    a7:26:c7:b9:bf:db:27:1e:2d:1e:1c:90:d5:92:aa:
                    00:cc:4b:ab:38:4c:4d:10:a2:a8:b9:b2:af:27:79:
                    b5:4b:0e:e7:95:bd:4c:f3:78:17:7a:0f:17:2b:62:
                    e6:a2:df:68:fe:11:27:74:52:95:02:84:42:41:76:
                    1f:a1:5b:b9:1a:1d:27:c8:96:43:90:3c:2c:54:f5:
                    b8:77:9c:24:da:eb:90:72:10:1a:52:42:0c:73:08:
                    bf:07:c8:8f:df:c2:96:49:c2:41:0c:8d:a9:51:16:
                    b0:4e:11:78:29:7f:58:54:fc:b2:0b:d2:73:53:49:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FD:D7:91:07:F5:23:24:E8:F2:9B:66:B8:5D:DE:44:50:89:2C:10
            X509v3 Authority Key Identifier:
                keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:6900::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:0c:08:da:fe:a8:5c:c6:30:74:e9:d4:66:30:90:37:a4:b0:
         6b:b4:bf:b5:a6:40:6d:0c:7a:d1:7d:29:22:67:80:c3:f3:f7:
         36:08:45:87:ab:16:26:3c:f1:6d:ea:98:87:05:1a:94:b4:a2:
         86:dd:37:c6:80:c6:cf:fd:e7:1d:71:02:c8:95:68:8d:35:96:
         59:4a:fe:1d:90:53:52:c6:80:ac:11:ef:a3:90:03:e0:e9:6a:
         1b:61:46:ef:1b:65:62:44:bb:57:76:23:60:08:9e:3a:64:d7:
         3e:a7:e1:58:16:2f:f1:f7:e7:ee:6a:25:db:24:48:01:ef:96:
         af:3f:4b:4a:ae:6f:c0:26:db:9f:09:d1:41:39:74:62:4a:99:
         9e:25:c2:7e:62:68:b8:2b:87:bc:7a:d8:dc:7c:24:66:78:4d:
         2d:26:b9:78:6e:77:ec:41:b4:1e:8d:ae:b0:4c:96:e3:df:31:
         b7:46:73:49:2c:83:47:30:80:05:00:21:03:31:14:61:e4:61:
         68:9b:c0:a4:ac:fe:ed:f8:00:89:29:d9:91:7a:b4:8b:03:e2:
         00:4f:15:9b:fe:36:db:34:77:cb:d4:38:8a:d2:4f:9b:9f:35:
         52:3a:21:a1:07:50:b6:ba:7a:10:ed:ca:18:af:6b:d0:60:7a:
         c7:71:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 01:18:37 2024 by rpki-client on console-fra.rpki-client.org