Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa
File:                     323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (raw, json)
Hash identifier:          rLoaq9o6RbdS4Y9D3noqCFoJB2fsKqmRW0vXbRNxGHo=
Subject key identifier:   30:48:4A:FF:1A:12:85:1F:44:F9:45:76:29:9B:71:C2:99:00:52:75
Certificate issuer:       /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial:       04BA4775E6F03EFB687463EF15341048059038AA
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa
Signing time:             Mon 31 Jul 2023 15:52:57 +0000
ROA not before:           Mon 31 Jul 2023 15:47:57 +0000
ROA not after:            Mon 29 Jul 2024 15:52:57 +0000
asID:                     138866
IP address blocks:        2404:fec0:250::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
                          rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ba:47:75:e6:f0:3e:fb:68:74:63:ef:15:34:10:48:05:90:38:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
        Validity
            Not Before: Jul 31 15:47:57 2023 GMT
            Not After : Jul 29 15:52:57 2024 GMT
        Subject: CN=30484AFF1A12851F44F94576299B71C299005275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:7f:1b:37:ff:08:51:e4:7f:f1:3d:45:61:
                    72:74:f4:5e:e3:88:2e:2e:7c:28:b4:9a:2b:4c:48:
                    16:f4:a5:ed:5c:12:dc:59:e5:c6:b4:09:b1:f1:08:
                    85:0d:a3:72:5f:39:98:56:62:ca:a1:8d:dd:5d:5c:
                    c5:52:e6:ac:fe:12:7f:0a:f3:ce:ae:3f:aa:1e:d0:
                    1e:d2:7a:8c:57:5a:23:c2:c6:b2:59:8b:51:65:27:
                    d9:32:cd:34:6f:5d:e5:2f:24:f3:03:3f:3e:9f:76:
                    67:1c:e3:67:58:e9:21:ee:eb:3a:b7:7b:98:85:a6:
                    67:1f:7e:19:5e:b3:e7:ea:a7:6f:13:97:e6:41:a3:
                    5e:59:07:c1:59:46:d7:39:b1:da:3f:ae:fa:16:c2:
                    00:3a:9d:da:02:b2:71:92:e0:b9:af:11:44:87:27:
                    53:ac:e4:26:78:a0:02:f2:e4:69:e9:fc:d8:31:c2:
                    d8:bf:c2:ca:26:f3:be:7f:71:ea:74:82:f8:0b:d4:
                    42:d5:0b:bf:54:b3:56:0f:e8:08:5b:f0:51:90:e8:
                    82:92:0d:4f:b7:86:00:24:18:cd:cc:af:b1:11:e0:
                    6e:ac:34:0a:0a:a1:fe:38:0a:f7:53:f2:83:e1:17:
                    a4:9d:4e:27:0f:1a:e9:a5:9b:16:ec:28:60:61:8d:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:48:4A:FF:1A:12:85:1F:44:F9:45:76:29:9B:71:C2:99:00:52:75
            X509v3 Authority Key Identifier:
                keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fec0:250::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:4e:29:b0:3c:2d:67:58:7d:c8:15:a7:2d:45:4a:16:de:da:
         7f:b7:e4:c1:f9:3c:0d:c0:6d:09:bf:e0:ab:82:5c:13:51:12:
         cd:60:3c:c8:a6:ab:4a:e1:9a:af:28:29:57:e8:c4:55:f9:cc:
         c2:7d:b9:ca:5e:3b:84:3f:d5:14:b0:03:8c:1a:41:9a:9f:bf:
         15:f7:cb:da:04:47:44:db:ce:b9:c2:7e:8c:a3:50:47:19:40:
         b7:e6:f5:01:6c:3b:85:d7:51:72:b3:aa:f7:57:da:b6:1b:4a:
         5e:cb:a1:01:7d:01:5d:b7:bb:87:e9:99:36:f0:c7:19:ea:d1:
         01:aa:d2:c6:a1:53:51:82:a7:48:9e:29:2f:8e:34:47:8a:9d:
         72:e1:8d:80:a3:ed:0d:22:7b:68:bc:2c:a6:55:1a:3b:2d:70:
         b3:ac:c7:7b:38:ff:f9:e3:6c:43:a7:d6:94:03:14:ee:43:9c:
         3a:6c:f6:e6:05:9b:5a:fd:43:b9:31:dc:e4:b8:92:51:97:c6:
         d0:a4:01:af:e3:dc:0d:c1:d3:63:e6:ca:73:db:50:97:18:8b:
         44:1a:0d:61:23:af:8e:65:cf:98:16:24:d1:cc:d8:f7:af:29:
         40:f7:e8:d6:3b:64:f2:d6:78:08:17:d4:01:3e:16:b4:d4:fb:
         92:be:ec:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:14 2024 by rpki-client on console-ams.rpki-client.org