Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa
File:                     323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (raw, json)
Hash identifier:          fMSFTh69g/Pec9SgvhZDZF4RqFT/78a2ofU0fNhn9lw=
Subject key identifier:   56:E8:8C:0B:34:AC:F5:A9:2A:69:66:C8:CD:91:64:19:8C:43:BD:CC
Certificate issuer:       /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial:       26815E0A3D33DEE3020F6724F9B1E7114E32A3F8
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa
Signing time:             Mon 31 Jul 2023 15:52:43 +0000
ROA not before:           Mon 31 Jul 2023 15:47:43 +0000
ROA not after:            Mon 29 Jul 2024 15:52:43 +0000
asID:                     138866
IP address blocks:        2404:fec0:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
                          rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:81:5e:0a:3d:33:de:e3:02:0f:67:24:f9:b1:e7:11:4e:32:a3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
        Validity
            Not Before: Jul 31 15:47:43 2023 GMT
            Not After : Jul 29 15:52:43 2024 GMT
        Subject: CN=56E88C0B34ACF5A92A6966C8CD9164198C43BDCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:59:30:ef:41:5e:8b:50:d5:45:87:d3:ef:
                    57:9e:c8:9f:f6:e3:d1:f3:57:4b:23:4f:49:40:04:
                    8e:89:43:96:13:bd:b8:d4:6c:0a:a5:40:bf:07:b1:
                    b0:e7:04:ea:6e:57:4f:1f:19:bc:43:0f:7b:77:64:
                    d3:03:1a:f1:58:95:2c:d4:5c:0a:47:23:d5:20:49:
                    3f:3c:02:1b:df:71:57:2b:c2:c7:c9:03:50:7d:f5:
                    fc:60:0b:f4:c2:db:fe:96:a4:93:f2:ed:aa:7e:ed:
                    76:32:70:7f:0e:47:ab:1b:aa:0c:f6:80:4a:2f:df:
                    b8:5b:e6:9f:cf:26:54:e5:6c:d5:da:10:43:81:27:
                    18:5a:e7:ed:e2:80:46:4c:c8:ab:56:96:36:a8:65:
                    bf:95:5a:b7:38:1d:5c:bb:9a:6e:02:9a:38:dd:f0:
                    38:7f:6a:ee:14:b2:de:db:71:d9:24:9f:05:d4:c8:
                    fa:39:6a:54:a2:a9:08:6f:62:b0:fb:d4:e9:6a:39:
                    42:9e:93:59:84:bd:73:96:cf:4a:d2:a8:da:d7:39:
                    e4:77:68:ea:14:a9:9e:b9:b3:3a:36:2f:28:3b:a4:
                    99:1a:df:6f:22:23:4f:64:90:bd:7d:24:e5:e4:af:
                    bc:5e:f4:4f:c0:99:ca:3a:5e:cb:41:27:df:3d:2a:
                    b9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E8:8C:0B:34:AC:F5:A9:2A:69:66:C8:CD:91:64:19:8C:43:BD:CC
            X509v3 Authority Key Identifier:
                keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fec0:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         de:87:9a:48:35:3b:4f:56:c9:7e:3c:9e:08:16:25:31:b1:9b:
         30:7d:3e:4e:75:3c:8d:65:79:e2:fe:71:7f:60:c4:6d:b7:68:
         33:4c:8c:85:45:c7:3a:f9:8b:66:15:fa:73:03:65:88:a4:d4:
         96:7e:1e:86:1d:37:97:23:68:4d:9a:06:c5:03:c4:fb:a2:84:
         cd:c5:da:34:62:cc:0b:bf:b5:4e:47:65:ed:66:6e:51:6e:56:
         97:19:69:83:e6:07:76:00:5f:a9:96:03:03:79:bc:c0:f3:11:
         1b:15:e9:9e:53:8d:f9:d8:51:08:72:21:7e:c3:6d:b8:cc:b4:
         ef:9d:10:f5:1d:b4:a6:3c:12:b5:88:42:48:6a:cb:15:3e:e5:
         aa:71:9f:5a:7d:ad:9d:2a:50:a4:d3:d2:41:6b:79:17:5a:9d:
         0d:08:d2:20:13:82:e2:97:b5:dc:c5:6c:d4:c7:4f:18:e4:76:
         31:2e:f7:82:95:51:26:93:48:19:a8:c9:68:bb:90:82:ba:f2:
         58:cd:6b:9d:03:0d:96:c8:ce:de:cb:3d:87:7f:8a:03:63:64:
         8e:e0:b6:cf:1c:70:0e:cf:c5:71:e8:6c:8d:e0:76:9d:df:76:
         74:26:6b:df:37:01:13:d0:26:7f:14:49:f2:ce:4f:6a:20:4a:
         2d:33:f8:e2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUJoFeCj0z3uMCD2ck+bHnEU4yo/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG
QzhBN0U5NzAeFw0yMzA3MzExNTQ3NDNaFw0yNDA3MjkxNTUyNDNaMDMxMTAvBgNV
BAMTKDU2RTg4QzBCMzRBQ0Y1QTkyQTY5NjZDOENEOTE2NDE5OEM0M0JEQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3Vkw70Fei1DVRYfT71eeyJ/2
49HzV0sjT0lABI6JQ5YTvbjUbAqlQL8HsbDnBOpuV08fGbxDD3t3ZNMDGvFYlSzU
XApHI9UgST88AhvfcVcrwsfJA1B99fxgC/TC2/6WpJPy7ap+7XYycH8OR6sbqgz2
gEov37hb5p/PJlTlbNXaEEOBJxha5+3igEZMyKtWljaoZb+VWrc4HVy7mm4Cmjjd
8Dh/au4Ust7bcdkknwXUyPo5alSiqQhvYrD71OlqOUKek1mEvXOWz0rSqNrXOeR3
aOoUqZ65szo2Lyg7pJka328iI09kkL19JOXkr7xe9E/Amco6XstBJ989KrnvAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUVuiMCzSs9akqaWbIzZFkGYxDvcwwHwYDVR0j
BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF
MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB
N0U5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05
NGEwLTBmNDAwZWE2YTM3NS8wLzMyMzQzMDM0M2E2NjY1NjMzMDNhMzUzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP7AAAUw
DQYJKoZIhvcNAQELBQADggEBAN6Hmkg1O09WyX48nggWJTGxmzB9Pk51PI1leeL+
cX9gxG23aDNMjIVFxzr5i2YV+nMDZYik1JZ+HoYdN5cjaE2aBsUDxPuihM3F2jRi
zAu/tU5HZe1mblFuVpcZaYPmB3YAX6mWAwN5vMDzERsV6Z5TjfnYUQhyIX7DbbjM
tO+dEPUdtKY8ErWIQkhqyxU+5apxn1p9rZ0qUKTT0kFreRdanQ0I0iATguKXtdzF
bNTHTxjkdjEu94KVUSaTSBmoyWi7kIK68ljNa50DDZbIzt7LPYd/igNjZI7gts8c
cA7PxXHobI3gdp3fdnQma983ARPQJn8USfLOT2ogSi0z+OI=
-----END CERTIFICATE-----
Generated at Fri May 3 04:42:12 2024 by rpki-client on console-fra.rpki-client.org