Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/323430313a353430303a3a2f33322d3438203d3e2034343334.roa
File:                     323430313a353430303a3a2f33322d3438203d3e2034343334.roa (raw, json)
Hash identifier:          rBn6Oy9jE/eYVpniphDhsMY51AmaLjT08hUDLnF++Bs=
Subject key identifier:   18:4D:26:D0:28:65:4B:AF:00:45:4A:9D:95:C7:C3:47:DB:87:29:4D
Certificate issuer:       /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial:       70AD64377752A3CC7BCC46DEBB32893246C3A89A
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/323430313a353430303a3a2f33322d3438203d3e2034343334.roa
Signing time:             Wed 18 Sep 2024 08:00:53 +0000
ROA not before:           Wed 18 Sep 2024 07:55:53 +0000
ROA not after:            Wed 17 Sep 2025 08:00:53 +0000
asID:                     4434
IP address blocks:        2401:5400::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
                          rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 07:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ad:64:37:77:52:a3:cc:7b:cc:46:de:bb:32:89:32:46:c3:a8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
        Validity
            Not Before: Sep 18 07:55:53 2024 GMT
            Not After : Sep 17 08:00:53 2025 GMT
        Subject: CN=184D26D028654BAF00454A9D95C7C347DB87294D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:82:23:8d:4f:48:5c:6f:e7:03:16:2c:33:ea:
                    8a:42:97:af:b8:8e:63:66:5c:e7:98:2b:e2:c1:8e:
                    78:e0:c0:0b:31:39:21:ca:df:89:65:b1:04:b4:ad:
                    47:f0:79:59:dd:8e:a2:bd:59:3b:8b:f6:56:ef:c5:
                    bc:a1:61:04:06:24:cd:7e:bc:e2:67:eb:d0:f8:e3:
                    c6:b0:ec:93:d3:c4:b1:0c:2f:a9:d0:a4:51:dd:51:
                    eb:a9:1d:72:18:2e:37:2e:8a:8c:b3:70:27:4c:c6:
                    54:6e:03:2b:4f:28:17:be:ce:10:3e:1a:74:89:9f:
                    0a:9e:da:cb:98:20:52:55:0b:34:8b:4e:a5:75:f8:
                    63:58:9c:a6:15:0a:4d:34:d9:aa:4d:72:fd:da:7d:
                    9f:62:c4:de:72:4b:c7:8c:32:b5:81:ec:4a:0e:b1:
                    2f:cb:20:57:66:42:10:d9:73:90:cc:64:d2:27:7f:
                    36:cb:6c:17:cc:83:52:32:5a:20:6d:f7:b2:40:58:
                    01:71:5d:9f:34:d9:80:d8:6d:4b:86:f9:83:3b:9a:
                    d2:f0:ae:22:64:7b:7d:fa:54:9d:64:15:c3:39:fe:
                    23:bb:4d:d6:0e:7d:2d:25:d3:a9:d8:b0:88:a1:d8:
                    02:d7:db:50:8c:d1:cf:90:33:0a:ae:37:34:6e:b1:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4D:26:D0:28:65:4B:AF:00:45:4A:9D:95:C7:C3:47:DB:87:29:4D
            X509v3 Authority Key Identifier:
                keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/323430313a353430303a3a2f33322d3438203d3e2034343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5400::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:1b:c0:b8:13:cf:45:40:39:ba:18:10:a9:ce:56:36:7e:32:
         19:36:e9:e2:16:81:f7:fe:90:fa:ff:54:95:86:9e:a9:a2:c2:
         1f:55:f3:26:e9:7c:bb:db:d1:fe:68:2c:08:9d:a2:40:d4:13:
         93:a3:8f:90:30:7a:f3:88:03:22:b6:b5:05:62:d5:a7:91:70:
         9f:6d:32:e5:a2:73:17:05:28:67:8c:74:76:a8:0a:83:cf:44:
         48:a7:23:03:f9:c1:7c:2a:27:ec:64:88:7e:35:a5:ea:2c:ce:
         93:b3:23:a8:af:3f:da:d9:c9:42:d5:8b:e5:33:80:7e:ca:a0:
         ac:96:fd:be:55:b4:c1:75:94:56:ad:91:a7:c3:2f:56:a5:41:
         f6:0c:51:c5:ed:91:d8:ca:a4:64:9b:9d:7c:c9:db:5d:73:e0:
         20:ba:ce:33:43:d4:ae:d5:2a:4a:aa:2f:bb:7f:9d:40:60:8a:
         36:8d:2b:65:9d:be:e5:24:38:6c:28:e8:5d:c6:e0:e3:1b:c9:
         1c:1b:6f:88:aa:86:16:2b:49:9d:6d:94:38:62:89:02:9a:ad:
         44:77:e7:d1:a2:2c:d1:3b:4b:74:48:ac:2f:2b:61:1d:e9:e1:
         03:22:0a:42:75:e0:3a:50:5d:6b:40:74:e5:c1:1f:a6:52:92:
         c4:64:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org