Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/323430313a666363303a3a2f33322d3332203d3e203535363939.roa
File:                     323430313a666363303a3a2f33322d3332203d3e203535363939.roa (raw, json)
Hash identifier:          4T77KaoUvaRPYPMqBNQGRP61mMChsc9aq4bjDBgOYQk=
Subject key identifier:   C3:B0:E3:CE:8F:9D:45:CA:BF:E3:92:44:C8:FF:E9:E5:B6:90:57:FA
Certificate issuer:       /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C
Certificate serial:       7964ED77A6EEB244CE4B2A85F1BFDB4E92CA2786
Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/323430313a666363303a3a2f33322d3332203d3e203535363939.roa
Signing time:             Sat 17 Aug 2024 06:00:00 +0000
ROA not before:           Sat 17 Aug 2024 05:55:00 +0000
ROA not after:            Sat 16 Aug 2025 06:00:00 +0000
asID:                     55699
IP address blocks:        2401:fcc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl
                          rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:64:ed:77:a6:ee:b2:44:ce:4b:2a:85:f1:bf:db:4e:92:ca:27:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C
        Validity
            Not Before: Aug 17 05:55:00 2024 GMT
            Not After : Aug 16 06:00:00 2025 GMT
        Subject: CN=C3B0E3CE8F9D45CABFE39244C8FFE9E5B69057FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:93:26:9c:5c:86:ec:ac:d3:02:98:2e:f2:
                    97:e9:0f:38:8d:65:af:27:a7:64:02:a5:c8:7a:09:
                    6f:f9:41:26:91:39:95:2e:6a:d7:f5:35:30:b9:8e:
                    5e:28:7b:0e:74:4a:07:8c:90:43:86:72:30:e4:50:
                    87:de:7c:b2:1f:22:76:ab:7d:cb:03:a1:ff:db:db:
                    6c:83:35:7b:77:81:e1:bc:b8:44:a7:5f:45:f1:63:
                    a8:26:3b:7b:af:68:91:79:8f:82:8d:15:42:27:ee:
                    01:2a:6f:3e:f3:75:e8:ee:bd:db:55:a0:c2:19:cd:
                    3e:16:ce:20:17:20:fa:01:92:7e:98:60:4a:0d:af:
                    76:75:ea:f1:80:4e:29:59:69:a4:c4:cf:23:e3:3b:
                    26:c4:7f:d9:ff:e9:ce:80:35:30:c7:6e:de:f0:9f:
                    64:cc:56:d2:d8:66:16:31:60:c6:c2:b7:03:fd:c3:
                    c2:be:2a:b0:6e:ff:59:ff:7e:dd:f8:9f:6c:1f:cd:
                    a4:3c:31:fb:35:0d:2b:aa:81:d0:94:a7:ab:3a:7a:
                    75:1e:2a:82:b1:b7:34:31:d5:e7:c6:5b:19:0d:56:
                    f0:01:43:a6:8e:66:30:1d:ec:35:74:d1:66:65:0f:
                    05:1c:e6:0d:8d:43:31:a2:fd:b3:3d:e2:70:46:68:
                    d8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B0:E3:CE:8F:9D:45:CA:BF:E3:92:44:C8:FF:E9:E5:B6:90:57:FA
            X509v3 Authority Key Identifier:
                keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/323430313a666363303a3a2f33322d3332203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:fcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:fe:8a:4f:67:4c:96:2b:09:53:f1:9b:85:d3:8f:d9:00:09:
         25:ee:0d:d1:95:a0:5d:e2:1c:90:83:98:f6:34:a5:d2:b7:61:
         07:0e:58:a6:02:ed:3e:62:4b:98:f6:61:19:1c:17:f3:ef:c3:
         1f:36:04:d5:be:3d:0e:27:7c:8e:33:a6:eb:44:6c:f6:b1:51:
         56:0b:17:af:59:2f:13:ab:79:3b:06:21:0e:e6:eb:43:b7:9b:
         86:e5:48:3e:2d:eb:22:75:92:97:6f:b6:08:a4:c3:b3:e1:63:
         7e:94:d9:ab:c0:5e:33:dd:ee:26:91:cf:bc:7a:5e:1c:d6:5f:
         9d:2c:71:38:d8:bd:b0:6c:00:86:36:a5:00:9a:6d:e2:2b:12:
         06:bc:2f:00:19:0b:ec:59:7e:fe:fd:a7:9b:43:70:2a:32:1a:
         89:29:1b:8b:cf:b8:07:98:5f:32:69:7c:e0:83:88:d4:e9:ee:
         f4:a1:83:c5:1f:f8:82:81:6b:60:7b:30:a3:aa:08:ed:15:4e:
         d9:05:ff:bc:97:c5:60:60:c4:a0:12:4d:d1:a8:b5:98:f9:34:
         bc:d3:37:d9:b1:41:ab:80:6b:60:78:e7:c3:25:9c:49:01:35:
         f9:81:1f:a2:d3:bb:f9:00:40:78:ef:6e:ae:c9:0f:9c:4b:d6:
         4a:a1:67:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:50:41 2024 by rpki-client on console-fra.rpki-client.org