Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa
File:                     323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier:          7K0G5vNv7Y3ljUrf0PTDHAFoQShBhNpCUNJdZCmXPYo=
Subject key identifier:   A5:4F:B8:57:44:36:CD:85:0C:83:41:E2:60:CA:BD:8C:4D:4D:4F:78
Certificate issuer:       /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial:       4657DA55CA4279EDFEF6554D3D99E483854F5E25
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa
Signing time:             Sat 15 Jun 2024 03:40:00 +0000
ROA not before:           Sat 15 Jun 2024 03:35:00 +0000
ROA not after:            Sat 14 Jun 2025 03:40:00 +0000
asID:                     136088
IP address blocks:        2400:d940:babe::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
                          rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:57:da:55:ca:42:79:ed:fe:f6:55:4d:3d:99:e4:83:85:4f:5e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
        Validity
            Not Before: Jun 15 03:35:00 2024 GMT
            Not After : Jun 14 03:40:00 2025 GMT
        Subject: CN=A54FB8574436CD850C8341E260CABD8C4D4D4F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:fb:eb:03:ef:e8:9b:eb:3c:31:cd:45:dc:
                    10:d5:d9:fb:d2:4a:e4:71:fe:8b:0f:53:55:67:21:
                    8a:f7:03:bf:29:8a:62:8d:a9:e9:4c:ab:f5:75:c1:
                    8e:11:2e:26:c4:06:06:f6:b6:59:5a:05:51:74:95:
                    4d:c7:5b:cc:54:4a:f2:a0:b6:bc:8f:26:3d:71:93:
                    6e:b4:50:87:98:8c:9d:f4:94:fe:78:08:1f:19:93:
                    fb:26:5a:b1:d2:10:3e:32:7a:77:bb:87:fc:c5:bf:
                    c8:dc:84:88:b5:4e:33:c2:9b:d3:34:e6:bf:78:3f:
                    50:16:2d:83:69:6b:09:cf:e8:95:4f:e5:03:3d:4c:
                    34:03:f2:87:e8:a5:a6:f3:8b:2f:9d:a2:f3:82:bd:
                    9e:47:ab:d8:b5:fe:3c:31:b4:34:f7:96:1e:c6:93:
                    3a:9b:da:f8:1c:1a:77:ff:c9:c3:45:11:88:42:9b:
                    fa:fe:7c:f4:98:b1:db:4a:e7:5e:37:e8:d3:17:4f:
                    e1:94:ba:44:b4:64:20:b0:0d:5a:93:30:17:b2:b3:
                    d3:d3:e7:c6:b8:74:cd:31:24:6d:90:c3:b4:44:62:
                    29:45:37:11:f0:c4:fc:5c:85:6f:ae:11:e1:17:17:
                    82:91:c5:eb:a8:63:0b:d8:c2:5e:85:ce:c8:82:bd:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4F:B8:57:44:36:CD:85:0C:83:41:E2:60:CA:BD:8C:4D:4D:4F:78
            X509v3 Authority Key Identifier:
                keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d940:babe::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:59:2a:f5:3f:c2:0f:65:54:12:04:bf:7a:0a:3f:20:ac:90:
         8e:a4:f7:0a:38:37:f8:a5:4e:0c:df:fc:54:f0:f0:2c:48:68:
         44:80:26:54:82:32:27:b4:d5:2a:ce:15:8a:a7:3b:20:f3:4f:
         d1:0d:4b:e1:57:62:a5:fc:f3:57:47:e8:e3:3c:7b:cf:a3:0e:
         54:83:ba:d6:c7:90:3e:35:6d:a7:7a:3a:0a:4e:2f:4f:10:a8:
         65:d3:74:96:94:46:66:ad:c0:dd:c9:6e:02:f9:7b:f8:a4:a6:
         ab:7f:bc:06:55:22:04:76:85:90:e6:95:ac:68:55:ad:05:10:
         6d:a2:c2:5d:d8:51:82:f3:ae:39:ae:03:d3:a1:8d:54:21:77:
         01:42:28:90:ae:c6:19:b4:37:d3:ac:e8:22:4d:ee:1a:4e:4e:
         67:6f:f8:32:f4:52:fc:56:9e:fc:73:e4:dd:33:4a:07:27:ad:
         66:75:b6:34:11:5e:16:39:00:34:e6:8c:14:42:cc:d6:aa:67:
         aa:1c:33:6f:b7:98:a9:a9:6c:f8:70:c5:eb:cf:85:91:49:0b:
         a7:4d:42:cc:fc:3e:16:81:29:34:a7:34:a9:89:47:1e:4d:ca:
         5c:2c:b9:78:03:df:bf:3e:a4:ab:18:57:a2:b4:7f:66:24:88:
         d2:ed:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org