Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa
File:                     323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa (raw, json)
Hash identifier:          9FTAGKiQmeFJOlFLN7erM3ySnha6qhZQ4aZ77M+n87k=
Subject key identifier:   D4:FE:49:59:30:E9:68:D4:2F:8F:EB:E5:91:9A:8E:BA:87:09:EC:42
Certificate issuer:       /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial:       1A8FDF93B2C432A3B6CD6F245D0328DC717F446E
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa
Signing time:             Sat 15 Jun 2024 03:42:33 +0000
ROA not before:           Sat 15 Jun 2024 03:37:33 +0000
ROA not after:            Sat 14 Jun 2025 03:42:33 +0000
asID:                     136088
IP address blocks:        2400:d940:beca::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
                          rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 08:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8f:df:93:b2:c4:32:a3:b6:cd:6f:24:5d:03:28:dc:71:7f:44:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
        Validity
            Not Before: Jun 15 03:37:33 2024 GMT
            Not After : Jun 14 03:42:33 2025 GMT
        Subject: CN=D4FE495930E968D42F8FEBE5919A8EBA8709EC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:5c:b8:fa:1b:ce:35:4a:d2:8c:32:89:0c:
                    67:6f:97:f7:5e:2a:0f:41:25:cd:8d:d5:d7:94:eb:
                    32:a6:f6:75:2c:de:f7:e9:0d:9e:71:86:e3:c0:58:
                    38:00:2f:b3:02:56:e5:14:6d:46:20:27:3a:54:7b:
                    ff:f3:a0:0c:02:eb:2a:4c:20:5f:cf:8b:97:8d:94:
                    a1:f9:79:d1:2f:9d:e2:2b:76:50:b9:a0:85:5c:15:
                    59:54:d9:1c:36:3f:21:67:20:69:f0:56:af:6c:b1:
                    9d:aa:e9:ba:8e:a4:69:f4:57:4f:ed:39:43:64:cf:
                    ac:46:49:d4:25:3a:9e:c4:29:5c:68:e2:5b:60:5b:
                    51:b5:7b:16:63:4b:d2:ad:da:7d:d2:53:a1:88:f6:
                    6f:34:38:da:e6:71:53:a7:8e:e9:36:19:c4:2c:12:
                    b1:58:55:6d:13:1c:ce:99:a8:ee:a6:93:14:d8:f3:
                    b0:04:ce:6d:26:f2:15:bc:f7:c1:8a:10:3c:de:ce:
                    f0:ed:92:8d:e8:3e:05:3e:b8:d9:66:4a:d8:06:9b:
                    61:b7:9d:fe:3b:1e:43:cd:f6:7a:67:cc:18:03:0e:
                    7c:01:57:2b:c6:5b:ee:f7:ec:c5:ac:3d:66:fe:8e:
                    24:b7:d5:31:67:3c:e1:65:02:7b:db:95:ca:51:9e:
                    83:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FE:49:59:30:E9:68:D4:2F:8F:EB:E5:91:9A:8E:BA:87:09:EC:42
            X509v3 Authority Key Identifier:
                keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d940:beca::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:66:13:ce:ed:e6:cf:f7:47:8e:4f:3e:48:3b:43:a5:d3:f8:
         c5:fd:10:05:95:c3:0c:c7:75:06:26:e3:7c:06:7a:48:14:6a:
         7d:3d:91:75:ff:54:08:e5:35:d6:53:d7:8f:b2:4e:e4:b7:ff:
         17:9e:f2:f3:ce:4a:d7:9b:cd:7d:88:17:cc:35:e3:26:86:37:
         97:c5:e4:78:ba:31:2a:4b:a7:ab:65:06:c9:19:28:bb:01:8f:
         02:c6:08:b2:ba:d6:14:34:fb:60:44:a8:ef:00:0b:71:ef:71:
         9b:c7:8d:5c:cb:a3:58:4f:f4:ad:bc:cc:f8:f2:ef:e6:dc:7d:
         78:8e:49:30:76:3e:7e:94:75:43:df:e4:34:a1:e7:9b:62:8d:
         d3:b1:82:13:46:04:4c:a7:ac:65:c8:bc:d1:c8:5b:6f:30:9f:
         1f:66:5b:c6:db:ee:5e:b4:2e:37:e4:a2:b2:ad:be:1c:8c:a2:
         19:89:3f:a2:12:9f:85:c8:99:19:45:ef:7a:98:b7:d2:b3:ee:
         68:eb:54:1e:57:b5:79:62:f3:73:bc:cc:84:73:25:4d:f2:77:
         df:fc:61:04:6d:ec:22:7e:47:8b:9f:70:15:6e:01:9a:be:e9:
         b8:24:5f:9d:6c:09:08:24:23:f8:f9:71:90:b8:b5:eb:40:94:
         b7:ec:ea:eb
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUGo/fk7LEMqO2zW8kXQMo3HF/RG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE
MEJFOTIzRjAeFw0yNDA2MTUwMzM3MzNaFw0yNTA2MTQwMzQyMzNaMDMxMTAvBgNV
BAMTKEQ0RkU0OTU5MzBFOTY4RDQyRjhGRUJFNTkxOUE4RUJBODcwOUVDNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeuFy4+hvONUrSjDKJDGdvl/de
Kg9BJc2N1deU6zKm9nUs3vfpDZ5xhuPAWDgAL7MCVuUUbUYgJzpUe//zoAwC6ypM
IF/Pi5eNlKH5edEvneIrdlC5oIVcFVlU2Rw2PyFnIGnwVq9ssZ2q6bqOpGn0V0/t
OUNkz6xGSdQlOp7EKVxo4ltgW1G1exZjS9Kt2n3SU6GI9m80ONrmcVOnjuk2GcQs
ErFYVW0THM6ZqO6mkxTY87AEzm0m8hW898GKEDzezvDtko3oPgU+uNlmStgGm2G3
nf47HkPN9npnzBgDDnwBVyvGW+737MWsPWb+jiS31TFnPOFlAnvblcpRnoNZAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU1P5JWTDpaNQvj+vlkZqOuocJ7EIwHwYDVR0j
BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2
QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF
OTIzRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05
YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhNjI2NTYzNjEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
ANlAvsowDQYJKoZIhvcNAQELBQADggEBACdmE87t5s/3R45PPkg7Q6XT+MX9EAWV
wwzHdQYm43wGekgUan09kXX/VAjlNdZT14+yTuS3/xee8vPOStebzX2IF8w14yaG
N5fF5Hi6MSpLp6tlBskZKLsBjwLGCLK61hQ0+2BEqO8AC3HvcZvHjVzLo1hP9K28
zPjy7+bcfXiOSTB2Pn6UdUPf5DSh55tijdOxghNGBEynrGXIvNHIW28wnx9mW8bb
7l60LjfkorKtvhyMohmJP6ISn4XImRlF73qYt9Kz7mjrVB5XtXli83O8zIRzJU3y
d9/8YQRt7CJ+R4ufcBVuAZq+6bgkX51sCQgkI/j5cZC4tetAlLfs6us=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org