Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa
File:                     323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (raw, json)
Hash identifier:          4qPDiQzMChz6FJrra7t7fkNr81nMZGV6Pf6mp9ZR4nc=
Subject key identifier:   CA:17:F1:64:21:ED:80:6F:7B:AD:9E:CB:61:1B:D9:A3:E5:24:39:D6
Certificate issuer:       /CN=35369AC685201508541197F86A8FDAC2375BE30A
Certificate serial:       29AD03128613A320BA15E8C5EAB0F2639CACFD7C
Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa
Signing time:             Thu 15 Feb 2024 08:01:02 +0000
ROA not before:           Thu 15 Feb 2024 07:56:02 +0000
ROA not after:            Thu 13 Feb 2025 08:01:02 +0000
asID:                     131769
IP address blocks:        2001:df2:ef00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl
                          rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 08:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ad:03:12:86:13:a3:20:ba:15:e8:c5:ea:b0:f2:63:9c:ac:fd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A
        Validity
            Not Before: Feb 15 07:56:02 2024 GMT
            Not After : Feb 13 08:01:02 2025 GMT
        Subject: CN=CA17F16421ED806F7BAD9ECB611BD9A3E52439D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0a:2a:ed:28:13:0a:73:8e:a5:8f:38:a8:0e:
                    0b:5f:80:0d:fb:d1:45:2b:c7:a6:02:15:97:c6:41:
                    f9:58:09:f3:b0:b4:27:9f:e9:04:14:c8:5c:44:78:
                    8e:28:b8:29:46:10:47:43:30:bd:87:3f:bc:1b:c5:
                    6a:e9:3b:b5:6b:9b:76:ef:3b:9c:2d:50:11:7a:8a:
                    75:11:e4:3b:10:8f:0b:2c:14:9d:a0:0d:69:8b:3d:
                    25:fa:a0:d3:31:6c:cd:12:41:d1:9b:42:10:74:f3:
                    4d:cb:c9:2e:ac:f2:11:8e:f4:07:35:ab:b1:7b:be:
                    8f:bb:61:cb:0e:d4:22:84:10:d2:94:31:8e:79:0a:
                    31:40:e4:38:f7:f1:f8:36:af:a4:85:0a:9a:13:d4:
                    45:ca:34:9d:e1:07:50:14:cf:58:2f:17:c2:9e:b8:
                    8a:07:bb:02:91:1d:8a:e1:6b:5b:08:b2:c1:c9:85:
                    65:a5:62:78:2c:c4:bf:24:18:1f:a2:9d:e2:74:ca:
                    de:1a:a5:22:2e:7a:b1:68:3b:7a:b8:6b:23:93:43:
                    6b:a1:ae:a7:91:62:d7:fd:7f:0a:b1:0d:8a:90:68:
                    a3:be:7a:3f:13:d9:e7:8d:5c:80:23:60:e1:ea:65:
                    92:cc:1a:0a:ca:f8:6a:03:62:ae:e6:ce:54:85:41:
                    89:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:17:F1:64:21:ED:80:6F:7B:AD:9E:CB:61:1B:D9:A3:E5:24:39:D6
            X509v3 Authority Key Identifier:
                keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:ef00::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:4f:33:92:bf:a6:86:8c:3f:53:c8:92:76:c8:20:76:f7:4d:
         c3:1d:52:a1:00:dd:2b:08:d3:d7:44:95:95:f6:90:22:69:2d:
         64:a2:7c:0b:c4:48:c2:ab:80:3a:c8:36:24:ed:50:25:b9:87:
         60:f0:77:6d:a2:d1:3a:08:9d:fb:56:c2:e7:2e:18:38:65:67:
         50:73:e4:00:0c:8e:df:c1:ea:77:61:9d:31:00:f8:ab:49:c9:
         09:f5:f5:47:2a:03:79:7e:79:74:d1:82:4d:0a:67:78:01:43:
         1c:3a:13:9b:c1:be:72:83:06:23:30:44:b2:85:57:09:73:0a:
         25:17:dc:06:fd:b7:37:39:f8:ad:3f:c2:76:fc:28:d4:fa:c5:
         57:5d:9d:bd:50:e6:17:58:14:c4:c8:d6:6f:46:f0:7a:76:b0:
         ef:3c:0d:ee:04:ce:b4:44:9a:59:36:56:cb:ba:61:e8:77:06:
         6b:64:5d:06:9f:8f:65:fd:9f:98:cc:26:28:01:c4:df:90:2a:
         b7:07:d6:c9:8b:fe:42:bc:d1:98:68:b9:c0:91:e2:b9:a4:e2:
         ba:f4:07:e0:09:f8:ff:36:7b:7b:ea:a1:a9:62:dc:f1:5f:5b:
         eb:ca:2b:44:c9:f2:3d:84:b6:22:19:a2:8f:0b:8d:0b:91:5a:
         7a:41:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:01:04 2024 by rpki-client on console-fra.rpki-client.org