Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa
File:                     323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (raw, json)
Hash identifier:          RW4+9149ZM/F1tdzd6+xZBwRW+NV7wFVW8ERVh6uUew=
Subject key identifier:   6F:D8:BC:A6:34:54:E1:0D:C1:FB:BA:43:FA:49:B6:85:97:7D:14:5A
Certificate issuer:       /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C
Certificate serial:       4F38313CC6A5CD3B5CC303BFBBC3E46C7E5B9E6F
Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa
Signing time:             Wed 27 Dec 2023 10:18:04 +0000
ROA not before:           Wed 27 Dec 2023 10:13:04 +0000
ROA not after:            Wed 25 Dec 2024 10:18:04 +0000
asID:                     141108
IP address blocks:        2001:df5:c80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl
                          rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:38:31:3c:c6:a5:cd:3b:5c:c3:03:bf:bb:c3:e4:6c:7e:5b:9e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C
        Validity
            Not Before: Dec 27 10:13:04 2023 GMT
            Not After : Dec 25 10:18:04 2024 GMT
        Subject: CN=6FD8BCA63454E10DC1FBBA43FA49B685977D145A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ca:81:0c:15:35:d4:68:f2:87:8b:04:96:ed:
                    3d:79:b0:f9:6d:b2:14:24:5d:fe:97:f0:2a:59:19:
                    56:3c:65:b0:16:87:ca:4c:6c:e0:12:68:cb:7d:14:
                    ce:48:8d:95:49:00:ff:02:85:57:b3:80:d1:0a:26:
                    c5:aa:75:07:9d:b3:2a:0c:a1:93:ad:b6:29:da:7e:
                    5a:6b:d9:b2:8c:0c:8a:60:a1:1d:37:51:a8:83:df:
                    30:e1:23:ee:e4:2b:e6:1c:05:4a:61:56:6d:cc:32:
                    4e:76:69:79:1c:5c:71:8b:8b:3c:9e:53:7d:4d:6d:
                    86:93:ed:0a:c7:2b:49:6b:0b:09:33:8a:b9:6f:23:
                    69:07:18:3d:9c:00:0f:b2:a2:cc:eb:af:d3:ec:56:
                    04:a8:35:0b:7e:31:8c:4b:28:2b:c9:0f:57:cf:7c:
                    a8:02:48:77:4e:52:89:41:02:08:f3:15:e7:c0:2f:
                    57:4b:1a:12:68:9f:d8:3e:ae:b0:ab:31:cd:9b:90:
                    8d:17:5b:67:52:97:9f:58:4e:f4:2d:3e:63:76:22:
                    34:cf:66:6c:e8:77:28:c3:9b:8f:8c:44:99:4d:c3:
                    43:c5:0d:14:7d:a4:db:2e:32:7e:d1:20:71:a7:7d:
                    8c:a0:e6:05:df:29:e5:85:36:3c:0a:74:93:2d:37:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D8:BC:A6:34:54:E1:0D:C1:FB:BA:43:FA:49:B6:85:97:7D:14:5A
            X509v3 Authority Key Identifier:
                keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:d1:b0:52:c2:d2:98:d0:22:ef:7f:51:81:7e:67:23:79:b3:
         81:04:d1:d4:9a:e6:a7:72:cb:b2:f0:c2:0f:42:69:7f:1a:11:
         1d:17:20:2c:46:d3:9d:77:1d:82:f8:7e:34:91:8e:5e:2b:8c:
         3e:2a:58:ff:ba:a9:61:4d:21:f4:6f:1f:00:c4:89:c2:6a:87:
         8b:59:4d:9e:88:de:c4:dd:19:fd:3b:64:17:2e:28:f2:08:be:
         a6:47:2d:3d:37:c1:56:04:d3:52:65:2a:a9:bd:8c:89:d6:df:
         06:dc:16:e2:83:d1:1c:b9:16:1e:48:8a:dd:d5:52:fb:6e:e9:
         28:57:ea:fa:5c:73:b3:d2:af:53:c7:17:78:c9:1b:cb:a7:2b:
         50:c4:73:1b:72:79:d3:fb:7b:d3:6a:4f:f2:65:33:22:24:2b:
         dc:b4:54:bb:e4:06:a0:76:0d:77:ab:c0:38:d8:86:d7:97:a4:
         09:36:6f:d6:e4:16:be:fb:77:3a:91:01:6a:9c:b4:92:f8:73:
         f4:53:20:f3:3b:1e:48:9c:bc:0d:7a:8d:86:43:c4:74:78:88:
         7e:cd:5b:50:c3:db:29:98:fe:1a:9f:34:1f:d5:a1:b9:c2:eb:
         58:21:cd:9d:86:73:b5:52:79:97:a1:15:73:62:5d:62:75:42:
         87:00:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:02 2024 by rpki-client on console-ams.rpki-client.org