Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa
File:                     323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (raw, json)
Hash identifier:          h6RVxpLnAMaDIfRa4gc3qjSTKqM6GqzTQIycSjUOXA8=
Subject key identifier:   F4:70:C1:15:B2:AD:03:65:69:F0:A0:52:7B:5D:2E:B9:54:A0:5D:D4
Certificate issuer:       /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
Certificate serial:       71B231044C154D543093360BB02B835B685853AA
Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa
Signing time:             Wed 18 Sep 2024 05:02:22 +0000
ROA not before:           Wed 18 Sep 2024 04:57:22 +0000
ROA not after:            Wed 17 Sep 2025 05:02:22 +0000
asID:                     135457
IP address blocks:        2001:df2:be00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl
                          rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b2:31:04:4c:15:4d:54:30:93:36:0b:b0:2b:83:5b:68:58:53:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
        Validity
            Not Before: Sep 18 04:57:22 2024 GMT
            Not After : Sep 17 05:02:22 2025 GMT
        Subject: CN=F470C115B2AD036569F0A0527B5D2EB954A05DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:e6:ef:c1:96:b3:36:d4:b8:e3:1c:ba:f1:
                    7c:97:f8:37:a5:d0:ca:0e:f4:ad:68:43:bd:b0:f1:
                    6d:2f:31:32:42:8b:46:76:03:37:34:de:da:d5:5a:
                    e8:ac:8a:4c:ce:f1:f5:40:f0:7f:02:54:ed:64:d4:
                    d3:6d:da:fd:cb:7a:71:28:fb:44:16:67:8b:c5:c7:
                    bc:4c:1c:e5:4c:b5:3c:eb:c5:e7:24:be:8c:63:84:
                    54:d3:73:c1:1c:7d:da:4d:f6:9d:ac:e1:95:3b:84:
                    b2:8a:59:8a:b0:ba:40:e6:02:59:c4:d7:f3:51:28:
                    df:a4:a6:22:c0:58:7a:75:18:a8:22:71:85:44:4e:
                    12:84:44:c2:5a:51:78:01:78:d7:bb:ff:f7:d5:72:
                    c4:70:f4:f2:d9:a8:ee:4d:77:90:6a:d6:ae:98:ae:
                    ac:9a:22:7c:0f:a1:6b:21:c0:3e:74:50:68:09:3a:
                    eb:6c:0a:43:80:9a:8e:b6:a4:67:43:cf:c5:4a:0e:
                    b9:7b:ba:76:b9:70:18:a7:3b:29:37:12:b8:c6:fe:
                    0d:93:5c:2b:2f:e4:8a:1d:f2:77:54:9f:1a:46:6e:
                    8e:97:f4:e7:19:7a:e1:17:44:75:bf:2d:67:f3:e1:
                    4a:77:31:ce:60:e2:92:5c:30:5c:45:40:e7:58:c0:
                    54:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:70:C1:15:B2:AD:03:65:69:F0:A0:52:7B:5D:2E:B9:54:A0:5D:D4
            X509v3 Authority Key Identifier:
                keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:be00::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:c5:49:e4:96:76:50:51:be:89:9a:0e:3b:bf:5d:c1:ef:f7:
         d0:1f:cf:aa:21:2f:ad:40:10:e0:a2:f3:8f:9c:fe:58:91:00:
         bc:c4:4e:f6:f0:5f:f6:c1:b4:14:5c:1d:3e:ec:00:46:5c:d4:
         de:3a:ad:eb:b4:2d:35:4d:74:ac:00:e0:65:68:c2:0c:ef:98:
         b6:e3:86:83:34:87:3c:ef:d6:4f:d9:7c:12:46:a0:1b:dc:b3:
         70:78:e1:fd:ba:a1:67:b0:2e:1c:6c:f3:ab:49:4c:6d:9d:e0:
         5d:7b:bf:59:cb:b6:cc:ae:a6:1e:1f:ad:d2:01:3f:9e:e7:ce:
         72:0f:ff:95:62:52:83:5e:b2:5c:2d:04:a5:a5:ac:18:75:54:
         28:4f:27:81:df:d2:7f:3a:08:8a:4d:8a:ad:11:dd:f3:2c:8f:
         af:57:e3:49:7b:44:d8:8e:13:08:33:b2:a1:7b:31:66:13:7b:
         27:5d:84:f4:a7:7d:0d:c2:2b:39:80:e8:e7:c6:21:2c:37:f0:
         11:13:51:a9:ea:f1:0d:2f:3d:39:77:46:d4:26:53:33:58:82:
         23:13:98:4d:63:00:9e:6c:12:4c:ee:56:fe:aa:54:7f:fe:c7:
         52:23:10:2b:d9:eb:db:c3:21:05:13:8d:8b:81:82:c9:0a:a3:
         bb:24:db:e0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUcbIxBEwVTVQwkzYLsCuDW2hYU6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE
MERDMTdGMjAeFw0yNDA5MTgwNDU3MjJaFw0yNTA5MTcwNTAyMjJaMDMxMTAvBgNV
BAMTKEY0NzBDMTE1QjJBRDAzNjU2OUYwQTA1MjdCNUQyRUI5NTRBMDVERDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxaebvwZazNtS44xy68XyX+Del
0MoO9K1oQ72w8W0vMTJCi0Z2Azc03trVWuisikzO8fVA8H8CVO1k1NNt2v3LenEo
+0QWZ4vFx7xMHOVMtTzrxeckvoxjhFTTc8EcfdpN9p2s4ZU7hLKKWYqwukDmAlnE
1/NRKN+kpiLAWHp1GKgicYVEThKERMJaUXgBeNe7//fVcsRw9PLZqO5Nd5Bq1q6Y
rqyaInwPoWshwD50UGgJOutsCkOAmo62pGdDz8VKDrl7una5cBinOyk3ErjG/g2T
XCsv5Iod8ndUnxpGbo6X9OcZeuEXRHW/LWfz4Up3Mc5g4pJcMFxFQOdYwFS/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU9HDBFbKtA2Vp8KBSe10uuVSgXdQwHwYDVR0j
BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz
QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD
MTdGMi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyNzgwZjg1LWVmMmYtNGNmOC1h
NGI4LTUyMjVjNDViOTZhMS8wLzMyMzAzMDMxM2E2NDY2MzIzYTYyNjUzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM1MzQzNTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8r4AMA0GCSqGSIb3DQEBCwUAA4IBAQBvxUnklnZQUb6Jmg47v13B7/fQH8+qIS+t
QBDgovOPnP5YkQC8xE728F/2wbQUXB0+7ABGXNTeOq3rtC01TXSsAOBlaMIM75i2
44aDNIc879ZP2XwSRqAb3LNweOH9uqFnsC4cbPOrSUxtneBde79Zy7bMrqYeH63S
AT+e585yD/+VYlKDXrJcLQSlpawYdVQoTyeB39J/OgiKTYqtEd3zLI+vV+NJe0TY
jhMIM7KhezFmE3snXYT0p30Nwis5gOjnxiEsN/ARE1Gp6vENLz05d0bUJlMzWIIj
E5hNYwCebBJM7lb+qlR//sdSIxAr2evbwyEFE42LgYLJCqO7JNvg
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:52:35 2024 by rpki-client on console-fra.rpki-client.org