Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa
File:                     323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (raw, json)
Hash identifier:          BplWen4+5U2uRfC3vAnj7fLGDxpnWfua0Y+KIqnmYg4=
Subject key identifier:   F3:16:9F:11:D3:FC:DF:33:5B:22:5E:57:83:8A:15:A4:9A:C7:F2:7C
Certificate issuer:       /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681
Certificate serial:       39A80A98B25CE09130583A8A798D22AADB136608
Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa
Signing time:             Wed 10 Apr 2024 17:00:02 +0000
ROA not before:           Wed 10 Apr 2024 16:55:02 +0000
ROA not after:            Wed 09 Apr 2025 17:00:02 +0000
asID:                     137351
IP address blocks:        2001:df4:f900::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl
                          rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a8:0a:98:b2:5c:e0:91:30:58:3a:8a:79:8d:22:aa:db:13:66:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681
        Validity
            Not Before: Apr 10 16:55:02 2024 GMT
            Not After : Apr  9 17:00:02 2025 GMT
        Subject: CN=F3169F11D3FCDF335B225E57838A15A49AC7F27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:77:28:b1:cd:3a:8d:9e:3e:71:76:58:0b:
                    5d:6c:07:f7:f2:7d:8b:97:46:e5:d9:ff:88:9f:3e:
                    70:8e:ca:ca:72:49:50:af:9c:47:f0:83:1b:f8:75:
                    c7:4f:80:9d:18:73:8b:c0:ba:72:66:f4:63:e5:db:
                    b3:c2:66:a0:9a:f2:7f:7d:2a:9c:fc:bb:f8:ba:68:
                    02:a1:7b:f2:82:1f:e0:02:0c:0c:13:af:c3:69:1b:
                    c9:8f:dc:25:c2:dc:0a:63:7a:2a:31:95:cb:3c:d7:
                    03:fe:1e:f9:ef:f6:92:c1:7f:53:c1:94:13:2d:13:
                    e2:5c:de:16:76:00:a4:82:0a:b9:74:5e:04:0f:5e:
                    cc:77:d4:4c:69:4e:b6:88:ef:e9:12:d5:16:c2:79:
                    28:d1:ec:ca:81:f9:1f:3d:a6:57:54:49:d1:74:39:
                    fd:50:32:f7:a6:e3:83:12:90:ac:25:95:00:50:7c:
                    8d:27:9c:5f:c4:a5:9e:2b:16:d1:36:e1:31:dd:0d:
                    88:58:19:95:10:46:ec:a2:57:fe:16:77:b9:06:e9:
                    cc:39:91:07:79:2d:3b:eb:e6:0d:e8:09:13:d6:06:
                    a4:0a:0d:5e:c5:65:3b:fe:a9:6f:9c:1f:e7:51:79:
                    b7:79:fa:f3:1e:91:3c:b3:25:9d:18:9d:da:8d:6d:
                    87:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:16:9F:11:D3:FC:DF:33:5B:22:5E:57:83:8A:15:A4:9A:C7:F2:7C
            X509v3 Authority Key Identifier:
                keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:f900::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:5e:12:de:6f:41:b0:ed:41:ee:d9:1d:49:e0:23:a9:75:d7:
         6f:70:58:5a:a9:bf:af:f3:13:7e:c4:6f:1c:b8:31:71:eb:fb:
         24:bf:31:8a:04:99:1f:62:17:b6:5a:60:e6:8c:06:95:24:37:
         ea:ac:7b:df:37:0d:a7:53:c9:f4:82:00:20:8d:74:03:54:a0:
         2e:5a:33:5a:d9:c7:7c:c7:19:a6:3a:f2:8f:26:e9:af:bb:ba:
         59:83:a1:2a:22:4f:9d:03:53:a4:28:4c:29:11:f5:cc:a0:c7:
         5a:f2:87:bf:92:58:24:d3:3f:c1:04:96:82:74:72:2e:b3:a0:
         62:cf:2e:e2:1e:44:6f:92:16:3e:61:21:f3:0e:cb:0b:1a:d1:
         c4:a6:ba:c7:fb:b7:82:13:4e:d3:4c:d7:e5:1e:fb:e7:eb:16:
         83:75:85:fb:21:7b:fd:2d:b9:e2:b6:34:99:b4:04:94:12:8d:
         20:e6:36:d5:d2:fa:9f:f3:c4:e3:40:78:ba:2f:a5:8a:63:be:
         9a:1e:cd:61:97:e9:21:a4:b2:0f:37:3b:3f:20:2c:1c:29:73:
         73:df:52:1f:75:78:d8:44:8d:09:5f:c3:52:fb:19:9f:0b:af:
         29:96:97:03:80:3b:8e:1f:8b:ae:2d:1f:9c:60:1f:16:74:1a:
         ec:05:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:08 2024 by rpki-client on console-ams.rpki-client.org