Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa
File:                     323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (raw, json)
Hash identifier:          wZNP2V29Z/jMnx5FE2pxqCWbmr2oULBwAtIiARov+Sw=
Subject key identifier:   31:C0:71:B6:F6:57:27:AB:CC:9E:52:95:8A:77:51:FF:3E:D1:5B:0D
Certificate issuer:       /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A
Certificate serial:       B13E524E2815E2F58FC6112383CB311E39F44E
Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa
Signing time:             Thu 31 Oct 2024 02:05:03 +0000
ROA not before:           Thu 31 Oct 2024 02:00:03 +0000
ROA not after:            Thu 30 Oct 2025 02:05:03 +0000
asID:                     136085
IP address blocks:        2001:df0:7500::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl
                          rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b1:3e:52:4e:28:15:e2:f5:8f:c6:11:23:83:cb:31:1e:39:f4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A
        Validity
            Not Before: Oct 31 02:00:03 2024 GMT
            Not After : Oct 30 02:05:03 2025 GMT
        Subject: CN=31C071B6F65727ABCC9E52958A7751FF3ED15B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0d:0d:2d:00:24:3c:1f:d6:da:b1:2c:63:9a:
                    75:ec:81:a1:9e:c2:16:67:d3:1a:aa:f0:ad:8b:b5:
                    f6:43:ec:54:7c:68:cc:8e:5b:e7:9f:3c:55:fe:1d:
                    cd:17:02:3e:3c:09:c6:e4:de:20:f8:b0:db:03:bb:
                    98:56:17:6e:bb:c9:90:41:4f:9b:bf:dc:f0:8a:64:
                    43:ae:b8:09:c9:ef:ff:ad:e4:2d:f9:6e:1e:7a:37:
                    19:2c:43:f6:e6:97:ef:dc:01:b4:ac:df:6c:11:bf:
                    a8:fb:5c:21:2e:de:49:3c:95:8b:02:6c:95:1f:e1:
                    40:b1:d0:34:c6:f5:e7:52:a2:73:98:b3:ae:ff:01:
                    41:d4:22:7f:0b:36:27:da:37:31:c3:9e:63:2d:b6:
                    35:d2:c8:c3:7a:ba:e5:07:f3:19:1e:20:81:69:6f:
                    5e:5c:23:d8:79:a9:7d:62:e3:78:92:47:e8:28:5a:
                    c1:d6:f4:79:25:81:49:ec:5a:d7:6a:ed:ea:87:11:
                    82:63:7c:9b:45:65:48:55:0b:53:88:cf:c2:9c:6a:
                    6f:3b:2a:60:f4:06:14:18:84:b4:4d:ca:b2:ee:09:
                    70:38:51:5c:7e:75:3f:ce:3d:ed:f3:12:42:64:4d:
                    e3:e3:21:1b:96:b6:e4:dc:c5:1f:90:cf:a1:4a:9c:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C0:71:B6:F6:57:27:AB:CC:9E:52:95:8A:77:51:FF:3E:D1:5B:0D
            X509v3 Authority Key Identifier:
                keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:7500::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:ad:9f:67:fa:0d:de:b8:e7:9b:45:d5:6f:d2:ae:4f:a3:c1:
         8c:ae:39:c1:03:7e:54:ea:9c:3d:02:a9:5d:14:6d:6b:c5:b0:
         74:aa:6f:50:c6:75:1a:1c:ef:a2:9b:47:65:cf:5c:1c:6c:39:
         8a:d1:8e:2d:c9:2b:0f:20:94:b4:04:c2:2e:28:de:6a:cd:70:
         26:20:97:6a:78:80:a4:63:e5:07:aa:16:35:94:b3:bd:85:dd:
         c9:0d:68:eb:af:49:b2:70:70:a6:e3:a8:63:0b:02:16:37:78:
         01:40:87:12:bb:24:99:0e:d4:cb:14:e9:a2:0f:c4:8f:9d:5c:
         26:c7:0f:cb:81:63:52:56:00:04:98:6e:06:40:66:62:07:11:
         b1:83:53:96:36:46:24:87:ce:b3:a0:cf:3b:d4:fb:8f:e1:5d:
         75:e6:fd:e3:9e:be:c5:42:41:43:38:13:40:ec:59:f2:d0:67:
         37:46:dd:2f:62:33:49:0a:c1:b5:1b:e6:6d:20:b0:6a:f5:bb:
         7f:3d:dd:4a:6b:58:fb:6e:98:e2:04:e3:72:65:1d:f1:00:a4:
         65:6e:a0:20:20:56:57:75:9d:36:5b:59:3b:b3:a2:99:e0:bd:
         1c:11:e3:7f:6a:85:96:3a:18:7b:07:c1:cf:4c:2a:90:f3:66:
         64:02:1f:18
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUALE+Uk4oFeL1j8YRI4PLMR459E4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0RE
QzM0RUE2QTAeFw0yNDEwMzEwMjAwMDNaFw0yNTEwMzAwMjA1MDNaMDMxMTAvBgNV
BAMTKDMxQzA3MUI2RjY1NzI3QUJDQzlFNTI5NThBNzc1MUZGM0VEMTVCMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlDQ0tACQ8H9basSxjmnXsgaGe
whZn0xqq8K2LtfZD7FR8aMyOW+efPFX+Hc0XAj48Ccbk3iD4sNsDu5hWF267yZBB
T5u/3PCKZEOuuAnJ7/+t5C35bh56NxksQ/bml+/cAbSs32wRv6j7XCEu3kk8lYsC
bJUf4UCx0DTG9edSonOYs67/AUHUIn8LNifaNzHDnmMttjXSyMN6uuUH8xkeIIFp
b15cI9h5qX1i43iSR+goWsHW9HklgUnsWtdq7eqHEYJjfJtFZUhVC1OIz8Kcam87
KmD0BhQYhLRNyrLuCXA4UVx+dT/OPe3zEkJkTePjIRuWtuTcxR+Qz6FKnLclAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMcBxtvZXJ6vMnlKVindR/z7RWw0wHwYDVR0j
BBgwFoAUSFALAMYdobDsRITgeR27zdw06mowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YzI3ODc0Ny02YWM3LTRmODctOWIyYi0yMTM1OTI5NGYwMzQvMC80ODUwMEIwMEM2
MURBMUIwRUM0NDg0RTA3OTFEQkJDRERDMzRFQTZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0REQzM0
RUE2QS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjMjc4NzQ3LTZhYzctNGY4Ny05
YjJiLTIxMzU5Mjk0ZjAzNC8wLzMyMzAzMDMxM2E2NDY2MzAzYTM3MzUzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8HUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMrZ9n+g3euOebRdVv0q5Po8GMrjnBA35U
6pw9AqldFG1rxbB0qm9QxnUaHO+im0dlz1wcbDmK0Y4tySsPIJS0BMIuKN5qzXAm
IJdqeICkY+UHqhY1lLO9hd3JDWjrr0mycHCm46hjCwIWN3gBQIcSuySZDtTLFOmi
D8SPnVwmxw/LgWNSVgAEmG4GQGZiBxGxg1OWNkYkh86zoM871PuP4V115v3jnr7F
QkFDOBNA7Fny0Gc3Rt0vYjNJCsG1G+ZtILBq9bt/Pd1Ka1j7bpjiBONyZR3xAKRl
bqAgIFZXdZ02W1k7s6KZ4L0cEeN/aoWWOhh7B8HPTCqQ82ZkAh8Y
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org