Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/323430323a313230303a3a2f33322d3438203d3e203234353233.roa
File:                     323430323a313230303a3a2f33322d3438203d3e203234353233.roa (raw, json)
Hash identifier:          zXZN4XBzb/xjE5PUhLqfsrwTCA7e+BucjzfZkW492Ro=
Subject key identifier:   C9:90:E9:E9:D3:96:B9:1B:EB:43:6C:63:BF:32:13:F5:43:8C:98:A4
Certificate issuer:       /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial:       758720B7E98E38E1C16FAB176224B00EB589CC0D
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/323430323a313230303a3a2f33322d3438203d3e203234353233.roa
Signing time:             Mon 01 Jul 2024 01:03:58 +0000
ROA not before:           Mon 01 Jul 2024 00:58:58 +0000
ROA not after:            Mon 30 Jun 2025 01:03:58 +0000
asID:                     24523
IP address blocks:        2402:1200::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
                          rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:87:20:b7:e9:8e:38:e1:c1:6f:ab:17:62:24:b0:0e:b5:89:cc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
        Validity
            Not Before: Jul  1 00:58:58 2024 GMT
            Not After : Jun 30 01:03:58 2025 GMT
        Subject: CN=C990E9E9D396B91BEB436C63BF3213F5438C98A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:23:2c:6b:8d:3a:bf:a9:66:8e:bc:43:82:
                    3e:11:8f:67:8c:1e:93:47:db:62:41:17:08:5e:41:
                    7f:c1:cd:96:21:b9:ee:3c:fc:64:0f:ab:71:e7:ea:
                    1d:63:a7:7c:a6:82:09:4c:0d:00:a8:1a:15:4c:fa:
                    16:3f:9d:e4:16:ed:fd:b0:10:60:ca:11:56:de:8a:
                    41:3e:fb:9c:77:e7:3d:70:3c:73:f5:3b:9f:f7:0a:
                    82:3f:a6:90:ae:2b:ab:a4:4d:fb:ab:c6:eb:14:8a:
                    d3:96:d1:6e:a8:42:b1:b1:67:89:6d:2a:34:a0:9a:
                    38:c7:30:15:fd:de:48:7e:8b:e3:70:9b:a2:ae:cd:
                    a9:f5:1c:14:5e:de:f5:72:56:05:fe:a5:97:d7:56:
                    da:96:e5:c9:27:88:83:15:b5:28:6a:fc:7e:34:00:
                    6f:76:ba:a2:53:6f:67:df:cf:d7:4f:95:ae:df:82:
                    9b:d5:6d:1f:7f:31:cf:56:c1:cd:74:61:55:d5:59:
                    4e:5f:cf:c5:8f:c5:9d:2e:d1:2d:9a:de:f3:26:05:
                    2d:a7:c5:e1:81:ad:75:79:e7:2f:3e:e0:c3:0e:69:
                    bf:13:c5:f0:7d:57:d1:d9:38:1d:b0:85:9e:6e:53:
                    f8:d2:2c:2b:57:2c:4a:20:2e:a7:21:1f:03:48:e5:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:90:E9:E9:D3:96:B9:1B:EB:43:6C:63:BF:32:13:F5:43:8C:98:A4
            X509v3 Authority Key Identifier:
                keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/323430323a313230303a3a2f33322d3438203d3e203234353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1200::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:d4:aa:37:e5:ae:e8:8a:0a:c1:e2:9d:d1:a8:b9:c8:d8:e9:
         84:b9:27:bb:20:1d:47:e8:4c:f8:61:b5:59:33:fb:7f:6b:fc:
         7d:b3:97:f5:d6:39:13:e6:3f:ca:86:84:18:4a:11:24:a5:74:
         ba:a1:b9:dc:93:6e:9b:5b:d6:62:4d:30:eb:34:08:91:df:e5:
         4e:6b:45:d5:81:5f:8e:f9:80:71:41:1a:9f:03:0f:83:cc:d9:
         48:2d:e6:0c:79:74:cc:9b:b9:23:9d:d5:09:b8:87:b4:97:b8:
         3a:73:49:29:e7:4c:ba:53:64:c0:e8:f7:8e:3d:49:24:a4:da:
         85:f0:51:c9:c0:d9:e5:a2:48:5d:df:53:93:ba:72:28:0a:30:
         80:34:ad:c1:76:ac:ea:2d:4b:bd:af:a2:39:b0:89:a0:da:20:
         38:a0:9a:90:23:98:33:64:aa:20:fd:3f:2d:80:17:3f:ed:9c:
         e3:a2:e6:8e:ab:ab:e3:98:69:51:71:a0:2e:ff:0b:b0:b5:db:
         92:70:eb:37:d9:e7:29:6a:e7:57:ee:29:cd:d0:f8:b1:d8:9e:
         f8:fd:ba:3b:a5:9d:b9:b1:6f:32:d4:a5:56:5f:f7:83:1a:9d:
         3a:c8:df:6f:09:3a:03:1c:37:bf:f1:b0:a9:08:a8:ab:fe:fa:
         ad:4c:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org