Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/323430343a346563303a3a2f33322d3438203d3e20313338313339.roa
File:                     323430343a346563303a3a2f33322d3438203d3e20313338313339.roa (raw, json)
Hash identifier:          UhQecfNxj8X/lijkkF3QMUbBYbhulqbz4NupX/9Ftj0=
Subject key identifier:   E3:46:AF:EB:02:87:A7:75:74:B9:AA:83:90:56:FF:A5:BB:18:22:85
Certificate issuer:       /CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF
Certificate serial:       2D64C4DDAFFE012AAFFF9AAD34208F6ECF40732B
Authority key identifier: 8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/323430343a346563303a3a2f33322d3438203d3e20313338313339.roa
Signing time:             Thu 25 Jul 2024 02:24:27 +0000
ROA not before:           Thu 25 Jul 2024 02:19:27 +0000
ROA not after:            Thu 24 Jul 2025 02:24:27 +0000
asID:                     138139
IP address blocks:        2404:4ec0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.crl
                          rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 10:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:64:c4:dd:af:fe:01:2a:af:ff:9a:ad:34:20:8f:6e:cf:40:73:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF
        Validity
            Not Before: Jul 25 02:19:27 2024 GMT
            Not After : Jul 24 02:24:27 2025 GMT
        Subject: CN=E346AFEB0287A77574B9AA839056FFA5BB182285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:a2:f6:60:d7:d0:9d:96:2f:d0:ce:c5:fd:
                    85:38:55:bd:c4:d8:21:b5:09:17:b1:73:15:fd:1e:
                    6d:58:b9:95:f1:46:b5:35:04:c2:a0:b4:6b:3a:5c:
                    d6:42:a7:27:f2:bb:ea:d5:d3:81:36:73:27:e3:0c:
                    3f:32:6e:6d:06:12:2f:62:10:cf:22:d5:49:e3:02:
                    5e:ee:38:37:11:3a:3a:96:52:e5:0f:78:40:61:25:
                    fb:a9:36:a6:1e:dc:d5:a4:51:e0:a4:38:ac:7b:b5:
                    7c:a4:3f:3e:c1:32:e6:30:5c:1b:ab:8d:ae:dd:3a:
                    53:5f:74:11:50:0e:9e:10:af:67:fa:bb:26:ad:a4:
                    02:0b:5e:de:50:2c:de:d4:4c:aa:f9:11:f6:cc:a0:
                    5b:72:e0:4e:7f:16:26:6d:ab:5c:0c:66:56:7a:a4:
                    2a:02:6d:d8:61:82:cc:50:ac:1d:09:f0:e1:1b:c7:
                    ee:5d:fb:33:2e:63:e5:d2:7f:bb:3b:52:81:f8:54:
                    df:05:76:74:1a:2e:5d:94:13:0d:5c:29:d9:70:6e:
                    82:e0:c1:96:bb:fe:2d:fa:37:c8:dd:0a:76:8f:5b:
                    1c:6e:db:11:9f:cd:d7:43:1d:2b:b8:07:0f:2e:18:
                    e1:a9:99:44:a7:f0:39:dd:9f:80:99:d0:e0:cd:ec:
                    25:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:46:AF:EB:02:87:A7:75:74:B9:AA:83:90:56:FF:A5:BB:18:22:85
            X509v3 Authority Key Identifier:
                keyid:8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/323430343a346563303a3a2f33322d3438203d3e20313338313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:4ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:29:5c:81:c5:36:48:eb:2d:d1:7a:77:65:b6:8f:1a:c1:05:
         c9:7f:fd:8f:c5:e3:83:46:f1:f7:0a:a1:6e:55:1c:67:0f:54:
         d7:89:52:42:96:ea:f1:87:c4:83:a6:76:96:4f:3a:cf:7b:60:
         4d:09:48:57:5e:9d:36:7c:72:85:64:12:e1:73:49:1e:ba:db:
         55:88:52:cd:85:e6:ad:93:66:19:a2:c6:d5:38:6f:ed:6e:f8:
         8d:44:d5:e4:d2:43:4b:07:73:e4:7d:5a:db:7c:42:d0:ab:51:
         f7:03:9c:3e:ab:bb:50:38:ad:68:83:de:c3:c2:98:2b:10:af:
         45:df:6e:f4:9f:37:4b:dc:b8:6f:41:aa:8c:01:9c:0d:23:ea:
         c9:45:ab:99:89:21:28:7f:45:d3:a1:0f:98:50:50:cd:cf:a2:
         bd:16:55:ac:42:a5:3f:19:04:57:cd:12:f9:a4:0f:d0:4e:92:
         8b:73:96:6e:20:c9:3c:a8:d4:c7:bc:d5:ea:94:db:28:bc:15:
         89:85:4d:93:99:60:43:bd:5b:35:54:13:05:f6:eb:e8:9e:44:
         1c:3f:52:bd:91:f4:3b:63:0c:e4:c7:de:3e:1a:82:c8:bc:e4:
         f1:05:e6:f0:05:fe:f7:e9:43:c5:e1:2e:c6:d3:4f:37:31:89:
         1c:30:45:a4
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIULWTE3a/+ASqv/5qtNCCPbs9AcyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJBMkI1RTA3RkFENTcyOEM3REVGQkY0RkMxMEJEMDQ0
MzUzRjZGRjAeFw0yNDA3MjUwMjE5MjdaFw0yNTA3MjQwMjI0MjdaMDMxMTAvBgNV
BAMTKEUzNDZBRkVCMDI4N0E3NzU3NEI5QUE4MzkwNTZGRkE1QkIxODIyODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0SaL2YNfQnZYv0M7F/YU4Vb3E
2CG1CRexcxX9Hm1YuZXxRrU1BMKgtGs6XNZCpyfyu+rV04E2cyfjDD8ybm0GEi9i
EM8i1UnjAl7uODcROjqWUuUPeEBhJfupNqYe3NWkUeCkOKx7tXykPz7BMuYwXBur
ja7dOlNfdBFQDp4Qr2f6uyatpAILXt5QLN7UTKr5EfbMoFty4E5/FiZtq1wMZlZ6
pCoCbdhhgsxQrB0J8OEbx+5d+zMuY+XSf7s7UoH4VN8FdnQaLl2UEw1cKdlwboLg
wZa7/i36N8jdCnaPWxxu2xGfzddDHSu4Bw8uGOGpmUSn8Dndn4CZ0ODN7CX1AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQU40av6wKHp3V0uaqDkFb/pbsYIoUwHwYDVR0j
BBgwFoAUi6K14H+tVyjH3vv0/BC9BENT9v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Yzc2Yzg1Zi05YTRmLTRhZmMtOTY5Yi04ZGEyNTM2YzVjMjQvMC84QkEyQjVFMDdG
QUQ1NzI4QzdERUZCRjRGQzEwQkQwNDQzNTNGNkZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEJBMkI1RTA3RkFENTcyOEM3REVGQkY0RkMxMEJEMDQ0MzUz
RjZGRi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjNzZjODVmLTlhNGYtNGFmYy05
NjliLThkYTI1MzZjNWMyNC8wLzMyMzQzMDM0M2EzNDY1NjMzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMxMzMzODMxMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQETsAwDQYJKoZI
hvcNAQELBQADggEBAAYpXIHFNkjrLdF6d2W2jxrBBcl//Y/F44NG8fcKoW5VHGcP
VNeJUkKW6vGHxIOmdpZPOs97YE0JSFdenTZ8coVkEuFzSR6621WIUs2F5q2TZhmi
xtU4b+1u+I1E1eTSQ0sHc+R9Wtt8QtCrUfcDnD6ru1A4rWiD3sPCmCsQr0XfbvSf
N0vcuG9BqowBnA0j6slFq5mJISh/RdOhD5hQUM3Por0WVaxCpT8ZBFfNEvmkD9BO
kotzlm4gyTyo1Me81eqU2yi8FYmFTZOZYEO9WzVUEwX26+ieRBw/Ur2R9DtjDOTH
3j4agsi85PEF5vAF/vfpQ8XhLsbTTzcxiRwwRaQ=
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:01:50 2024 by rpki-client on console-ams.rpki-client.org