Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/323430363a346563303a3a2f33322d3332203d3e20313430343735.roa
File:                     323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (raw, json)
Hash identifier:          xSl5S79BfyBgOXzpCa2+vFeAMzKVXM9pSMn5k0NLon8=
Subject key identifier:   54:B3:EF:89:7E:08:FD:0B:CE:BF:04:41:D0:06:25:52:CB:9D:B0:38
Certificate issuer:       /CN=B197F427572524588487CFDB163A9E512FAE4DF2
Certificate serial:       512F8F8B6356DA6D7C39D7802EFA0C98A683EF1B
Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/323430363a346563303a3a2f33322d3332203d3e20313430343735.roa
Signing time:             Sat 20 Jul 2024 09:09:16 +0000
ROA not before:           Sat 20 Jul 2024 09:04:16 +0000
ROA not after:            Sat 19 Jul 2025 09:09:16 +0000
asID:                     140475
IP address blocks:        2406:4ec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl
                          rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2f:8f:8b:63:56:da:6d:7c:39:d7:80:2e:fa:0c:98:a6:83:ef:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2
        Validity
            Not Before: Jul 20 09:04:16 2024 GMT
            Not After : Jul 19 09:09:16 2025 GMT
        Subject: CN=54B3EF897E08FD0BCEBF0441D0062552CB9DB038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:29:da:a8:60:70:8c:77:97:6d:c8:cf:b8:18:
                    9c:1e:aa:0e:25:2f:32:e3:33:98:ac:c2:d9:49:9c:
                    cd:4e:e7:de:4d:2a:0d:03:9f:cd:d2:81:f9:48:2a:
                    10:e7:e9:46:5f:fe:fe:e2:67:d7:12:b0:a1:95:b5:
                    87:1d:6c:7c:76:21:fa:26:bb:8c:17:08:c7:55:b1:
                    68:c9:77:c0:d1:b2:2a:a1:41:ef:3c:76:2f:32:7b:
                    4d:f8:7c:2b:a3:6f:59:a7:05:5b:f2:ec:d5:c7:8b:
                    44:87:36:ab:fb:e0:ef:9f:4c:7f:23:17:4a:b4:82:
                    84:e7:1a:58:26:35:a4:d1:b6:90:27:73:1c:ba:ce:
                    48:d4:fe:4e:41:b1:44:82:bb:cd:7f:c1:75:cf:d3:
                    d8:44:24:59:3a:02:97:c4:ce:a2:28:1e:d6:fd:84:
                    c9:f9:14:2a:8d:b0:e6:cb:a2:c3:e8:0a:75:f3:c3:
                    35:bd:44:57:e4:0c:4b:52:0b:d4:fb:2e:6c:8e:b4:
                    27:b7:fc:64:54:2c:01:d4:ec:64:b3:e3:94:e1:87:
                    29:20:06:c1:03:c9:91:2e:8e:48:f4:c3:84:39:06:
                    d7:ed:5f:da:9a:91:70:4c:f7:b9:e5:ec:3f:1a:11:
                    d0:47:69:b3:91:2d:c9:e3:4f:52:36:0c:50:1e:39:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B3:EF:89:7E:08:FD:0B:CE:BF:04:41:D0:06:25:52:CB:9D:B0:38
            X509v3 Authority Key Identifier:
                keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/323430363a346563303a3a2f33322d3332203d3e20313430343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:4ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:b3:16:30:3e:30:fd:30:e7:b4:b9:f8:79:a9:aa:25:5a:9d:
         7a:4d:f6:95:2c:9a:e5:18:37:b6:b9:a7:1c:b4:46:76:bb:6c:
         99:b1:40:6b:d7:f4:31:88:c2:06:ac:1b:10:b9:ce:3c:df:6f:
         4e:b5:50:6e:9b:29:cc:fa:1c:d5:27:a1:a9:93:db:fa:f4:0d:
         30:44:8c:38:b8:19:32:e3:a3:d5:93:4c:23:b3:fe:83:94:9a:
         70:5b:a2:cb:1e:91:6f:75:2d:e9:7f:ce:f9:f8:95:30:4b:6d:
         49:de:63:71:4b:c7:83:57:b6:a3:67:96:78:b6:0b:79:3a:c7:
         3e:18:04:81:2c:a4:9d:d0:d8:90:c3:9f:92:d7:68:64:c3:31:
         18:c9:2c:b7:9a:93:af:ab:81:1d:bd:a0:7a:0c:9c:08:08:18:
         ec:e9:5b:6d:93:8e:16:a0:1c:45:77:b5:2e:00:c4:cc:6d:9d:
         33:14:26:47:e9:fc:45:f9:27:ee:41:00:f4:3c:a3:fe:09:91:
         a8:33:75:ac:b3:01:d6:32:d9:97:87:55:44:61:1c:8a:1d:0b:
         2e:5e:b5:ac:ab:04:89:f4:bb:1f:b2:f1:ed:66:cf:38:2f:bb:
         79:3a:7b:34:8b:44:d2:4d:11:31:f8:3f:ed:69:f7:92:38:57:
         57:3b:28:81
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUUS+Pi2NW2m18OdeALvoMmKaD7xswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy
RkFFNERGMjAeFw0yNDA3MjAwOTA0MTZaFw0yNTA3MTkwOTA5MTZaMDMxMTAvBgNV
BAMTKDU0QjNFRjg5N0UwOEZEMEJDRUJGMDQ0MUQwMDYyNTUyQ0I5REIwMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeKdqoYHCMd5dtyM+4GJweqg4l
LzLjM5iswtlJnM1O595NKg0Dn83SgflIKhDn6UZf/v7iZ9cSsKGVtYcdbHx2Ifom
u4wXCMdVsWjJd8DRsiqhQe88di8ye034fCujb1mnBVvy7NXHi0SHNqv74O+fTH8j
F0q0goTnGlgmNaTRtpAncxy6zkjU/k5BsUSCu81/wXXP09hEJFk6ApfEzqIoHtb9
hMn5FCqNsObLosPoCnXzwzW9RFfkDEtSC9T7LmyOtCe3/GRULAHU7GSz45Thhykg
BsEDyZEujkj0w4Q5BtftX9qakXBM97nl7D8aEdBHabORLcnjT1I2DFAeOc0nAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUVLPviX4I/QvOvwRB0AYlUsudsDgwHwYDVR0j
BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3
MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF
NERGMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkY2Y0MDY3LWE2OWQtNDkwOC1i
ZWU4LWI0NjU1YmRjMTVmOC8wLzMyMzQzMDM2M2EzNDY1NjMzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzQzMDM0MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGTsAwDQYJKoZI
hvcNAQELBQADggEBADOzFjA+MP0w57S5+HmpqiVanXpN9pUsmuUYN7a5pxy0Rna7
bJmxQGvX9DGIwgasGxC5zjzfb061UG6bKcz6HNUnoamT2/r0DTBEjDi4GTLjo9WT
TCOz/oOUmnBbossekW91Lel/zvn4lTBLbUneY3FLx4NXtqNnlni2C3k6xz4YBIEs
pJ3Q2JDDn5LXaGTDMRjJLLeak6+rgR29oHoMnAgIGOzpW22TjhagHEV3tS4AxMxt
nTMUJkfp/EX5J+5BAPQ8o/4JkagzdayzAdYy2ZeHVURhHIodCy5etayrBIn0ux+y
8e1mzzgvu3k6ezSLRNJNETH4P+1p95I4V1c7KIE=
-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:50 2024 by rpki-client on console-ams.rpki-client.org