Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa
File:                     323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (raw, json)
Hash identifier:          7QwG3sKKh+mYjg4jS1AeFszBYeNEnM56jws/Z3GCGMM=
Subject key identifier:   9F:59:6F:4E:C1:48:5A:45:1B:E0:B7:C3:CC:89:F7:7A:5C:4C:39:E2
Certificate issuer:       /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A
Certificate serial:       77C89390CE58D8C13A0F55F1618315A4FE966634
Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa
Signing time:             Fri 15 Nov 2024 04:00:01 +0000
ROA not before:           Fri 15 Nov 2024 03:55:01 +0000
ROA not after:            Fri 14 Nov 2025 04:00:01 +0000
asID:                     134640
IP address blocks:        2001:df0:a00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl
                          rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c8:93:90:ce:58:d8:c1:3a:0f:55:f1:61:83:15:a4:fe:96:66:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A
        Validity
            Not Before: Nov 15 03:55:01 2024 GMT
            Not After : Nov 14 04:00:01 2025 GMT
        Subject: CN=9F596F4EC1485A451BE0B7C3CC89F77A5C4C39E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:83:cd:9d:06:b6:67:05:5a:74:0c:8b:97:11:
                    5d:44:be:10:32:51:03:59:a9:e1:ba:21:83:1b:a3:
                    f6:c3:97:42:6e:2e:4e:de:12:ac:f6:4e:4b:fe:69:
                    92:14:f8:cf:3d:e0:85:37:70:2a:2e:aa:bd:8e:5c:
                    a4:38:40:30:13:f1:5d:fe:e9:93:dc:76:79:a5:45:
                    fd:06:84:7d:b2:4e:86:59:29:16:20:da:85:df:64:
                    22:05:d1:61:b8:1c:ac:49:06:ef:12:44:e5:1a:c0:
                    44:ee:f4:3e:a2:58:b8:2d:19:b2:1a:9b:f8:f7:f8:
                    32:ad:0c:30:f3:53:10:4e:5f:91:90:34:c1:a7:ce:
                    9f:4f:ac:0e:17:5b:0e:19:48:3d:1f:84:10:d6:35:
                    53:19:61:d6:f0:a9:58:4d:b4:8e:96:60:d9:a0:cf:
                    c1:b7:10:0b:5b:ab:68:f1:61:c7:91:70:72:98:36:
                    43:0c:2a:71:d1:76:a4:e3:ce:dc:5f:70:a9:a2:70:
                    71:49:dc:ee:ff:7a:2d:ac:e6:95:52:ce:ff:e6:bd:
                    8a:6b:fb:2f:61:67:e6:e0:18:55:c3:19:8b:e3:7c:
                    75:7e:03:87:dd:8a:d5:11:df:e9:3c:39:26:79:76:
                    06:7c:8d:44:e2:92:d9:79:77:75:40:dc:d7:9f:f5:
                    7a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:59:6F:4E:C1:48:5A:45:1B:E0:B7:C3:CC:89:F7:7A:5C:4C:39:E2
            X509v3 Authority Key Identifier:
                keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:c0:70:93:ee:d2:26:be:c2:bf:59:1a:9f:4b:8d:aa:89:fb:
         09:47:aa:46:8a:15:19:2c:6e:bc:a6:5d:bb:ef:02:88:5d:a2:
         40:07:bf:d1:7a:d1:be:34:93:84:ce:93:ce:38:ee:58:2e:0d:
         0d:25:53:da:57:40:a1:70:d5:84:d0:94:36:8f:f1:49:79:43:
         97:95:63:b3:4e:43:03:c3:43:ef:d0:b9:30:0f:04:39:32:89:
         e1:23:08:af:22:c0:08:b0:09:8e:8e:78:5f:0c:fb:6a:41:25:
         20:24:c4:93:1f:02:c6:27:a7:75:5b:bb:72:bc:0e:b3:aa:dc:
         59:14:a3:76:73:5c:26:5a:34:80:80:eb:66:06:ed:d8:b3:ed:
         40:41:12:60:51:e5:51:3a:79:ca:7c:7f:45:21:a7:c1:31:3b:
         4a:87:77:6b:53:1f:d2:3f:22:38:9f:9b:1f:cb:18:59:90:02:
         26:03:55:61:dc:02:2d:2f:41:65:71:1a:4c:63:82:48:d2:e7:
         50:b3:c0:3e:46:b7:23:7a:21:8d:99:79:60:77:04:fb:1f:56:
         a8:54:cc:cf:f7:b1:79:29:77:85:99:79:fb:52:94:9a:03:c8:
         54:34:2c:c6:5e:b2:73:9d:7b:77:dc:e5:69:c0:1b:5e:e8:b4:
         d5:e4:1e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:15 2024 by rpki-client on console-ams.rpki-client.org