Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/323430363a323430303a3a2f33322d3438203d3e203435323837.roa
File:                     323430363a323430303a3a2f33322d3438203d3e203435323837.roa (raw, json)
Hash identifier:          gYKpABPCZPAwfSakQwPekqx1ImCAYMUVjZIaoSefgv8=
Subject key identifier:   06:90:57:92:FB:C6:AA:72:84:2D:62:49:30:FD:FC:92:00:B0:B8:6C
Certificate issuer:       /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Certificate serial:       033C4D904B5D5670E32C94629D37C6CEAA4E2530
Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/323430363a323430303a3a2f33322d3438203d3e203435323837.roa
Signing time:             Mon 01 Jul 2024 01:02:26 +0000
ROA not before:           Mon 01 Jul 2024 00:57:26 +0000
ROA not after:            Mon 30 Jun 2025 01:02:26 +0000
asID:                     45287
IP address blocks:        2406:2400::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
                          rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3c:4d:90:4b:5d:56:70:e3:2c:94:62:9d:37:c6:ce:aa:4e:25:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
        Validity
            Not Before: Jul  1 00:57:26 2024 GMT
            Not After : Jun 30 01:02:26 2025 GMT
        Subject: CN=06905792FBC6AA72842D624930FDFC9200B0B86C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:b7:db:cd:72:e0:41:1b:e4:2a:12:38:40:
                    01:84:50:a7:c7:86:94:9c:13:1f:79:4c:f2:2b:ce:
                    4e:53:a6:b8:c6:ce:81:ec:33:ce:58:4d:a4:3f:90:
                    fc:04:f2:0e:9a:f7:56:7f:b4:93:e8:56:0f:00:65:
                    9c:1c:52:61:45:59:b0:8f:93:4a:2f:a7:6a:4f:be:
                    dc:ff:aa:54:29:35:cf:76:20:58:dc:07:a2:cf:c9:
                    17:54:f8:d1:28:c1:88:32:bf:2f:4f:a1:94:35:45:
                    95:66:44:42:ce:7a:c1:f8:de:7c:fa:3f:b1:c0:8a:
                    a4:9b:8c:1f:77:05:0a:86:33:88:82:56:72:c2:8b:
                    2a:24:3a:ab:98:16:b6:08:a3:e5:4b:21:7e:37:88:
                    79:60:a1:45:74:bc:60:6a:72:0f:3d:cd:dd:84:b3:
                    7d:ce:f9:98:9d:22:6c:e2:df:cc:9d:14:57:6f:e3:
                    e4:07:23:f6:0f:77:2c:51:74:8d:fb:14:ad:68:f0:
                    d3:d2:0a:0a:c1:f4:28:a6:dc:24:5f:7c:33:c2:fc:
                    45:4a:b2:5f:42:3b:f4:f6:12:4a:82:58:e0:18:aa:
                    d2:a5:54:b5:32:e6:f3:ea:7a:3e:a6:22:e6:99:27:
                    bf:d6:67:b7:95:04:31:76:f8:49:ff:4b:23:c9:30:
                    85:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:90:57:92:FB:C6:AA:72:84:2D:62:49:30:FD:FC:92:00:B0:B8:6C
            X509v3 Authority Key Identifier:
                keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/323430363a323430303a3a2f33322d3438203d3e203435323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:2400::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:e8:31:54:98:53:fe:56:c1:93:7c:dc:b0:bb:b6:ca:78:15:
         28:68:71:70:cc:fd:9f:7c:c1:33:f1:d2:f1:dc:3c:97:20:8d:
         23:1b:3f:62:83:54:34:75:9b:9d:27:05:d9:1c:2a:1a:6e:aa:
         83:af:34:5f:43:ef:c6:7f:94:4f:c5:84:bf:b0:a4:83:43:a8:
         c9:33:9b:35:63:d9:c3:56:23:43:2e:e5:a3:0d:0d:32:8c:39:
         7e:98:64:9c:b7:d8:01:54:ea:a6:92:63:50:31:bc:1f:92:7b:
         0c:b3:10:0a:f3:c8:a7:60:a3:60:56:30:8e:f4:1e:a3:a7:f6:
         e8:b8:ab:98:de:2f:e2:37:bd:f9:37:7d:da:bd:1e:13:a6:82:
         fa:d3:08:33:07:74:50:f9:7a:6e:cc:25:e6:12:16:b7:62:5e:
         66:01:e6:94:14:4c:26:01:aa:e0:26:07:72:ae:7f:03:3d:31:
         50:f7:78:ed:14:87:37:5c:4c:f6:ca:f0:96:85:09:7a:69:54:
         97:e7:fe:42:b7:bc:40:e5:85:83:15:31:d7:6d:48:74:64:2b:
         34:1c:94:dc:93:de:91:03:e8:48:06:d6:6d:2d:0f:6b:0e:73:
         83:a5:5c:f3:6c:3c:83:b4:97:7e:c8:7b:c3:21:a4:d6:65:8b:
         d5:97:fc:66
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUAzxNkEtdVnDjLJRinTfGzqpOJTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx
QkMwNkVCNzAeFw0yNDA3MDEwMDU3MjZaFw0yNTA2MzAwMTAyMjZaMDMxMTAvBgNV
BAMTKDA2OTA1NzkyRkJDNkFBNzI4NDJENjI0OTMwRkRGQzkyMDBCMEI4NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ubfbzXLgQRvkKhI4QAGEUKfH
hpScEx95TPIrzk5TprjGzoHsM85YTaQ/kPwE8g6a91Z/tJPoVg8AZZwcUmFFWbCP
k0ovp2pPvtz/qlQpNc92IFjcB6LPyRdU+NEowYgyvy9PoZQ1RZVmRELOesH43nz6
P7HAiqSbjB93BQqGM4iCVnLCiyokOquYFrYIo+VLIX43iHlgoUV0vGBqcg89zd2E
s33O+ZidImzi38ydFFdv4+QHI/YPdyxRdI37FK1o8NPSCgrB9Cim3CRffDPC/EVK
sl9CO/T2EkqCWOAYqtKlVLUy5vPqej6mIuaZJ7/WZ7eVBDF2+En/SyPJMIV7AgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUBpBXkvvGqnKELWJJMP38kgCwuGwwHwYDVR0j
BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB
NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw
NkVCNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4MjQ5ZmMzLTZjODQtNGU5MS1i
MDY3LWEwYzZhODQwYTNhOS8wLzMyMzQzMDM2M2EzMjM0MzAzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDM0MzUzMjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBiQAMA0GCSqGSIb3
DQEBCwUAA4IBAQAv6DFUmFP+VsGTfNywu7bKeBUoaHFwzP2ffMEz8dLx3DyXII0j
Gz9ig1Q0dZudJwXZHCoabqqDrzRfQ+/Gf5RPxYS/sKSDQ6jJM5s1Y9nDViNDLuWj
DQ0yjDl+mGSct9gBVOqmkmNQMbwfknsMsxAK88inYKNgVjCO9B6jp/bouKuY3i/i
N735N33avR4TpoL60wgzB3RQ+XpuzCXmEha3Yl5mAeaUFEwmAargJgdyrn8DPTFQ
93jtFIc3XEz2yvCWhQl6aVSX5/5Ct7xA5YWDFTHXbUh0ZCs0HJTck96RA+hIBtZt
LQ9rDnODpVzzbDyDtJd+yHvDIaTWZYvVl/xm
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:06 2024 by rpki-client on console-ams.rpki-client.org