Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa
File:                     323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (raw, json)
Hash identifier:          NCa+GGSq3yT3mQagCDKq6Gw5W/C1zRiWNAtTo6ViycU=
Subject key identifier:   2B:8F:B4:09:42:42:18:FB:EA:2E:F1:3D:54:51:E4:B6:54:0D:FE:4F
Certificate issuer:       /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7
Certificate serial:       44F384BEA03D0F8A7563EC47209CDAF8EA368AFE
Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa
Signing time:             Thu 17 Oct 2024 11:02:18 +0000
ROA not before:           Thu 17 Oct 2024 10:57:18 +0000
ROA not after:            Thu 16 Oct 2025 11:02:18 +0000
asID:                     38755
IP address blocks:        2001:df5:3e00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl
                          rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f3:84:be:a0:3d:0f:8a:75:63:ec:47:20:9c:da:f8:ea:36:8a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7
        Validity
            Not Before: Oct 17 10:57:18 2024 GMT
            Not After : Oct 16 11:02:18 2025 GMT
        Subject: CN=2B8FB409424218FBEA2EF13D5451E4B6540DFE4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:0d:4f:73:08:bd:6c:c1:76:ec:1d:2e:62:
                    b1:e1:15:dc:ca:4f:9e:b9:2a:44:88:b5:a9:76:20:
                    76:3a:65:86:51:af:84:63:da:a1:56:41:5e:71:7e:
                    95:91:fb:09:e2:62:dd:7d:a5:02:66:0f:99:06:23:
                    6d:73:fe:37:a8:07:eb:3d:3b:5f:92:a9:dd:fc:a6:
                    5a:2c:06:dd:ba:be:6d:ab:3c:92:e3:b7:d0:a2:fd:
                    f4:cb:61:76:3e:62:7f:9b:8e:30:56:f0:e2:f4:22:
                    7d:62:f1:26:02:fd:f8:7f:14:44:19:78:82:7b:44:
                    dd:17:84:4b:8e:99:17:90:4e:dc:48:c0:70:6c:55:
                    cb:5e:16:4e:37:6c:05:16:01:ba:bf:c0:ac:fb:eb:
                    08:fb:c1:5b:ba:09:4b:46:54:e0:c3:a4:91:66:8e:
                    24:2a:9c:38:68:65:b0:ce:21:4b:40:91:7e:44:a6:
                    f1:a2:a9:48:fa:97:f2:32:38:d3:9e:dc:fe:b2:9c:
                    53:aa:83:7b:f7:80:2b:29:4d:ae:4b:43:ec:3a:8f:
                    1b:c1:a9:e1:e8:99:68:38:09:99:68:6d:00:9f:5d:
                    50:d0:d4:be:b5:d7:0f:82:8d:1a:60:e3:24:85:5f:
                    30:1b:25:d8:63:48:3d:7c:aa:d2:2e:81:86:3b:d5:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8F:B4:09:42:42:18:FB:EA:2E:F1:3D:54:51:E4:B6:54:0D:FE:4F
            X509v3 Authority Key Identifier:
                keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:3e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:5c:06:fc:db:24:de:9c:82:51:36:b8:c9:b7:a7:eb:89:d1:
         9f:86:34:73:b4:af:5a:51:e0:5d:b8:5b:81:2b:28:5d:63:10:
         07:c5:7a:87:cf:24:09:9b:fd:e4:a5:79:6d:f8:55:0c:b7:16:
         cf:38:d5:ce:1f:6d:cc:7e:c8:08:11:03:fd:82:b3:20:df:bf:
         64:0d:13:42:ae:9f:8b:6e:37:ae:2a:80:09:fc:64:99:86:db:
         e4:3b:86:aa:2d:09:bd:32:c7:ad:6c:2e:25:fb:72:93:6d:c1:
         b2:a0:fc:95:ad:f3:69:81:65:1f:95:c4:0c:a9:33:70:d4:1b:
         35:e8:cb:51:7d:63:0d:c6:17:bc:2d:63:bf:b7:11:3d:4b:63:
         fa:f5:89:66:a2:61:1b:28:be:9b:22:01:21:8d:81:bb:a3:e7:
         7b:8e:28:11:d3:c8:6c:6d:cd:f9:84:31:4e:38:89:9c:49:69:
         97:8e:38:96:5f:14:85:cd:aa:b6:cd:ef:77:8d:ce:96:a3:0c:
         f0:92:84:28:05:8b:26:76:9e:e2:c3:41:8d:94:7c:bc:44:5f:
         84:d5:94:ab:6d:96:10:eb:16:36:a1:52:82:42:0b:e1:df:e8:
         58:83:f0:ae:43:dc:db:83:7d:ce:69:11:40:81:2e:3b:a5:34:
         cf:5d:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org