Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa
File:                     323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (raw, json)
Hash identifier:          oTf+Eqxxrg0C7eWejuIjxaoc4JqS5/m4GGFT+fKHFXc=
Subject key identifier:   AD:36:64:F7:AE:63:AB:7E:F4:C4:90:A7:12:A6:09:58:C6:13:7D:E7
Certificate issuer:       /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
Certificate serial:       01CD1C6417EA82D9A6F825C6D9F1D0A956116A33
Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa
Signing time:             Mon 01 Jul 2024 01:02:29 +0000
ROA not before:           Mon 01 Jul 2024 00:57:29 +0000
ROA not after:            Mon 30 Jun 2025 01:02:29 +0000
asID:                     136868
IP address blocks:        2001:df3:7100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl
                          rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cd:1c:64:17:ea:82:d9:a6:f8:25:c6:d9:f1:d0:a9:56:11:6a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
        Validity
            Not Before: Jul  1 00:57:29 2024 GMT
            Not After : Jun 30 01:02:29 2025 GMT
        Subject: CN=AD3664F7AE63AB7EF4C490A712A60958C6137DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:70:75:56:d6:19:ca:10:23:c7:68:bf:4e:1e:
                    35:9c:cf:d2:67:89:47:1e:ba:20:ac:fa:9b:e2:c0:
                    06:17:75:df:49:d7:ce:0e:6a:a6:c9:38:38:e0:79:
                    a3:3c:4d:c9:d4:80:d9:36:6b:87:33:c4:35:d0:2b:
                    1e:2c:23:43:58:af:c4:bb:e8:5b:85:cd:62:e6:3d:
                    16:1c:58:e6:06:c7:9a:e2:4a:70:9a:b4:66:82:48:
                    31:d5:d8:0f:e9:60:f7:dd:ea:d2:50:a3:37:4b:58:
                    63:2c:1c:f4:09:1e:4c:d9:46:5b:ee:8f:67:07:8e:
                    bc:5c:c8:db:49:ad:52:bc:98:44:35:d9:d9:0b:06:
                    b2:1e:07:b6:5f:4c:bb:25:1a:76:34:fc:b3:91:da:
                    23:32:88:72:5a:a4:4a:73:17:0f:78:63:e3:0f:d6:
                    b7:7d:11:83:d6:03:bb:f3:51:0c:43:4b:28:36:10:
                    55:55:2f:9d:f2:23:5e:f2:09:5a:f1:23:f2:36:bd:
                    db:78:6b:8c:ed:1a:88:4a:77:3c:0a:04:5c:2f:0c:
                    6d:fa:1d:d9:a3:89:a8:05:f2:c9:20:f1:96:a2:08:
                    94:3b:ba:fe:43:5c:93:a5:61:97:bf:01:42:27:cb:
                    a6:72:85:a2:d2:25:fa:27:c6:99:aa:e8:b7:1a:1a:
                    10:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:36:64:F7:AE:63:AB:7E:F4:C4:90:A7:12:A6:09:58:C6:13:7D:E7
            X509v3 Authority Key Identifier:
                keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:7100::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:f3:01:a6:08:28:72:01:3a:b1:88:d3:42:aa:fa:69:f3:27:
         6b:35:60:0a:ea:37:28:0e:7a:86:b7:24:34:ce:d8:0b:99:4e:
         27:b9:ee:14:7c:60:63:5a:8a:03:0b:4a:01:ab:f6:87:d9:bf:
         13:1f:a4:93:74:a2:a0:04:a3:e1:fa:ae:44:56:d0:80:67:f7:
         6b:15:20:56:b7:be:6e:d5:85:b4:8c:2f:7d:61:51:94:ff:61:
         b6:0f:55:58:14:f4:b6:d7:1f:9a:50:17:16:98:ad:00:9d:72:
         fc:3f:b6:02:96:33:87:55:f0:89:9f:7b:4e:00:03:ae:50:4f:
         c1:5c:1a:e9:61:7d:93:f8:74:3d:9a:42:dc:05:a5:24:3f:09:
         67:34:f2:8b:6f:ff:98:a6:da:c5:14:31:7b:c0:ca:a3:dd:88:
         ad:36:45:67:d5:e5:49:f8:6e:95:91:5e:2f:c7:20:f5:f3:c9:
         f8:3d:b4:e5:ce:e3:75:05:b4:49:c7:0c:d9:b1:fb:ab:c1:64:
         1a:a7:47:9b:fd:0c:e0:e8:48:0d:0c:3d:40:93:14:8b:fc:c9:
         8b:ff:82:2f:9b:56:89:af:6d:57:2e:f7:dc:47:f2:3b:d2:ad:
         40:04:86:1d:dd:20:13:eb:20:a6:22:a9:c5:dd:0b:a9:2d:1e:
         94:61:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:52:55 2024 by rpki-client on console-ams.rpki-client.org