Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33332d3333203d3e203633353031.roa
File:                     323430333a666338303a383030303a3a2f33332d3333203d3e203633353031.roa (raw, json)
Hash identifier:          15iddp/ULxl7pDGDwUnKCpmM1aWYkn5DbPS3+E0CTD4=
Subject key identifier:   13:E7:9A:2A:98:C0:7C:A7:82:B1:5C:65:B7:04:E6:84:52:56:BE:05
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       350E4A38262B4A82BA7E23A17DAAD63C3BE8187A
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33332d3333203d3e203633353031.roa
Signing time:             Thu 03 Aug 2023 01:00:02 +0000
ROA not before:           Thu 03 Aug 2023 00:55:02 +0000
ROA not after:            Thu 01 Aug 2024 01:00:02 +0000
asID:                     63501
IP address blocks:        2403:fc80:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0e:4a:38:26:2b:4a:82:ba:7e:23:a1:7d:aa:d6:3c:3b:e8:18:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Aug  3 00:55:02 2023 GMT
            Not After : Aug  1 01:00:02 2024 GMT
        Subject: CN=13E79A2A98C07CA782B15C65B704E6845256BE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:e9:ae:59:5e:af:c4:f4:77:2b:02:3c:62:
                    8d:a2:c6:15:f8:49:71:df:05:b9:9c:41:43:d2:67:
                    ee:b6:91:1f:3c:9b:bf:4c:a4:27:f5:77:ef:aa:a2:
                    15:cb:24:e9:f5:0b:42:cd:a8:f2:b5:cb:93:8a:02:
                    8d:e4:29:fa:f3:30:2f:5b:28:ee:b3:83:c2:91:d0:
                    2c:f1:a9:48:3e:51:a8:07:96:30:b1:f7:fa:91:a9:
                    7a:fc:9a:39:5d:27:2a:08:33:af:cb:5d:f2:57:4c:
                    57:82:b3:8a:f9:c7:b6:12:22:a7:8d:d3:b1:da:2c:
                    46:ee:fc:fd:c7:94:f6:44:cb:ab:cd:3f:10:21:f4:
                    73:f2:93:e4:fd:8e:77:2c:a1:2a:46:67:fe:28:48:
                    7a:5b:72:57:ee:c3:3f:b8:71:85:8a:7d:06:ea:77:
                    ab:73:ff:0e:f7:bc:04:8b:ff:72:bb:0f:3a:8d:22:
                    3e:03:ca:4c:be:a2:f9:d7:80:c8:45:1a:bc:83:a2:
                    65:a1:98:07:b2:79:b6:eb:f2:26:5e:77:e0:83:c0:
                    93:87:a8:91:0d:9c:47:ed:2b:93:dc:42:31:27:25:
                    0e:3d:c3:38:29:8d:97:0b:e7:de:a7:75:6b:ae:a0:
                    d8:9e:db:76:56:8b:75:dd:f4:2f:a2:96:58:d3:55:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E7:9A:2A:98:C0:7C:A7:82:B1:5C:65:B7:04:E6:84:52:56:BE:05
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33332d3333203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         03:45:39:d1:be:28:4e:d7:2f:4c:47:f4:c4:c4:df:53:63:d1:
         b7:ef:82:6a:12:a7:30:b5:05:f8:7c:0a:93:ce:50:11:a9:c0:
         98:ba:02:df:97:56:5b:2e:71:54:37:e1:e9:99:fd:b4:70:d1:
         bd:98:6d:dc:54:82:a0:c6:f4:48:dc:86:a8:ea:3b:b6:cc:db:
         e2:b5:1e:88:77:61:ba:97:4a:2a:cd:48:34:2f:63:dd:35:a5:
         ed:f9:73:10:57:1e:9d:f3:76:a8:54:53:57:1c:75:38:e0:bb:
         3e:6b:1a:7e:37:65:b1:89:fe:1f:33:16:f9:71:36:a5:7b:c6:
         a4:33:a2:43:8c:1d:77:41:7e:48:1f:88:e5:8d:f2:fd:4a:32:
         b6:c6:cb:5b:82:e5:e4:6d:e8:bc:90:2f:eb:8b:51:b9:ac:bd:
         26:43:23:24:7e:5b:e6:ba:67:bb:da:45:4e:ce:41:22:63:51:
         a4:94:d9:6f:4f:fe:87:f0:6c:e3:6e:31:5f:2f:af:80:56:22:
         56:eb:4e:55:74:57:a3:de:02:1b:53:6c:06:18:fd:c1:f1:fe:
         71:bf:93:e6:50:81:3b:de:1f:73:51:d1:38:bb:7f:98:5c:9e:
         5e:d5:5e:f8:f6:a6:09:2a:b6:52:e3:1a:61:8b:f6:73:8a:29:
         66:77:db:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:29 2024 by rpki-client on console-ams.rpki-client.org