Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa
File:                     323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa (raw, json)
Hash identifier:          Trj6p0Rlo/tfMth5LyvO1Kojs35zcKquO5MiMEWd1j8=
Subject key identifier:   CC:8E:9D:4B:12:7B:ED:EA:C7:D1:54:BE:AF:EE:49:43:7B:C7:A7:70
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       487BD6ADAD3FFE8E4348DED4340568E8A70646C0
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa
Signing time:             Thu 04 Jul 2024 01:00:01 +0000
ROA not before:           Thu 04 Jul 2024 00:55:01 +0000
ROA not after:            Thu 03 Jul 2025 01:00:01 +0000
asID:                     63501
IP address blocks:        2403:fc80:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7b:d6:ad:ad:3f:fe:8e:43:48:de:d4:34:05:68:e8:a7:06:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jul  4 00:55:01 2024 GMT
            Not After : Jul  3 01:00:01 2025 GMT
        Subject: CN=CC8E9D4B127BEDEAC7D154BEAFEE49437BC7A770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:fb:25:19:61:47:f2:2e:83:f3:98:64:b6:
                    95:e9:00:e7:f1:84:f3:4e:43:71:5a:b4:f1:66:e7:
                    ff:d9:e3:38:a2:bb:50:a3:09:3e:1c:88:c9:23:4e:
                    5f:cb:22:3c:a0:06:7c:ec:7c:65:f2:9b:76:6b:f7:
                    da:62:a8:cf:82:ee:27:0d:29:a9:26:c6:76:77:a9:
                    2a:1d:f6:00:3f:8b:68:8e:3f:a9:ed:62:3f:ba:c7:
                    57:8a:f6:47:82:dd:ba:a7:38:d6:83:3e:0d:57:0c:
                    09:4c:ad:01:28:59:70:df:43:6f:f5:93:8c:88:8a:
                    8c:25:7a:4d:a5:a0:53:06:15:bd:b1:cb:42:f7:e6:
                    24:1a:44:9d:d4:09:60:16:d0:07:dd:5f:1a:d4:4d:
                    6e:dc:29:eb:6d:29:86:2f:4c:92:b1:20:c5:50:74:
                    9b:0a:79:59:ed:3e:ec:48:22:66:cf:07:13:3f:1b:
                    a1:44:4e:8a:91:bc:58:72:b3:2c:70:ca:75:a6:64:
                    83:ea:82:47:6c:88:c0:c8:2d:6e:2e:d5:af:99:69:
                    bb:4f:e5:68:a2:97:87:03:1f:f4:9d:e2:d5:d6:6d:
                    8e:e3:a1:fc:fb:e1:1b:c7:c1:c3:18:50:b5:5c:11:
                    c1:d3:75:b6:d6:32:c5:f6:5b:25:a2:a1:87:20:dc:
                    6c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8E:9D:4B:12:7B:ED:EA:C7:D1:54:BE:AF:EE:49:43:7B:C7:A7:70
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         27:99:e5:74:11:7a:d3:a0:18:7c:67:a5:db:fd:73:5a:cf:2e:
         26:11:ae:3b:9e:3d:93:d8:87:a1:ae:e0:57:eb:ac:66:34:44:
         14:30:44:72:a7:de:a4:55:8e:d7:9b:e9:30:d7:41:a9:63:89:
         09:bf:df:fe:c7:d1:94:4a:5a:5e:17:5c:4a:61:bd:ea:36:80:
         87:78:ca:12:2c:17:ee:23:a9:c3:71:c5:b6:15:59:94:58:ca:
         7c:1d:e8:2d:ff:18:60:d3:44:1a:e3:2e:c8:f2:7d:11:5d:4d:
         34:1f:07:ec:0c:cd:07:cc:6c:1e:93:be:3e:f2:12:ad:da:20:
         55:2d:ea:57:4d:76:dc:b7:e3:93:36:c4:d6:7b:b3:ed:52:cc:
         37:7d:2a:eb:d6:47:98:c1:d1:2f:d4:20:07:5d:b6:01:60:17:
         a0:ac:f1:b3:a0:81:c4:ce:5b:9e:a3:5a:1c:cc:56:90:62:0d:
         7d:be:07:2a:b7:d6:ac:1a:8a:46:0a:9d:46:e7:50:5e:e9:dd:
         24:58:f3:fb:69:2f:29:88:71:77:81:d4:57:89:0c:e1:20:3c:
         eb:18:97:03:70:11:de:c2:4d:79:2c:b5:45:0a:e2:00:67:28:
         f6:35:9d:19:cc:51:fb:05:6e:ce:bf:7c:7e:89:f4:7d:d1:6a:
         8b:64:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org