Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33322d3332203d3e203633353031.roa
File:                     323430333a666338303a3a2f33322d3332203d3e203633353031.roa (raw, json)
Hash identifier:          afNx4W0YHI+FGXSr3UXPU8iDUBt3OUkuJ8t/pSrfUhU=
Subject key identifier:   D8:C4:A8:0F:19:0D:F9:92:8B:7C:65:4F:33:61:D6:05:59:DC:BD:8B
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       36DB819F59BCFB920B5470BA7FBE0CA8A4E2B5A3
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33322d3332203d3e203633353031.roa
Signing time:             Thu 04 Jul 2024 02:01:39 +0000
ROA not before:           Thu 04 Jul 2024 01:56:39 +0000
ROA not after:            Thu 03 Jul 2025 02:01:39 +0000
asID:                     63501
IP address blocks:        2403:fc80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:db:81:9f:59:bc:fb:92:0b:54:70:ba:7f:be:0c:a8:a4:e2:b5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jul  4 01:56:39 2024 GMT
            Not After : Jul  3 02:01:39 2025 GMT
        Subject: CN=D8C4A80F190DF9928B7C654F3361D60559DCBD8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:49:32:39:bf:f3:86:2a:9c:ce:cf:a8:fa:4c:
                    41:93:64:f3:d1:c3:ee:8f:2b:a4:62:f5:a7:5e:ec:
                    ec:a5:33:a7:64:ad:93:f7:51:5f:1c:53:e5:91:63:
                    fe:96:c9:75:a0:21:16:a2:05:93:78:2b:04:39:3a:
                    73:e3:9b:7c:3f:71:f2:4d:24:cc:a0:68:3f:fb:71:
                    a3:10:83:2a:77:3b:90:88:12:d2:41:dd:80:a5:a4:
                    0b:69:b2:87:19:e3:ca:22:54:18:a3:09:1d:ed:ac:
                    21:8e:58:76:9a:78:f4:23:66:5f:33:63:77:3d:da:
                    60:ea:58:87:cf:d0:f1:a8:8e:da:9d:fb:08:1f:ff:
                    1a:73:d7:52:37:b4:78:be:0a:28:3e:11:3b:75:79:
                    8d:1d:e8:1d:a3:63:7a:34:b6:a2:97:c7:07:7c:e2:
                    e1:a7:62:af:96:77:1a:d2:c6:f3:7a:9d:96:20:af:
                    ae:00:78:e9:6b:ac:aa:26:52:2d:61:69:dd:c5:1d:
                    08:77:3e:62:28:45:55:ff:88:2c:10:0b:44:32:e7:
                    a8:23:0f:33:c2:3a:4a:e6:05:1d:ad:15:b5:8a:f7:
                    0f:05:12:d1:c5:af:d7:1f:55:e3:59:bb:5a:58:cc:
                    27:da:22:33:89:e5:0c:00:99:3c:9c:c7:91:c9:d8:
                    67:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C4:A8:0F:19:0D:F9:92:8B:7C:65:4F:33:61:D6:05:59:DC:BD:8B
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33322d3332203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:83:37:c1:74:7c:16:89:c9:c0:43:5c:77:9e:96:b6:93:8e:
         77:34:5b:17:eb:d5:31:99:f0:41:d3:cc:d9:04:68:9d:10:e1:
         c6:9a:db:94:9f:c2:4e:78:b2:2e:98:ea:d0:f4:c0:80:72:a1:
         75:ce:b6:55:7c:a2:ad:de:df:fd:c8:b6:53:20:c2:75:28:c3:
         a4:04:f1:e9:af:a1:e9:78:50:6c:85:11:57:ea:6b:1b:4d:50:
         fd:35:46:ce:b9:5a:a3:1b:b1:3d:76:bb:3c:6f:b5:d1:d0:61:
         7e:b2:22:2e:ec:d4:50:67:20:70:4d:73:77:98:43:e3:82:1e:
         92:11:1e:2d:6f:9f:2b:ed:32:34:6b:60:39:14:b5:eb:d5:ce:
         18:6e:f8:9b:cd:3c:2e:19:f9:69:a7:7b:9d:6a:5d:64:3c:43:
         8d:e0:44:5f:b2:fe:b6:a7:d8:a1:22:86:b4:67:6e:f3:bf:02:
         29:e8:f9:bc:79:1e:f8:35:3f:66:f9:18:f9:f3:ab:ed:45:97:
         7d:46:2e:fe:49:45:11:bf:44:be:a1:4a:17:a0:91:62:a9:bd:
         b0:4b:ee:b3:08:33:92:31:82:a7:11:46:3f:de:6f:b5:36:49:
         69:1d:21:78:ae:fd:ef:9f:05:dd:c1:82:4a:78:78:97:10:66:
         3f:3f:47:45
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUNtuBn1m8+5ILVHC6f74MqKTitaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4
NTVBMThFMTAeFw0yNDA3MDQwMTU2MzlaFw0yNTA3MDMwMjAxMzlaMDMxMTAvBgNV
BAMTKEQ4QzRBODBGMTkwREY5OTI4QjdDNjU0RjMzNjFENjA1NTlEQ0JEOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSTI5v/OGKpzOz6j6TEGTZPPR
w+6PK6Ri9ade7OylM6dkrZP3UV8cU+WRY/6WyXWgIRaiBZN4KwQ5OnPjm3w/cfJN
JMygaD/7caMQgyp3O5CIEtJB3YClpAtpsocZ48oiVBijCR3trCGOWHaaePQjZl8z
Y3c92mDqWIfP0PGojtqd+wgf/xpz11I3tHi+Cig+ETt1eY0d6B2jY3o0tqKXxwd8
4uGnYq+WdxrSxvN6nZYgr64AeOlrrKomUi1had3FHQh3PmIoRVX/iCwQC0Qy56gj
DzPCOkrmBR2tFbWK9w8FEtHFr9cfVeNZu1pYzCfaIjOJ5QwAmTycx5HJ2GeXAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQU2MSoDxkN+ZKLfGVPM2HWBVncvYswHwYDVR0j
BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG
NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB
MThFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMyMzQzMDMzM2E2NjYzMzgzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA/yAMA0GCSqGSIb3
DQEBCwUAA4IBAQAkgzfBdHwWicnAQ1x3npa2k453NFsX69UxmfBB08zZBGidEOHG
mtuUn8JOeLIumOrQ9MCAcqF1zrZVfKKt3t/9yLZTIMJ1KMOkBPHpr6HpeFBshRFX
6msbTVD9NUbOuVqjG7E9drs8b7XR0GF+siIu7NRQZyBwTXN3mEPjgh6SER4tb58r
7TI0a2A5FLXr1c4YbvibzTwuGflpp3udal1kPEON4ERfsv62p9ihIoa0Z27zvwIp
6Pm8eR74NT9m+Rj586vtRZd9Ri7+SUURv0S+oUoXoJFiqb2wS+6zCDOSMYKnEUY/
3m+1NklpHSF4rv3vnwXdwYJKeHiXEGY/P0dF
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org