Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33332d3333203d3e203633353031.roa
File:                     323430333a666338303a3a2f33332d3333203d3e203633353031.roa (raw, json)
Hash identifier:          tAI9xyf8dG+NoUduCe3xRQ9ptepoIvsd6sJHK3fn9FI=
Subject key identifier:   D3:95:0D:DA:29:05:5D:A5:5F:8D:F7:C6:A4:08:A5:2F:D7:E3:8F:04
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       4363CF969276CA0CFE384A5AD54FF9B3B0E10B7D
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33332d3333203d3e203633353031.roa
Signing time:             Thu 04 Jul 2024 02:01:40 +0000
ROA not before:           Thu 04 Jul 2024 01:56:40 +0000
ROA not after:            Thu 03 Jul 2025 02:01:40 +0000
asID:                     63501
IP address blocks:        2403:fc80::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:63:cf:96:92:76:ca:0c:fe:38:4a:5a:d5:4f:f9:b3:b0:e1:0b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jul  4 01:56:40 2024 GMT
            Not After : Jul  3 02:01:40 2025 GMT
        Subject: CN=D3950DDA29055DA55F8DF7C6A408A52FD7E38F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:59:c8:fb:63:cb:68:0a:10:f4:c5:07:e8:6a:
                    a9:03:b3:ea:69:ce:ad:92:f6:82:f8:61:94:6e:cd:
                    b1:17:fd:36:d1:70:25:db:5d:f5:bd:82:71:0f:29:
                    74:b3:ee:38:31:96:56:78:4a:83:14:44:19:24:d4:
                    db:f6:04:72:95:74:03:e8:8b:a0:d2:ca:bd:4b:45:
                    80:c2:cc:1f:f6:dc:45:40:e1:f7:19:f9:e5:b4:23:
                    5a:85:d8:77:4d:d7:db:1f:36:a5:e4:ee:e1:95:f8:
                    7d:40:3d:5f:8e:35:cc:f8:3f:43:90:0f:4c:24:3f:
                    fb:7a:6c:97:d3:49:c9:40:83:70:76:67:b2:c2:f5:
                    e9:0e:1b:c6:aa:c9:eb:f7:f1:03:db:3f:0d:aa:65:
                    58:2f:e1:40:84:d1:3e:c8:27:52:22:39:1a:3e:e8:
                    a8:cc:db:81:b6:9c:c6:98:f0:e7:21:e0:5c:e6:d3:
                    34:a9:27:84:fd:d0:e3:c6:5b:51:45:2d:3c:64:04:
                    4e:4d:ad:14:9a:51:56:f5:b9:d0:66:c8:7f:bb:99:
                    a0:aa:a5:ac:f3:30:d6:b7:86:55:9d:8b:fd:de:f1:
                    fc:9c:f4:24:85:11:10:13:11:b6:db:4c:9c:b3:9c:
                    d7:c0:2c:8f:ee:50:51:57:ba:04:41:9d:9f:8f:d9:
                    60:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:0D:DA:29:05:5D:A5:5F:8D:F7:C6:A4:08:A5:2F:D7:E3:8F:04
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33332d3333203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80::/33

    Signature Algorithm: sha256WithRSAEncryption
         d0:21:8e:7d:df:19:64:4a:52:0c:1f:4c:d0:b5:4f:17:25:f3:
         ee:6a:e4:b6:4e:12:75:02:2d:5d:cc:e9:81:4b:dd:e0:35:54:
         21:1b:b5:1a:7c:52:fd:97:07:af:a9:c8:38:0e:bd:7f:2f:36:
         ff:82:39:65:bb:18:6c:70:f3:88:a3:48:ac:b3:18:85:b2:ec:
         ac:a3:58:91:6e:34:55:f2:3a:7e:60:7b:e6:95:77:b6:91:19:
         96:fd:f1:c9:d0:ac:76:9f:a9:55:bc:cf:76:1a:8f:3f:b3:45:
         78:c1:23:e5:b8:d2:99:ab:d5:9c:17:ce:04:0c:f3:5c:a4:84:
         86:9d:2d:d6:38:00:8b:b4:e4:79:f7:8b:f5:7b:a0:97:6d:a2:
         2b:de:9a:ef:19:29:48:c8:83:84:33:d2:ff:0b:63:5c:10:a9:
         09:83:a8:71:f6:cf:41:f2:8b:23:1d:d6:9b:26:fc:24:f3:97:
         6c:60:11:ef:d9:0f:78:24:18:c1:4d:e0:ff:2a:ee:a3:5d:d6:
         07:a8:af:24:44:99:f2:ec:8e:90:28:6b:f1:f9:ef:6d:24:03:
         8c:7e:26:03:96:6e:2a:9f:37:2c:23:3d:d5:9f:3f:c9:81:f1:
         5b:34:40:68:50:ea:82:25:4d:0d:87:af:b2:b1:07:83:33:33:
         f4:d0:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org