Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33342d3334203d3e203633353031.roa
File:                     323430333a666338303a3a2f33342d3334203d3e203633353031.roa (raw, json)
Hash identifier:          YMOiXCw64NjqT7oKChKpIwaa7tvYjZCtiiOji5RdNSg=
Subject key identifier:   E7:4B:E9:A4:91:BF:53:0E:B9:7B:1B:BF:6F:AC:34:79:64:0D:7F:3F
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       2CA5242ACB9419AED378978B4440D4CAF9987B7E
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33342d3334203d3e203633353031.roa
Signing time:             Thu 03 Aug 2023 01:00:01 +0000
ROA not before:           Thu 03 Aug 2023 00:55:01 +0000
ROA not after:            Thu 01 Aug 2024 01:00:01 +0000
asID:                     63501
IP address blocks:        2403:fc80::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a5:24:2a:cb:94:19:ae:d3:78:97:8b:44:40:d4:ca:f9:98:7b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Aug  3 00:55:01 2023 GMT
            Not After : Aug  1 01:00:01 2024 GMT
        Subject: CN=E74BE9A491BF530EB97B1BBF6FAC3479640D7F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:9d:73:c3:fc:79:19:39:7b:04:1d:d2:7b:
                    0a:33:0c:a9:56:a3:93:ea:d7:43:06:ea:17:10:0d:
                    5b:79:5d:bf:c4:a1:9e:23:b0:dd:84:30:ff:9b:9c:
                    75:36:87:d3:3a:96:6f:27:17:1f:a2:34:dd:84:68:
                    77:31:2b:f3:18:51:d8:b1:90:15:9b:c9:f0:a1:8a:
                    76:1d:49:7f:fd:47:c4:e2:9c:11:7d:0b:3d:e8:a3:
                    ed:6a:fc:54:1a:93:44:f6:6c:6b:75:2f:84:38:16:
                    bc:98:d6:e2:b7:5d:a7:c5:52:1c:f3:6c:f3:16:9c:
                    75:05:4c:6d:b6:eb:39:a2:54:05:51:c9:49:2b:d1:
                    3a:a0:37:b3:dc:07:2b:06:b1:e9:b8:13:46:c0:c1:
                    d0:68:a4:f2:62:cb:fc:23:ec:f0:07:aa:ab:41:f6:
                    45:c7:2d:d2:d2:7b:a2:cb:f2:13:1b:f4:bb:0b:7c:
                    5c:a0:fe:41:fe:37:97:0e:5d:3e:96:5e:02:8e:b2:
                    b6:d5:44:2f:0a:57:da:84:e0:ad:af:02:dc:21:1e:
                    0c:52:3c:14:92:83:63:e5:81:ab:43:42:8d:6f:49:
                    35:0b:52:dd:9a:97:35:bb:47:46:16:0c:c5:5e:ef:
                    46:c4:70:33:d7:bb:5c:43:d5:73:21:68:de:86:be:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4B:E9:A4:91:BF:53:0E:B9:7B:1B:BF:6F:AC:34:79:64:0D:7F:3F
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33342d3334203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:17:95:63:d0:9c:26:6f:44:11:8d:4b:15:a5:1d:60:af:af:
         02:8e:e4:fe:90:d0:1c:4a:33:de:7f:8f:67:34:51:7d:83:eb:
         47:e4:6f:82:3d:f8:eb:0b:02:bb:78:7f:20:82:a1:a7:c7:f7:
         f6:19:cb:70:5a:21:0a:6e:48:70:7d:ef:5f:33:8f:d3:63:72:
         7e:a8:b2:ee:7c:9a:c3:ff:bd:58:49:e5:9b:6c:c2:44:5e:67:
         c6:bd:fb:70:0c:1c:4c:8b:ad:07:fc:21:bf:a1:a1:fb:85:e0:
         78:08:50:7a:9a:c2:93:55:b3:52:81:01:4d:61:0a:70:71:64:
         6b:6d:69:b9:65:b1:0a:94:52:9c:95:84:bd:62:8c:e9:41:24:
         33:6d:44:f2:11:01:a8:4a:9d:62:26:3c:9e:1c:bb:fa:bd:70:
         ee:2e:3b:cf:68:b9:24:0d:e1:2d:59:01:ac:81:db:b7:89:41:
         4a:0d:92:9e:2e:52:c8:fb:2e:03:4b:87:3e:1e:40:99:3c:c0:
         f4:49:b4:79:ee:a9:b9:e1:2f:59:3b:4d:30:aa:2f:30:28:4e:
         27:36:28:ba:19:4b:c7:16:ea:27:9c:71:44:16:39:b8:26:e0:
         0c:fc:bc:57:a8:ad:05:ec:19:1c:5d:01:2f:71:d0:b7:8f:be:
         92:21:32:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:06:33 2024 by rpki-client on console-fra.rpki-client.org