Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33342d3334203d3e203633353031.roa
File:                     323430333a666338303a3a2f33342d3334203d3e203633353031.roa (raw, json)
Hash identifier:          nG3chfwV+Uv+wOu8/Mbc8cZ3sZHKFh+jV2Aw0lzXOGk=
Subject key identifier:   EC:90:E5:EF:BB:E7:76:B8:20:C4:F8:60:57:96:7C:17:A4:30:1E:06
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       517D7928B8D6D0307803549574C55AD49DC38ADD
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33342d3334203d3e203633353031.roa
Signing time:             Thu 04 Jul 2024 01:00:01 +0000
ROA not before:           Thu 04 Jul 2024 00:55:01 +0000
ROA not after:            Thu 03 Jul 2025 01:00:01 +0000
asID:                     63501
IP address blocks:        2403:fc80::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7d:79:28:b8:d6:d0:30:78:03:54:95:74:c5:5a:d4:9d:c3:8a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jul  4 00:55:01 2024 GMT
            Not After : Jul  3 01:00:01 2025 GMT
        Subject: CN=EC90E5EFBBE776B820C4F86057967C17A4301E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:2f:40:19:d6:e1:44:3b:38:f4:09:4d:13:
                    ae:0a:0b:a6:f7:17:b8:a1:9d:df:25:a7:ce:7c:2d:
                    9a:45:75:25:29:f6:6f:e4:13:5f:04:c3:23:b8:7f:
                    d0:50:b1:d6:36:85:ff:34:f9:78:36:b5:1e:a3:4d:
                    be:27:b0:7a:ac:d9:26:05:05:5e:a8:55:7b:f1:32:
                    43:5d:a3:dd:ec:67:d5:1a:93:9d:51:31:6b:3f:24:
                    57:23:2b:d4:79:d5:bb:36:3c:cd:ba:b7:39:ec:2d:
                    12:a5:26:9e:e0:fe:76:68:3f:ed:26:c8:68:7c:f7:
                    ec:39:0e:87:23:74:98:78:b9:d0:de:df:63:94:17:
                    03:2b:02:2c:74:b1:8a:f7:3e:36:3a:ff:c4:07:fc:
                    20:02:5f:99:6a:17:5b:79:d3:3f:b3:70:ea:a6:83:
                    f3:1e:a8:09:24:08:3a:bc:38:4c:16:6f:1a:30:f6:
                    87:d8:48:8a:63:73:ba:07:47:6b:5a:9c:ac:1a:21:
                    62:9d:cb:46:cc:ba:99:79:bc:a8:43:6a:e7:cf:9e:
                    5e:00:bb:5f:83:16:c1:b6:c3:2b:17:53:dd:c7:22:
                    57:4f:84:cd:a1:80:6f:b5:d3:ae:a9:66:64:41:40:
                    d1:e7:c2:00:95:bd:1f:bc:e7:ee:3a:93:98:b9:2a:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:90:E5:EF:BB:E7:76:B8:20:C4:F8:60:57:96:7C:17:A4:30:1E:06
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33342d3334203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc80::/34

    Signature Algorithm: sha256WithRSAEncryption
         01:54:39:15:8d:e7:b0:14:63:90:58:1e:3f:63:fc:60:56:47:
         d9:00:19:09:40:03:25:45:de:de:97:34:9e:9a:eb:b0:9e:19:
         e9:5e:55:37:08:74:d3:1c:af:ec:5d:a5:69:50:fd:bc:6d:8f:
         17:de:09:56:9b:9d:8b:59:0a:dc:59:a2:a7:c7:80:b2:22:66:
         0c:32:6e:68:2b:62:b3:19:b9:a9:07:5f:cb:cc:90:d5:f1:b1:
         79:56:4f:cb:6f:71:b4:c4:9f:81:73:45:f7:c9:5a:2a:79:ab:
         74:b1:38:37:51:0b:50:32:61:dc:ae:b9:29:50:e0:ae:7d:79:
         80:95:b0:2e:41:4f:87:d4:24:48:99:97:23:73:7f:62:fe:4d:
         d8:f2:c9:66:8b:63:fb:60:dd:14:39:8f:90:f2:2a:23:97:78:
         21:e5:85:f3:11:d1:eb:1e:ed:67:2e:ab:b2:4e:0e:23:bf:17:
         1d:6e:68:ce:fb:d2:19:3e:13:76:8c:2f:67:8a:0d:e4:ce:de:
         d4:3a:8a:b4:88:65:63:6b:4a:11:05:70:e4:23:62:e2:50:ef:
         87:4a:1c:7b:f8:84:61:e7:6c:80:4f:e4:20:6e:5f:d4:90:36:
         f1:7a:38:33:c8:02:08:fb:c9:39:ff:fb:ed:92:76:b9:7c:e7:
         06:13:ca:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org