Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa
File:                     323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (raw, json)
Hash identifier:          +82bIyhJy1fiiWtS6LSBXMYP73KVBmLfq5np70ovTCI=
Subject key identifier:   22:D5:BD:7B:41:62:F7:2B:D6:29:3D:D4:55:30:5A:D4:B2:1C:89:8C
Certificate issuer:       /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD
Certificate serial:       0518B2440B527F0EC7BB2ABEF8DF26B394E83C7A
Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa
Signing time:             Thu 31 Aug 2023 05:01:11 +0000
ROA not before:           Thu 31 Aug 2023 04:56:11 +0000
ROA not after:            Thu 29 Aug 2024 05:01:11 +0000
asID:                     59278
IP address blocks:        2402:6980:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl
                          rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:18:b2:44:0b:52:7f:0e:c7:bb:2a:be:f8:df:26:b3:94:e8:3c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD
        Validity
            Not Before: Aug 31 04:56:11 2023 GMT
            Not After : Aug 29 05:01:11 2024 GMT
        Subject: CN=22D5BD7B4162F72BD6293DD455305AD4B21C898C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:47:38:63:42:c2:a4:0f:66:d8:99:5b:ee:
                    78:08:86:44:01:a2:e0:e2:36:61:f9:3b:71:5f:8f:
                    09:6f:d6:6f:bf:32:72:4f:a4:62:3a:9b:0c:98:5c:
                    a9:93:c5:e5:fc:53:22:af:de:46:59:31:45:01:04:
                    00:8b:b9:e9:08:54:47:5f:27:19:33:67:e7:89:32:
                    d5:b4:d7:63:68:38:de:e5:d8:e5:27:3f:fc:19:03:
                    97:97:49:03:49:0f:52:f7:08:24:83:7b:f7:d2:ee:
                    ab:0d:f2:a2:3b:be:87:37:db:03:84:aa:ca:2f:c3:
                    48:79:0e:32:cb:7b:e8:5f:d3:9f:2e:b9:1e:e3:1f:
                    e0:aa:2e:ec:8c:a0:60:50:43:df:63:a2:79:95:00:
                    dd:e8:23:04:9d:0e:71:48:04:9c:47:b2:ff:90:0d:
                    d6:23:ae:c6:a7:3d:71:d9:04:f5:6f:ab:05:b4:a0:
                    59:4f:11:08:10:4a:dc:ae:ff:90:71:ba:e9:92:9d:
                    28:90:ff:25:2b:46:6b:28:97:19:39:11:d9:80:f8:
                    23:62:8c:09:e8:0c:a8:a6:63:af:1b:0f:ab:35:96:
                    b1:9f:c3:0c:4d:d3:13:6d:bd:37:bb:ca:09:85:1c:
                    ab:8c:ef:1e:82:79:b0:66:b3:0d:8f:e3:45:c6:9e:
                    f9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D5:BD:7B:41:62:F7:2B:D6:29:3D:D4:55:30:5A:D4:B2:1C:89:8C
            X509v3 Authority Key Identifier:
                keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6980:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:e6:9f:d5:86:32:77:41:67:72:b4:aa:83:0d:17:a8:0f:
         b5:85:44:9f:bb:e5:64:bd:5f:eb:6b:2d:51:cf:e6:8a:04:02:
         d6:9d:ea:1a:3b:89:6a:77:7d:d8:14:b0:51:f6:48:51:cb:cb:
         c2:a4:75:19:d6:24:8c:2b:4f:7b:8a:91:a5:d1:72:ba:14:8c:
         9f:48:96:5a:d4:35:1b:36:6a:ae:5d:2f:7a:f4:fb:df:90:00:
         00:e9:43:45:c9:79:d3:9f:2f:ae:a4:44:ef:80:9c:2e:e2:b7:
         7a:1a:51:0e:30:f3:17:27:a2:c1:63:eb:a1:c2:28:83:7a:d1:
         97:41:be:2b:00:67:28:ab:b4:92:67:30:54:f1:93:66:57:e7:
         5c:2b:4c:2a:9e:ee:29:4e:ac:6a:70:1a:cf:6e:01:df:a4:46:
         90:0b:8f:8f:e2:59:43:a9:91:99:fc:c0:50:da:f8:03:f7:2f:
         ad:61:d5:99:27:db:05:9b:70:de:76:fb:ab:8b:58:bf:38:05:
         a7:57:8b:19:79:6b:e5:49:f8:10:f5:be:23:dd:ce:46:8d:5e:
         a7:37:41:d1:26:e6:56:d0:ce:5c:06:b7:34:9b:3b:26:eb:95:
         09:3f:21:93:f9:17:25:89:2c:57:54:12:76:7a:0b:2e:8d:e2:
         ff:24:f4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:20:07 2024 by rpki-client on console-fra.rpki-client.org