Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa
File:                     323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (raw, json)
Hash identifier:          pokBZpL5hJ0olRQ6JHoy2AMfLYfeAfsOoOkW3DB0M7g=
Subject key identifier:   7D:C0:18:D9:96:B0:79:34:00:1E:42:C1:71:50:59:61:68:95:B9:FA
Certificate issuer:       /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0
Certificate serial:       5592542C4DE535E4587352C3FB6F9343A37710D2
Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa
Signing time:             Thu 17 Oct 2024 04:02:49 +0000
ROA not before:           Thu 17 Oct 2024 03:57:49 +0000
ROA not after:            Thu 16 Oct 2025 04:02:49 +0000
asID:                     141070
IP address blocks:        2001:df4:df80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl
                          rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:92:54:2c:4d:e5:35:e4:58:73:52:c3:fb:6f:93:43:a3:77:10:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0
        Validity
            Not Before: Oct 17 03:57:49 2024 GMT
            Not After : Oct 16 04:02:49 2025 GMT
        Subject: CN=7DC018D996B07934001E42C1715059616895B9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:00:43:ea:67:a9:fb:44:de:9f:c7:c9:6e:
                    e6:70:55:c0:84:38:37:37:b0:bb:46:90:67:ff:28:
                    09:8d:42:f1:68:10:49:9c:3a:44:1b:13:1c:56:26:
                    89:72:c5:a1:c5:66:6c:91:3f:67:b8:e6:a5:44:f1:
                    8a:2c:31:1e:fe:48:49:e6:88:df:28:3a:fd:c8:3d:
                    cb:ac:15:e9:97:1e:25:40:ab:c0:6e:a8:ef:d5:40:
                    5b:21:2a:50:80:dd:6e:9b:50:a2:99:1d:3d:6c:60:
                    a9:e5:81:8e:94:03:73:bb:6f:35:af:f5:3b:fa:e2:
                    4f:bb:a2:ef:e5:bf:16:1c:0b:80:22:69:5d:d8:93:
                    90:b3:0d:62:41:a9:1b:3d:80:f7:29:43:2c:b3:32:
                    2e:ca:ab:0e:23:de:54:dc:48:18:5b:d3:e4:99:9e:
                    48:81:d4:64:a8:55:bd:cd:30:c6:b2:32:27:2b:b8:
                    71:13:15:52:f3:bc:49:8f:14:5c:af:e6:c3:3b:af:
                    50:c3:43:27:fa:bb:54:54:d3:78:4c:36:b5:70:fc:
                    bc:f4:78:f3:a3:0b:8d:66:ef:fc:4e:e4:fb:c7:e5:
                    82:ad:94:49:64:9e:5c:97:57:54:6e:1d:2a:76:cc:
                    04:8f:ea:ef:a3:b6:81:e9:6e:37:73:b2:5d:1f:c0:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C0:18:D9:96:B0:79:34:00:1E:42:C1:71:50:59:61:68:95:B9:FA
            X509v3 Authority Key Identifier:
                keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:df80::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:bc:d8:cb:36:19:90:b2:58:16:a9:66:b6:4f:ca:89:4e:c4:
         53:b7:a0:54:db:3a:37:1c:4a:38:dd:38:a9:6e:75:e8:3c:9a:
         8e:d1:20:ca:54:e1:1e:b5:f9:7f:d0:2f:39:7a:c8:40:ec:86:
         36:03:0f:bc:12:75:1d:cb:83:6d:07:93:33:c8:e5:44:1b:bf:
         5d:e9:48:f3:89:ab:e5:ab:09:ed:64:65:79:fe:cf:a4:13:48:
         96:31:e2:a3:d5:f9:97:df:8f:c5:e2:64:38:f1:02:93:4e:c0:
         1f:94:06:92:20:e4:a2:75:8f:7d:88:00:9b:e6:3b:a3:91:76:
         8f:c0:f1:94:c5:86:3d:b7:57:d2:a0:40:19:03:cc:9f:74:44:
         b8:29:f7:8c:53:85:7f:38:47:83:ac:2a:c2:30:7e:35:f6:3c:
         e3:9b:ac:9c:c3:03:1b:74:fb:61:28:64:d7:d8:85:63:53:e4:
         3d:e9:44:e0:e5:e1:37:33:dc:88:ea:3c:3d:aa:f6:4c:72:65:
         77:89:f9:b2:49:14:06:36:ee:82:9b:27:53:08:12:06:ee:1c:
         ef:0f:67:14:65:66:7a:5c:5b:66:a4:04:c9:88:56:43:4b:fc:
         89:88:c8:94:c7:68:17:6e:7f:d7:46:89:fa:8b:c4:6a:e8:ea:
         61:e8:93:c3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUVZJULE3lNeRYc1LD+2+TQ6N3ENIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5
RTNGN0ZBMDAeFw0yNDEwMTcwMzU3NDlaFw0yNTEwMTYwNDAyNDlaMDMxMTAvBgNV
BAMTKDdEQzAxOEQ5OTZCMDc5MzQwMDFFNDJDMTcxNTA1OTYxNjg5NUI5RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcAgBD6mep+0Ten8fJbuZwVcCE
ODc3sLtGkGf/KAmNQvFoEEmcOkQbExxWJolyxaHFZmyRP2e45qVE8YosMR7+SEnm
iN8oOv3IPcusFemXHiVAq8BuqO/VQFshKlCA3W6bUKKZHT1sYKnlgY6UA3O7bzWv
9Tv64k+7ou/lvxYcC4AiaV3Yk5CzDWJBqRs9gPcpQyyzMi7Kqw4j3lTcSBhb0+SZ
nkiB1GSoVb3NMMayMicruHETFVLzvEmPFFyv5sM7r1DDQyf6u1RU03hMNrVw/Lz0
ePOjC41m7/xO5PvH5YKtlElknlyXV1RuHSp2zASP6u+jtoHpbjdzsl0fwHdjAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUfcAY2ZaweTQAHkLBcVBZYWiVufowHwYDVR0j
BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5
M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG
N0ZBMC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2ZWQwNTg0LWFjMmQtNDY2NC1i
YzExLWQwMjZkZGJmYWY3Yy8wLzMyMzAzMDMxM2E2NDY2MzQzYTY0NjYzODMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzAzNzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
9N+AMA0GCSqGSIb3DQEBCwUAA4IBAQDMvNjLNhmQslgWqWa2T8qJTsRTt6BU2zo3
HEo43TipbnXoPJqO0SDKVOEetfl/0C85eshA7IY2Aw+8EnUdy4NtB5MzyOVEG79d
6UjziavlqwntZGV5/s+kE0iWMeKj1fmX34/F4mQ48QKTTsAflAaSIOSidY99iACb
5jujkXaPwPGUxYY9t1fSoEAZA8yfdES4KfeMU4V/OEeDrCrCMH419jzjm6ycwwMb
dPthKGTX2IVjU+Q96UTg5eE3M9yI6jw9qvZMcmV3ifmySRQGNu6CmydTCBIG7hzv
D2cUZWZ6XFtmpATJiFZDS/yJiMiUx2gXbn/XRon6i8Rq6Oph6JPD
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:27 2024 by rpki-client on console-ams.rpki-client.org