Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa
File:                     323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (raw, json)
Hash identifier:          zTJG58E9CdtcpbOn2YccIUm1CoDteBuPCbelkCQEFPE=
Subject key identifier:   DA:38:1B:71:1A:03:CF:A8:A2:36:6E:DE:2F:97:AD:AF:BD:C7:44:C5
Certificate issuer:       /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
Certificate serial:       4FAE4BE3334187A611760331964397BE6E9E2FDA
Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa
Signing time:             Tue 29 Oct 2024 07:31:44 +0000
ROA not before:           Tue 29 Oct 2024 07:26:44 +0000
ROA not after:            Tue 28 Oct 2025 07:31:44 +0000
asID:                     153121
IP address blocks:        2001:df4:56c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl
                          rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ae:4b:e3:33:41:87:a6:11:76:03:31:96:43:97:be:6e:9e:2f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
        Validity
            Not Before: Oct 29 07:26:44 2024 GMT
            Not After : Oct 28 07:31:44 2025 GMT
        Subject: CN=DA381B711A03CFA8A2366EDE2F97ADAFBDC744C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d0:13:ca:b8:d2:f1:66:ce:76:66:88:91:12:
                    d9:4a:bf:1d:78:2b:db:82:62:bf:b5:7a:eb:2b:e0:
                    6a:64:b0:9a:ee:bb:07:c3:74:0b:6f:04:e3:f7:05:
                    9e:60:dd:07:76:2c:82:78:05:38:a0:16:81:0c:cf:
                    cf:71:a9:c5:aa:24:c3:c6:71:2a:8b:4d:bb:39:c5:
                    e6:60:3a:a7:e3:bc:04:be:68:f2:66:3f:4e:95:26:
                    ca:31:1b:1d:ff:62:bb:08:c6:16:17:ed:07:c4:3b:
                    e6:87:db:f4:ab:e7:1e:0d:97:33:da:d1:ea:1e:e1:
                    ff:3f:b3:6a:2f:00:e8:2c:a9:cc:59:1f:12:ae:af:
                    ff:0a:43:89:8e:c8:a9:d8:b3:1f:47:8b:e1:dd:49:
                    03:cd:07:2c:62:9f:22:18:a1:66:95:7a:6b:a1:17:
                    31:56:37:61:b4:68:1e:0f:d5:f1:be:03:02:16:9c:
                    b0:29:f9:7e:c0:8d:fe:f9:2a:da:26:e9:e5:ba:37:
                    17:6e:09:e5:a4:93:58:80:e9:51:3b:e2:19:f9:34:
                    91:ff:4d:a7:6b:16:dc:20:1a:37:03:f5:0b:0e:0d:
                    5b:73:6a:1a:6b:04:2f:52:9f:92:39:ca:53:da:40:
                    27:cc:cd:0b:a3:49:9a:1d:d9:97:04:fb:a7:cf:74:
                    91:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:38:1B:71:1A:03:CF:A8:A2:36:6E:DE:2F:97:AD:AF:BD:C7:44:C5
            X509v3 Authority Key Identifier:
                keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:56c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:44:c0:87:5f:2d:dc:72:ed:da:f5:06:2d:29:e4:4c:06:27:
         b5:82:c4:b1:c5:5b:88:01:ce:98:54:f7:52:a0:1b:36:36:cc:
         07:8d:67:9c:3e:a2:dc:da:12:09:16:50:8e:74:ea:b2:7b:44:
         09:b1:45:d6:0b:d7:2e:ef:9d:35:cc:2d:00:83:16:2c:9f:cf:
         5f:db:a9:f4:0c:d7:1f:d5:df:73:d2:cc:e4:73:6e:96:43:1b:
         85:8a:84:c1:35:15:a2:8a:e7:35:5d:0a:16:92:c1:8e:1b:db:
         68:ed:f5:0a:cf:b7:85:a4:50:ff:e3:68:ff:4a:ee:76:76:2f:
         ed:ae:aa:07:e5:05:18:1e:2f:92:82:98:95:17:40:9e:3d:4c:
         17:22:fc:bb:0e:e2:cf:70:1c:1f:a9:9b:d3:5d:3b:1f:d3:14:
         9e:00:aa:b2:6a:bb:6a:e8:92:9b:a5:14:a8:82:3d:29:04:bf:
         62:9b:e3:73:6e:20:66:4e:10:61:ae:e5:76:fc:fd:6a:cd:99:
         96:e1:be:06:75:df:b7:cb:c7:0f:f6:bf:81:52:24:ea:9b:ea:
         c1:e8:be:a3:f9:17:c8:49:5c:e2:66:40:88:ee:f2:64:f5:7d:
         d4:7a:54:82:0f:4a:79:64:d2:dd:97:d4:fd:b8:00:fe:94:d7:
         d3:0d:55:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:28 2024 by rpki-client on console-fra.rpki-client.org