Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/323430323a343234303a3a2f33322d3332203d3e20313336383830.roa
File:                     323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (raw, json)
Hash identifier:          8mQYzB1g0N9/kAIrWX3si1LgH6siHpQM/MErsP7sMDw=
Subject key identifier:   1E:23:44:94:C1:FB:4C:67:92:4F:2A:3D:EA:D9:4A:22:17:94:AB:4C
Certificate issuer:       /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915
Certificate serial:       46C94DE512A1BDEC12FEF0628A41F3A69890621C
Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/323430323a343234303a3a2f33322d3332203d3e20313336383830.roa
Signing time:             Mon 01 Jul 2024 01:05:01 +0000
ROA not before:           Mon 01 Jul 2024 01:00:01 +0000
ROA not after:            Mon 30 Jun 2025 01:05:01 +0000
asID:                     136880
IP address blocks:        2402:4240::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl
                          rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c9:4d:e5:12:a1:bd:ec:12:fe:f0:62:8a:41:f3:a6:98:90:62:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915
        Validity
            Not Before: Jul  1 01:00:01 2024 GMT
            Not After : Jun 30 01:05:01 2025 GMT
        Subject: CN=1E234494C1FB4C67924F2A3DEAD94A221794AB4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2e:f2:4b:f9:23:81:77:f7:87:c3:f5:23:14:
                    f5:73:1e:8e:b6:09:76:25:0a:22:19:ed:3d:23:9f:
                    57:2a:6d:91:41:6a:db:51:b8:c4:03:83:80:86:28:
                    2e:6c:37:c2:91:c9:fe:61:75:8f:3c:fd:f7:8d:43:
                    d5:ae:a5:a6:9f:7e:3b:c4:0c:21:30:2e:9c:00:44:
                    93:10:e6:86:68:d8:97:50:56:2f:6b:3f:c5:b0:e4:
                    0b:40:45:ca:65:dc:94:36:61:11:c8:02:3c:94:fb:
                    65:f7:33:bd:f8:96:25:f3:77:5b:48:df:a7:31:6b:
                    c5:92:2e:a5:96:0a:f1:76:e9:05:8a:28:bf:69:12:
                    eb:27:13:52:35:ba:4b:26:62:ca:be:34:80:78:4b:
                    71:32:90:b8:b6:83:42:a7:33:f8:57:c4:fd:e7:3a:
                    7a:6e:99:46:59:fc:52:63:10:6d:64:35:ef:b8:02:
                    8a:32:c6:3e:32:f6:a0:b0:9c:f5:a1:2b:46:f8:d6:
                    be:2e:64:18:cd:3e:fd:f2:08:62:39:7e:ba:8f:56:
                    b3:22:11:2b:09:dd:14:73:af:06:2d:68:7d:5c:3a:
                    48:38:87:90:92:8a:d2:33:08:3c:ac:65:25:9d:a5:
                    a1:16:24:52:da:dc:d4:84:25:df:dd:9d:d8:13:b0:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:23:44:94:C1:FB:4C:67:92:4F:2A:3D:EA:D9:4A:22:17:94:AB:4C
            X509v3 Authority Key Identifier:
                keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/323430323a343234303a3a2f33322d3332203d3e20313336383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4240::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:d0:60:b2:21:aa:7a:32:64:4c:d0:5b:78:2d:90:93:9f:38:
         4d:f8:15:61:22:3e:93:76:30:aa:41:12:64:7b:3c:45:09:d6:
         56:43:0b:c5:fc:ca:0b:ab:f9:cb:84:83:55:7b:9f:42:15:38:
         dd:7c:31:eb:65:41:04:0b:2e:53:70:bc:df:34:b3:60:75:f7:
         cb:30:a4:21:93:48:b2:c2:c2:53:52:e6:e8:e7:b7:94:da:3b:
         6f:db:ab:50:dc:e8:fa:03:0a:71:21:6b:1d:1f:bc:90:f7:82:
         c3:5e:4d:6b:27:ff:74:1b:10:56:1a:57:ed:4c:41:4b:a0:b4:
         35:dd:47:32:22:cf:06:cc:01:40:b8:39:f7:82:ed:09:32:65:
         05:a3:72:ab:90:8d:dd:ee:fd:bd:8b:b0:76:2e:81:b3:7a:8d:
         93:1c:af:41:20:7e:02:14:70:5e:ef:a0:03:0e:c3:a1:76:bb:
         94:17:11:d8:74:5a:37:98:24:b0:a8:bf:ee:35:14:9c:8d:25:
         e6:a0:8e:62:24:89:4d:cd:f6:eb:2d:9f:40:38:95:a9:d8:5b:
         e7:cd:e7:4d:0b:5b:1f:30:55:dd:3a:8d:18:b9:a3:6d:b3:64:
         66:41:1f:9a:f0:c9:69:58:f3:21:ad:60:ee:ce:45:cd:f6:30:
         55:f8:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:47 2024 by rpki-client on console-ams.rpki-client.org