Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa
File:                     323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa (raw, json)
Hash identifier:          wsdClnmhfzvKBghPQdb/NtdMAZBgpQ1fjcmmcem5VyY=
Subject key identifier:   B0:39:76:19:72:E2:99:32:25:FF:85:4E:4E:59:4E:42:01:7D:CC:C0
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       0BBE96BAE72108FF2345A191328CB91C73222835
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa
Signing time:             Fri 21 Jun 2024 15:12:54 +0000
ROA not before:           Fri 21 Jun 2024 15:07:54 +0000
ROA not after:            Fri 20 Jun 2025 15:12:54 +0000
asID:                     58396
IP address blocks:        2400:9c80:88::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 00:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:be:96:ba:e7:21:08:ff:23:45:a1:91:32:8c:b9:1c:73:22:28:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Jun 21 15:07:54 2024 GMT
            Not After : Jun 20 15:12:54 2025 GMT
        Subject: CN=B039761972E2993225FF854E4E594E42017DCCC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:86:17:21:1d:83:c2:e4:ef:b5:c5:a8:18:da:
                    3a:0a:d2:52:39:0f:97:ba:5d:55:f4:e8:ce:98:da:
                    8e:c2:df:b6:35:81:6b:d4:7a:f6:d7:68:20:7b:eb:
                    b8:34:82:e5:64:28:49:85:ee:63:6e:6c:fe:0a:6e:
                    bf:e7:59:ef:0e:58:f7:4b:e8:83:df:50:64:20:d9:
                    9e:83:3b:df:a7:0b:e5:e7:26:12:3f:c3:21:bd:c1:
                    63:62:35:91:ee:56:14:74:54:8a:24:8e:e4:7b:2a:
                    a6:f5:5d:f9:9a:17:1b:44:8c:21:43:5b:77:1d:bd:
                    67:d4:f2:25:66:52:1f:d3:0f:5f:dd:46:08:5d:ef:
                    73:0e:43:f0:7f:81:ad:48:48:eb:f4:ac:59:7f:61:
                    9a:eb:19:e6:48:92:32:bd:34:3d:c9:0f:20:49:77:
                    f2:11:6b:91:7a:fb:d9:09:64:9e:ae:5f:94:01:cf:
                    56:85:c7:10:c9:d6:8b:11:29:36:72:95:0e:9e:51:
                    af:40:3e:1e:e2:ce:7f:d0:2d:44:c5:50:78:bd:a2:
                    e4:d0:4e:d8:46:4f:af:15:3b:b7:26:d7:0a:16:c8:
                    70:d3:35:f3:3d:c8:28:a1:a6:2b:17:73:34:cd:4f:
                    cd:2c:45:e6:d8:ca:70:1e:a8:42:75:61:b5:77:70:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:39:76:19:72:E2:99:32:25:FF:85:4E:4E:59:4E:42:01:7D:CC:C0
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9c80:88::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:c1:07:d6:5a:c5:9a:0b:dd:c7:3c:b6:99:f7:ec:34:7e:80:
         b0:e0:e3:61:bb:8b:d6:2b:5a:f1:82:dd:61:db:4a:a9:6f:04:
         56:33:78:f5:6e:b6:59:4c:13:78:91:51:f5:67:6a:13:3d:1d:
         00:10:8c:2c:34:c6:c6:da:7e:ca:19:4b:2a:b4:3a:3f:c6:89:
         2c:15:d8:b9:75:69:3e:31:2b:5f:60:7e:5f:eb:0a:84:57:68:
         15:37:f3:82:9d:81:a9:e3:08:e3:cf:94:eb:c2:38:a3:4e:80:
         87:4b:70:98:4f:57:da:48:a2:b6:9f:cf:9d:b4:74:f4:83:29:
         0b:5d:af:b0:9c:15:da:b3:e5:14:70:e6:d6:27:7d:78:e9:94:
         25:6d:45:00:ba:8b:8e:33:d5:20:c1:35:4b:9c:0f:ec:34:c0:
         8d:64:7f:5a:aa:a2:fc:82:fa:e4:2b:45:9c:4e:bc:2e:b1:74:
         6e:d9:1d:ef:5f:a9:91:a7:04:bc:45:36:df:67:45:8a:74:b4:
         ef:2a:fd:1c:a2:a8:04:ea:4f:71:15:e7:c2:f7:05:9b:91:99:
         fa:7f:b5:80:af:d7:94:bd:fb:55:c1:f9:90:e4:8d:0d:b4:ce:
         6b:74:d7:30:55:0a:f3:91:9d:1d:be:ba:06:41:cb:23:d0:37:
         ac:47:4f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org