Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa
File:                     323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa (raw, json)
Hash identifier:          xdPWe3KoD2BsSwTAd1VJ99KlAEASMNOdz0rYhUU0I6E=
Subject key identifier:   E0:A4:10:30:9C:1D:F3:F5:72:93:91:CD:A6:C2:FF:FA:85:85:3D:1C
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       22B99ACC35941A6983B77FAC70E357D9A19FE037
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa
Signing time:             Thu 30 May 2024 11:00:01 +0000
ROA not before:           Thu 30 May 2024 10:55:01 +0000
ROA not after:            Thu 29 May 2025 11:00:01 +0000
asID:                     138887
IP address blocks:        2405:c40:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 13:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b9:9a:cc:35:94:1a:69:83:b7:7f:ac:70:e3:57:d9:a1:9f:e0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: May 30 10:55:01 2024 GMT
            Not After : May 29 11:00:01 2025 GMT
        Subject: CN=E0A410309C1DF3F5729391CDA6C2FFFA85853D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:06:dc:11:8e:3c:a2:d4:f7:02:18:bd:57:
                    b6:41:1c:8e:83:1e:03:8f:dc:a3:e4:5a:05:09:ac:
                    9e:44:01:52:6b:50:74:3b:32:15:6c:f2:cf:2a:93:
                    b9:a9:c6:73:3f:98:4e:18:3f:be:51:c6:b4:72:78:
                    2c:4f:e8:ee:5c:3c:b0:1a:7f:64:cf:4e:df:bd:63:
                    d8:8f:80:4a:a9:f0:12:b9:2f:c3:53:71:70:24:a8:
                    1c:32:de:1d:d4:be:d7:36:75:50:34:9d:0f:6f:7d:
                    69:e4:2b:bc:69:74:3e:5c:87:f1:a1:f6:69:9f:20:
                    2b:f6:e6:11:06:27:3f:db:e6:23:1a:a7:7a:9c:fd:
                    82:f4:eb:48:dc:f1:53:e1:85:10:9d:2c:4c:5a:f7:
                    16:39:f7:b7:d5:78:e3:51:16:e2:f0:f6:1f:5b:17:
                    27:96:a0:b4:0e:3e:26:59:33:14:6c:b8:04:1b:ee:
                    81:d3:26:0b:1c:6e:b4:e5:dc:e1:32:85:8b:23:c0:
                    49:cc:c7:3b:97:56:12:ca:46:31:40:84:70:bf:04:
                    65:a3:b9:67:3e:0d:6b:bd:f1:b9:8a:9b:b1:21:74:
                    87:22:00:a5:21:cb:d3:15:24:68:34:51:99:47:fa:
                    d4:99:f6:1f:3a:d3:d2:4a:db:97:0a:04:29:b0:29:
                    4a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A4:10:30:9C:1D:F3:F5:72:93:91:CD:A6:C2:FF:FA:85:85:3D:1C
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c40:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2b:d2:f2:49:31:9c:d6:a8:94:44:7d:e4:d3:ae:ad:a2:d8:26:
         5a:58:9e:08:96:76:b8:ab:9c:99:86:94:16:a8:b3:09:0d:2f:
         25:60:de:bb:f9:76:c2:59:6d:27:e1:ad:fa:99:13:7a:39:ab:
         f3:cc:40:c1:07:08:a0:6f:da:a2:2d:25:ab:af:72:63:79:ff:
         1a:ec:92:6e:c5:d7:e8:ea:32:6b:d9:ac:e1:1d:2d:04:ef:0b:
         52:3e:91:22:58:d8:9c:8d:17:4a:39:5e:90:44:74:6e:24:4f:
         f8:c1:0a:cc:16:53:0b:40:12:36:30:d7:b7:98:05:ce:e9:bc:
         75:d3:34:a4:9c:dc:a6:98:f7:8f:f9:9a:0d:4d:da:83:c3:b1:
         7c:06:49:7b:91:e6:ad:a8:88:f1:f2:d9:bc:38:60:2c:68:b6:
         72:87:37:fa:83:8b:df:04:d2:b4:d3:a6:51:27:2e:10:4c:26:
         66:b5:8b:d5:92:84:1b:a7:cf:bd:d4:9d:5f:06:2e:35:b6:f4:
         2c:9a:df:90:4e:32:a0:ab:a9:6d:bc:0d:e1:7f:6c:48:13:d2:
         82:b3:8f:a7:07:9c:9b:01:72:3e:b7:59:b6:58:76:13:5f:19:
         22:f8:6a:02:29:86:5b:8a:03:ed:fb:e5:94:e1:6f:c4:a9:ca:
         6e:e8:7e:4f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIrmazDWUGmmDt3+scONX2aGf4DcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhG
Rjg1OEUzRDAeFw0yNDA1MzAxMDU1MDFaFw0yNTA1MjkxMTAwMDFaMDMxMTAvBgNV
BAMTKEUwQTQxMDMwOUMxREYzRjU3MjkzOTFDREE2QzJGRkZBODU4NTNEMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GwbcEY48otT3Ahi9V7ZBHI6D
HgOP3KPkWgUJrJ5EAVJrUHQ7MhVs8s8qk7mpxnM/mE4YP75RxrRyeCxP6O5cPLAa
f2TPTt+9Y9iPgEqp8BK5L8NTcXAkqBwy3h3Uvtc2dVA0nQ9vfWnkK7xpdD5ch/Gh
9mmfICv25hEGJz/b5iMap3qc/YL060jc8VPhhRCdLExa9xY597fVeONRFuLw9h9b
FyeWoLQOPiZZMxRsuAQb7oHTJgscbrTl3OEyhYsjwEnMxzuXVhLKRjFAhHC/BGWj
uWc+DWu98bmKm7EhdIciAKUhy9MVJGg0UZlH+tSZ9h8609JK25cKBCmwKUqNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4KQQMJwd8/Vyk5HNpsL/+oWFPRwwHwYDVR0j
BBgwFoAUgPntWSkK133ihW7P2DQOKP+Fjj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MDdjODhkYS0yYjU2LTQ4N2UtOWVmZS01NzExNzBiMTAyODYvMC84MEY5RUQ1OTI5
MEFENzdERTI4NTZFQ0ZEODM0MEUyOEZGODU4RTNELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhGRjg1
OEUzRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwN2M4OGRhLTJiNTYtNDg3ZS05
ZWZlLTU3MTE3MGIxMDI4Ni8wLzMyMzQzMDM1M2E2MzM0MzAzYTMxMzAzMDMwM2Ez
YTJmMzMzNjJkMzMzNjIwM2QzZTIwMzEzMzM4MzgzODM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAUM
QBAwDQYJKoZIhvcNAQELBQADggEBACvS8kkxnNaolER95NOuraLYJlpYngiWdrir
nJmGlBaoswkNLyVg3rv5dsJZbSfhrfqZE3o5q/PMQMEHCKBv2qItJauvcmN5/xrs
km7F1+jqMmvZrOEdLQTvC1I+kSJY2JyNF0o5XpBEdG4kT/jBCswWUwtAEjYw17eY
Bc7pvHXTNKSc3KaY94/5mg1N2oPDsXwGSXuR5q2oiPHy2bw4YCxotnKHN/qDi98E
0rTTplEnLhBMJma1i9WShBunz73UnV8GLjW29Cya35BOMqCrqW28DeF/bEgT0oKz
j6cHnJsBcj63WbZYdhNfGSL4agIphluKA+375ZThb8Spym7ofk8=
-----END CERTIFICATE-----
Generated at Fri Jun 21 06:04:48 2024 by rpki-client on console-ams.rpki-client.org