Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa
File:                     323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa (raw, json)
Hash identifier:          ZVwqs5atZNSyunZh+HrM7SScrdgcaV2KLIwtY2wsIjQ=
Subject key identifier:   E3:A0:13:AC:39:14:6D:A9:69:5E:4D:C7:9D:F5:EE:4F:FB:D5:A0:AA
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       0892E4A2B59215BAF3DCCF92683E21C53EA327B7
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa
Signing time:             Thu 30 May 2024 11:00:01 +0000
ROA not before:           Thu 30 May 2024 10:55:01 +0000
ROA not after:            Thu 29 May 2025 11:00:01 +0000
asID:                     138887
IP address blocks:        2405:c40:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:92:e4:a2:b5:92:15:ba:f3:dc:cf:92:68:3e:21:c5:3e:a3:27:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: May 30 10:55:01 2024 GMT
            Not After : May 29 11:00:01 2025 GMT
        Subject: CN=E3A013AC39146DA9695E4DC79DF5EE4FFBD5A0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:84:82:de:65:26:eb:92:0a:0b:08:be:8b:
                    1e:99:d0:d3:9f:84:3e:03:cd:78:18:5b:c8:ef:6e:
                    89:5d:38:bd:b8:4d:e2:e6:fa:87:ba:db:ca:56:fd:
                    8a:54:ab:d1:29:b9:62:06:0a:05:5a:61:47:8f:4b:
                    d5:36:f7:03:57:b4:2a:ea:59:1e:69:ef:c8:2c:f3:
                    83:31:2e:55:6a:ba:a8:6f:07:6a:9e:35:fc:d9:e1:
                    05:8e:9d:1c:29:32:bd:0f:0c:01:b4:e6:dc:dc:1c:
                    0c:c0:b1:c5:8a:dc:a9:04:93:2e:9d:df:ac:36:e8:
                    ed:19:99:3c:b3:9c:c4:58:cd:22:a1:95:72:aa:42:
                    55:b9:c2:18:1c:84:84:bf:14:57:76:6c:6a:29:14:
                    6c:59:8b:dc:4e:80:00:3c:30:05:ac:31:a8:80:f6:
                    19:21:3b:98:9f:e7:9f:2c:5a:5b:40:79:b8:b9:c8:
                    47:ed:79:c6:9a:40:7e:40:0a:67:49:92:81:1e:b0:
                    cd:0a:ab:52:c7:47:fa:8d:fc:d5:ea:23:bf:39:bc:
                    10:73:37:4d:22:6d:79:56:10:eb:46:00:cd:19:9c:
                    f1:90:50:5b:50:47:c0:bb:6c:69:fa:b8:c9:1c:44:
                    09:6f:b4:d3:fd:c5:be:cb:5b:fc:04:d8:5d:fb:c2:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A0:13:AC:39:14:6D:A9:69:5E:4D:C7:9D:F5:EE:4F:FB:D5:A0:AA
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c40:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6b:a4:8f:8e:f2:0a:8b:56:65:f8:98:55:62:f3:21:85:c5:02:
         a3:49:d5:a1:5b:85:86:4c:fb:0a:9b:84:b4:e5:71:84:4b:01:
         4f:ee:2e:21:e7:08:38:27:d5:d2:bd:2e:48:90:b3:d1:2a:9f:
         30:c2:be:b2:c5:73:76:60:59:c9:e7:78:40:7d:b5:94:ec:26:
         2e:51:c6:5c:a1:a4:c2:a2:9e:a1:47:33:64:a5:90:2d:02:3e:
         43:35:d2:8a:26:e9:00:3f:0f:67:01:90:52:b5:23:b4:30:d3:
         6e:61:95:0b:b5:19:82:4c:d7:1c:b5:d9:34:80:de:de:ca:11:
         c0:6d:fb:32:74:fc:57:12:4d:ca:67:17:ec:2a:ff:9a:08:0a:
         92:c9:a5:c7:34:69:37:ab:e8:87:69:54:d7:44:b7:e2:b9:61:
         f7:e5:b7:f3:bc:3f:fd:d0:e3:a2:50:79:2b:7e:b4:2a:19:e2:
         23:8c:4c:42:dc:84:e7:5f:8d:f8:b9:9a:81:5a:d6:b0:d0:56:
         60:9a:aa:67:2d:75:e4:a8:a6:cb:75:5c:a5:19:d9:4f:07:7c:
         93:39:1e:31:ce:da:c6:d7:a8:66:c3:30:59:f4:87:54:c1:35:
         5e:02:c0:3f:95:54:6c:33:09:e4:ff:7c:84:14:df:32:0a:b8:
         e9:9e:e5:ad
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCJLkorWSFbrz3M+SaD4hxT6jJ7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhG
Rjg1OEUzRDAeFw0yNDA1MzAxMDU1MDFaFw0yNTA1MjkxMTAwMDFaMDMxMTAvBgNV
BAMTKEUzQTAxM0FDMzkxNDZEQTk2OTVFNERDNzlERjVFRTRGRkJENUEwQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1p4SC3mUm65IKCwi+ix6Z0NOf
hD4DzXgYW8jvboldOL24TeLm+oe628pW/YpUq9EpuWIGCgVaYUePS9U29wNXtCrq
WR5p78gs84MxLlVquqhvB2qeNfzZ4QWOnRwpMr0PDAG05tzcHAzAscWK3KkEky6d
36w26O0ZmTyznMRYzSKhlXKqQlW5whgchIS/FFd2bGopFGxZi9xOgAA8MAWsMaiA
9hkhO5if558sWltAebi5yEftecaaQH5ACmdJkoEesM0Kq1LHR/qN/NXqI785vBBz
N00ibXlWEOtGAM0ZnPGQUFtQR8C7bGn6uMkcRAlvtNP9xb7LW/wE2F37wk21AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU46ATrDkUbalpXk3HnfXuT/vVoKowHwYDVR0j
BBgwFoAUgPntWSkK133ihW7P2DQOKP+Fjj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MDdjODhkYS0yYjU2LTQ4N2UtOWVmZS01NzExNzBiMTAyODYvMC84MEY5RUQ1OTI5
MEFENzdERTI4NTZFQ0ZEODM0MEUyOEZGODU4RTNELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhGRjg1
OEUzRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwN2M4OGRhLTJiNTYtNDg3ZS05
ZWZlLTU3MTE3MGIxMDI4Ni8wLzMyMzQzMDM1M2E2MzM0MzAzYTM0MzAzMDMwM2Ez
YTJmMzMzNjJkMzMzNjIwM2QzZTIwMzEzMzM4MzgzODM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAUM
QEAwDQYJKoZIhvcNAQELBQADggEBAGukj47yCotWZfiYVWLzIYXFAqNJ1aFbhYZM
+wqbhLTlcYRLAU/uLiHnCDgn1dK9LkiQs9EqnzDCvrLFc3ZgWcnneEB9tZTsJi5R
xlyhpMKinqFHM2SlkC0CPkM10oom6QA/D2cBkFK1I7Qw025hlQu1GYJM1xy12TSA
3t7KEcBt+zJ0/FcSTcpnF+wq/5oICpLJpcc0aTer6IdpVNdEt+K5Yfflt/O8P/3Q
46JQeSt+tCoZ4iOMTELchOdfjfi5moFa1rDQVmCaqmctdeSopst1XKUZ2U8HfJM5
HjHO2sbXqGbDMFn0h1TBNV4CwD+VVGwzCeT/fIQU3zIKuOme5a0=
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org