Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/323430323a613630303a3a2f33322d3332203d3e203137393936.roa
File:                     323430323a613630303a3a2f33322d3332203d3e203137393936.roa (raw, json)
Hash identifier:          mVMNeids/YkVsj/ZRZ42NxGmVejSdWZnq1TpcDG8p0M=
Subject key identifier:   F8:FC:02:77:51:49:EE:1F:18:40:20:B1:63:CE:4A:28:DE:07:CD:79
Certificate issuer:       /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C
Certificate serial:       1CD483AA3CA383911514BD7C2D5F3658E535E056
Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/323430323a613630303a3a2f33322d3332203d3e203137393936.roa
Signing time:             Mon 31 Jul 2023 00:08:25 +0000
ROA not before:           Mon 31 Jul 2023 00:03:25 +0000
ROA not after:            Mon 29 Jul 2024 00:08:25 +0000
asID:                     17996
IP address blocks:        2402:a600::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl
                          rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d4:83:aa:3c:a3:83:91:15:14:bd:7c:2d:5f:36:58:e5:35:e0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C
        Validity
            Not Before: Jul 31 00:03:25 2023 GMT
            Not After : Jul 29 00:08:25 2024 GMT
        Subject: CN=F8FC02775149EE1F184020B163CE4A28DE07CD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:03:78:8a:f8:88:39:67:49:2c:da:82:55:a5:
                    1a:51:e3:b8:ee:bf:53:6e:86:4a:6c:af:73:29:fd:
                    42:a8:7c:f1:f3:ea:1c:00:de:7a:2d:a4:39:d8:d0:
                    3b:4a:2c:c5:73:0b:78:61:fd:b2:a7:bc:b5:47:29:
                    96:b4:68:94:41:72:68:24:a9:2e:b2:3f:6c:49:7a:
                    9b:b7:7b:7c:b9:2c:7d:51:12:54:e5:2c:d5:30:64:
                    9b:4d:82:dc:76:9b:d9:71:2c:ed:84:1d:87:e1:a9:
                    ac:b1:ef:23:90:62:b8:99:c3:87:08:4d:86:77:1b:
                    d8:2f:66:78:d0:29:0f:5f:37:a8:aa:77:93:58:54:
                    ba:32:00:8d:c8:e2:e7:21:74:93:46:d2:88:a2:fc:
                    a1:e7:f0:6f:98:64:77:b5:44:29:91:c3:8a:e9:9b:
                    c2:a5:0b:b7:d2:f6:b6:a2:2f:44:3b:1a:f4:9c:63:
                    d0:c9:66:b0:66:65:d2:50:0c:2f:08:23:7e:cc:c2:
                    f4:43:18:28:6f:90:34:dc:39:fe:bf:ee:f6:a2:9a:
                    ef:31:6a:36:9a:8a:ad:63:35:7b:95:c7:79:56:9e:
                    73:c6:df:9c:f8:8f:15:fc:4e:a2:78:d1:91:fc:90:
                    c0:01:c5:fd:2c:73:03:a3:86:d7:09:97:65:91:17:
                    0b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FC:02:77:51:49:EE:1F:18:40:20:B1:63:CE:4A:28:DE:07:CD:79
            X509v3 Authority Key Identifier:
                keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/323430323a613630303a3a2f33322d3332203d3e203137393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:a600::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:89:a4:1b:0c:ee:19:27:09:4f:f8:84:b2:6c:cc:3b:18:fc:
         f8:0d:3f:06:15:bb:af:43:4c:75:e8:1e:64:4c:17:74:ca:2a:
         3b:95:cb:29:67:9a:da:a9:0d:23:0d:bd:00:d6:77:ba:62:fc:
         2b:89:a7:53:73:fa:e3:be:13:25:79:e8:16:74:70:64:5d:30:
         b1:8d:fa:98:ac:e3:bb:df:ae:1b:21:a9:4c:f2:af:50:b1:11:
         75:8e:fb:2e:74:a6:51:73:b0:37:ec:75:d0:94:bf:b0:27:43:
         e2:4e:c1:d6:4e:cd:cf:0b:50:38:f2:86:15:76:42:50:bf:47:
         3b:2a:b7:5b:91:2d:f4:03:d9:06:8b:d5:9d:ef:fd:cc:7e:1a:
         3a:c1:c8:01:7d:fc:97:4b:e0:e5:d7:fd:2f:f2:b8:7e:ce:6b:
         16:5b:ac:de:99:ff:2e:79:56:ea:e5:92:c6:8c:c3:b4:55:0d:
         63:21:8a:3a:7e:ff:40:cb:8d:82:55:15:ca:19:3f:b8:5a:64:
         72:01:31:0f:e8:1f:dc:40:8b:21:8d:da:b7:04:5a:e4:a7:90:
         c1:bc:dd:01:4a:e8:ae:38:39:72:e8:75:f8:33:48:a1:fd:10:
         25:8b:3d:5c:c5:bc:d7:43:af:f6:3b:79:68:45:01:ba:05:85:
         cd:19:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 08:36:55 2024 by rpki-client on console-fra.rpki-client.org