Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa
File:                     323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (raw, json)
Hash identifier:          PE2iDOoMVJL2Z6VfDpSapcXCm1utX1GJCTxmv+9zVXQ=
Subject key identifier:   E4:60:73:2A:94:4B:67:FA:48:22:B4:AC:25:91:47:2E:21:94:A8:D7
Certificate issuer:       /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C
Certificate serial:       25E81B0065DEA809EF2A49999372D874C86BB607
Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa
Signing time:             Tue 24 Oct 2023 04:00:00 +0000
ROA not before:           Tue 24 Oct 2023 03:55:00 +0000
ROA not after:            Tue 22 Oct 2024 04:00:00 +0000
asID:                     140444
IP address blocks:        2001:df4:2f80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl
                          rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e8:1b:00:65:de:a8:09:ef:2a:49:99:93:72:d8:74:c8:6b:b6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C
        Validity
            Not Before: Oct 24 03:55:00 2023 GMT
            Not After : Oct 22 04:00:00 2024 GMT
        Subject: CN=E460732A944B67FA4822B4AC2591472E2194A8D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:d0:e0:52:81:a0:74:09:0d:41:0b:d2:69:
                    ff:59:07:57:f2:40:f3:2e:d3:8e:91:0a:4d:9c:53:
                    93:79:32:09:cb:45:92:19:e2:de:b5:03:1d:1d:51:
                    22:49:fc:77:b9:2d:00:46:d2:4b:81:9b:55:08:c6:
                    b9:e3:ea:f0:41:87:16:05:3d:e0:b5:29:b9:13:50:
                    ff:8a:90:d9:24:e4:55:e9:40:ac:18:de:23:b5:33:
                    5e:1d:6d:4d:63:c4:13:cf:18:76:5a:be:e3:6f:fe:
                    4d:4c:e6:be:67:b3:a8:9b:81:67:81:a6:f7:a0:7e:
                    30:5a:c1:65:60:ad:ea:c9:bf:13:0b:e5:1b:c9:23:
                    58:52:03:0b:92:a4:78:06:de:b1:78:58:83:47:ac:
                    06:68:cc:0a:36:b2:6f:01:1c:35:c0:d7:5e:d6:ab:
                    fc:c6:57:8e:60:f0:2e:7f:5e:26:70:70:26:f9:9c:
                    47:62:18:53:2b:b2:f5:47:a9:6f:1e:37:6b:22:f8:
                    85:b6:7c:be:50:6a:72:32:37:d0:a2:60:d5:56:ed:
                    68:55:e7:0a:7d:59:7c:67:97:d8:f2:81:42:43:a5:
                    cf:f8:5e:7b:ad:f9:f7:78:36:2a:d5:d5:bf:44:f4:
                    75:3d:01:5e:53:09:b0:99:6c:f4:3a:0b:d9:4c:cc:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:60:73:2A:94:4B:67:FA:48:22:B4:AC:25:91:47:2E:21:94:A8:D7
            X509v3 Authority Key Identifier:
                keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:2f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:aa:8a:1c:ed:03:fd:85:ae:7c:34:12:cb:fd:1a:d8:96:49:
         ce:8c:4e:d9:56:8d:a1:df:4f:e3:df:ec:e5:4e:ac:ab:e1:d9:
         57:65:5c:8d:33:e9:b2:0e:62:18:10:f7:92:b9:e9:8e:26:31:
         8e:81:60:39:2a:5b:b0:92:8b:74:92:94:9b:d7:58:7b:50:64:
         cd:e9:41:92:9b:2e:f5:1e:ce:ac:be:01:69:cb:f1:7d:aa:41:
         71:2b:5c:a8:af:68:ad:a1:dc:a4:49:56:ab:6f:dd:ef:c0:c9:
         80:2c:ef:08:be:0c:33:76:5c:0c:21:50:00:1b:af:0b:01:93:
         0d:55:c5:51:76:de:6f:91:80:3b:0c:79:83:57:8c:69:ac:53:
         3f:2b:e6:70:8a:44:e6:2c:ba:e9:c3:96:43:3c:25:5b:ab:5b:
         bf:db:97:da:58:1b:54:7c:a0:65:a4:5a:df:f2:d1:af:0b:20:
         6b:23:64:d2:af:c4:72:0a:38:84:43:21:83:c8:b6:5a:78:c8:
         5c:e3:5f:ba:78:7e:1a:8a:89:03:c0:88:f9:8a:2f:98:17:0c:
         c4:21:4b:94:a3:16:c0:1f:28:b6:e7:5b:8e:fe:bd:39:c5:8f:
         71:ec:98:52:6d:d1:19:27:bb:25:8a:01:54:7c:e3:37:fe:a4:
         9c:e3:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 07:25:12 2024 by rpki-client on console-ams.rpki-client.org