Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa
File:                     323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (raw, json)
Hash identifier:          +uyBDm0MxakCRL3LyrZfACr0/yZS3EtEWF40Oj0ezd8=
Subject key identifier:   15:69:96:CA:AD:A6:2F:5E:65:E2:88:DE:A6:FB:E1:5D:AE:F8:42:95
Certificate issuer:       /CN=7FAD2077691F807236683910594F23BA68280CD9
Certificate serial:       427244212F1C4C23157374EB2077995BA3322BCE
Authority key identifier: 7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa
Signing time:             Mon 01 Jul 2024 01:05:39 +0000
ROA not before:           Mon 01 Jul 2024 01:00:39 +0000
ROA not after:            Mon 30 Jun 2025 01:05:39 +0000
asID:                     133803
IP address blocks:        2001:df2:7f80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl
                          rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 14:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:72:44:21:2f:1c:4c:23:15:73:74:eb:20:77:99:5b:a3:32:2b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FAD2077691F807236683910594F23BA68280CD9
        Validity
            Not Before: Jul  1 01:00:39 2024 GMT
            Not After : Jun 30 01:05:39 2025 GMT
        Subject: CN=156996CAADA62F5E65E288DEA6FBE15DAEF84295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:e8:fe:66:3f:c9:6f:80:87:61:84:da:73:
                    f1:1d:28:8f:ea:57:95:43:93:8d:b6:b7:14:4f:a6:
                    c6:94:36:ab:9c:5f:a2:81:c8:6b:0d:de:49:96:91:
                    70:6d:a4:c2:e0:3f:b3:cc:16:d8:9e:8f:4f:a3:8f:
                    e1:72:7b:99:6d:6f:93:2b:47:9e:9a:5d:64:c7:3f:
                    f9:73:e1:d5:ae:1b:c3:d4:13:8e:13:8f:59:20:1a:
                    de:d9:52:70:77:08:0b:f1:5f:3d:13:bd:87:75:00:
                    d1:a5:11:c5:25:a9:57:fe:8f:be:6c:ee:c1:8a:d7:
                    a1:df:d4:cd:0e:88:d9:db:33:d3:8a:c0:00:96:0a:
                    81:46:46:dc:87:47:5c:cf:b0:54:f5:2c:7a:31:4b:
                    76:d9:21:1c:2d:26:9f:4f:f4:1d:9a:5d:03:ce:73:
                    6c:67:2f:17:00:57:b4:3a:ab:22:cf:e0:b9:d5:3e:
                    d6:48:d8:66:cd:08:3d:7f:dc:68:5c:e1:82:91:5c:
                    4a:82:c1:75:9b:a8:50:ef:d9:e8:3e:0b:77:13:b8:
                    b0:f9:1e:3b:ff:71:55:2d:f1:58:86:c5:83:e6:19:
                    ac:66:b0:92:2d:68:cb:b7:9d:e1:ec:28:fd:dd:9a:
                    84:ac:67:c6:3f:18:d3:da:10:b3:e7:97:31:c4:0a:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:69:96:CA:AD:A6:2F:5E:65:E2:88:DE:A6:FB:E1:5D:AE:F8:42:95
            X509v3 Authority Key Identifier:
                keyid:7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:7f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:3b:82:27:50:83:13:7b:d8:f9:30:60:15:f1:e3:a3:a3:90:
         4a:08:a6:ad:9d:6a:f8:20:3f:a4:d6:14:e4:aa:97:c1:cd:9b:
         05:a4:7c:ba:87:ec:67:d3:54:30:19:33:4a:ca:be:68:73:51:
         91:d4:cd:bb:a6:fb:59:bb:dd:22:34:84:21:6d:72:da:ab:f0:
         9d:f9:f5:9e:3b:f7:59:96:b7:20:2e:79:fe:1d:d2:9c:01:e9:
         7b:12:fc:e4:e2:25:2b:2a:5a:0e:f2:57:18:65:a7:d7:b2:e2:
         e0:cc:f1:f4:bb:3b:08:d6:d7:6b:32:c7:b5:b2:7f:39:8b:e2:
         30:38:84:2c:75:35:e7:68:55:f3:1c:d7:cf:71:0e:bd:6b:7e:
         81:1f:53:75:01:c3:28:8c:6b:ae:1b:61:c7:a3:9a:b0:40:99:
         e9:fa:09:27:35:e2:a3:4a:a9:2d:e7:d2:e1:a7:c5:ac:70:b5:
         11:1b:b2:63:4c:4b:a6:45:d7:ba:da:b0:61:7e:e9:1f:db:4e:
         fe:50:fc:07:f0:34:4c:56:2f:45:1b:60:cf:9d:a3:4f:3d:25:
         96:41:81:f4:94:6f:57:e2:41:0e:96:86:6c:78:14:43:b4:fe:
         51:be:2e:4d:37:df:47:5f:d5:49:8d:d5:00:a9:2b:da:f0:bd:
         91:aa:1c:e2
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQnJEIS8cTCMVc3TrIHeZW6MyK84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIzQkE2
ODI4MENEOTAeFw0yNDA3MDEwMTAwMzlaFw0yNTA2MzAwMTA1MzlaMDMxMTAvBgNV
BAMTKDE1Njk5NkNBQURBNjJGNUU2NUUyODhERUE2RkJFMTVEQUVGODQyOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Iuj+Zj/Jb4CHYYTac/EdKI/q
V5VDk422txRPpsaUNqucX6KByGsN3kmWkXBtpMLgP7PMFtiej0+jj+Fye5ltb5Mr
R56aXWTHP/lz4dWuG8PUE44Tj1kgGt7ZUnB3CAvxXz0TvYd1ANGlEcUlqVf+j75s
7sGK16Hf1M0OiNnbM9OKwACWCoFGRtyHR1zPsFT1LHoxS3bZIRwtJp9P9B2aXQPO
c2xnLxcAV7Q6qyLP4LnVPtZI2GbNCD1/3Ghc4YKRXEqCwXWbqFDv2eg+C3cTuLD5
Hjv/cVUt8ViGxYPmGaxmsJItaMu3neHsKP3dmoSsZ8Y/GNPaELPnlzHECgybAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUFWmWyq2mL15l4ojepvvhXa74QpUwHwYDVR0j
BBgwFoAUf60gd2kfgHI2aDkQWU8jumgoDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YTc1Yjc0MS04NDZhLTQzMzAtOTY1OS0wNWZmZTgyNjk4ZWUvMC83RkFEMjA3NzY5
MUY4MDcyMzY2ODM5MTA1OTRGMjNCQTY4MjgwQ0Q5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIzQkE2ODI4
MENEOS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhNzViNzQxLTg0NmEtNDMzMC05
NjU5LTA1ZmZlODI2OThlZS8wLzMyMzAzMDMxM2E2NDY2MzIzYTM3NjYzODMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMzMzgzMDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8n+AMA0GCSqGSIb3DQEBCwUAA4IBAQA6O4InUIMTe9j5MGAV8eOjo5BKCKatnWr4
ID+k1hTkqpfBzZsFpHy6h+xn01QwGTNKyr5oc1GR1M27pvtZu90iNIQhbXLaq/Cd
+fWeO/dZlrcgLnn+HdKcAel7Evzk4iUrKloO8lcYZafXsuLgzPH0uzsI1tdrMse1
sn85i+IwOIQsdTXnaFXzHNfPcQ69a36BH1N1AcMojGuuG2HHo5qwQJnp+gknNeKj
Sqkt59Lhp8WscLURG7JjTEumRde62rBhfukf207+UPwH8DRMVi9FG2DPnaNPPSWW
QYH0lG9X4kEOloZseBRDtP5Rvi5NN99HX9VJjdUAqSva8L2Rqhzi
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:44 2024 by rpki-client on console-fra.rpki-client.org