Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa
File:                     323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (raw, json)
Hash identifier:          mvJZ5P+nfaQNHm/E6Wrm1eme2Oj4MgjMCdWbKs/E0Ws=
Subject key identifier:   06:93:C4:A1:01:7E:A1:C7:8A:5C:BC:95:7C:56:4A:49:B6:FD:2A:C9
Certificate issuer:       /CN=7FAD2077691F807236683910594F23BA68280CD9
Certificate serial:       6793E3F7F841EABCCCCE43F9C2B1468571A0315C
Authority key identifier: 7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa
Signing time:             Mon 31 Jul 2023 00:09:42 +0000
ROA not before:           Mon 31 Jul 2023 00:04:42 +0000
ROA not after:            Mon 29 Jul 2024 00:09:42 +0000
asID:                     133803
IP address blocks:        2001:df2:7f80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl
                          rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:93:e3:f7:f8:41:ea:bc:cc:ce:43:f9:c2:b1:46:85:71:a0:31:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FAD2077691F807236683910594F23BA68280CD9
        Validity
            Not Before: Jul 31 00:04:42 2023 GMT
            Not After : Jul 29 00:09:42 2024 GMT
        Subject: CN=0693C4A1017EA1C78A5CBC957C564A49B6FD2AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:e9:61:d0:cf:72:90:38:e9:de:07:53:aa:
                    26:38:78:e2:c1:6c:76:35:02:a1:e3:5b:df:dd:76:
                    9a:09:c9:99:90:fa:a0:b7:59:ad:01:be:66:04:ce:
                    87:e2:34:8a:fa:71:d6:40:dd:44:19:af:62:8e:40:
                    84:39:27:d5:56:4d:aa:1f:fa:94:b0:d2:17:48:89:
                    50:57:dc:01:11:a5:b8:a2:33:16:e4:1e:af:2a:9a:
                    6a:34:f9:dd:12:1d:13:d2:7f:98:d7:7e:7c:a4:21:
                    9e:a2:81:d8:aa:b3:48:59:b5:04:d9:6d:a4:6e:6c:
                    f7:dd:a4:cc:90:97:87:9a:9f:9f:95:f4:30:53:9b:
                    98:70:d1:07:0f:38:e3:83:8e:60:a7:f7:9d:f9:bc:
                    92:08:8a:7e:92:60:27:d2:9a:81:59:28:06:63:ff:
                    47:25:d2:81:ea:b1:ab:bc:b7:9c:6e:80:a4:91:2b:
                    26:fb:bc:6b:96:f5:f0:d5:01:7e:ca:c1:9a:27:fa:
                    63:e2:5e:c8:db:60:ee:40:bb:9b:83:23:fe:fc:e7:
                    c3:14:68:41:27:22:25:35:76:fc:f7:91:04:dd:24:
                    fd:d2:96:51:6a:38:0d:06:bb:eb:d3:b5:3e:a5:5e:
                    aa:5a:1d:ec:bd:6d:a7:d1:30:46:b8:86:bd:8c:07:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:93:C4:A1:01:7E:A1:C7:8A:5C:BC:95:7C:56:4A:49:B6:FD:2A:C9
            X509v3 Authority Key Identifier:
                keyid:7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:7f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:49:9b:b8:6a:ff:eb:91:e7:15:72:7e:66:19:71:52:e4:30:
         ed:89:24:be:ad:f0:8b:97:92:d9:92:00:5a:6c:b5:85:d2:d3:
         91:08:ec:f2:74:69:21:e3:27:5e:cf:cc:c8:c2:33:24:45:ea:
         e8:d0:b7:88:f0:37:69:23:a3:7d:eb:a1:d7:5d:49:11:46:2f:
         e6:b0:5e:af:ab:99:e9:ea:08:5c:cd:df:23:51:a1:e6:ee:eb:
         fe:24:4b:41:12:0e:49:b4:66:8d:34:c2:47:8b:74:15:07:8d:
         d9:47:79:74:b2:27:ad:74:5c:11:36:92:b9:66:06:22:27:62:
         29:47:90:67:8c:87:12:a2:42:96:ab:b0:11:55:5d:16:37:61:
         f8:b9:39:6e:dc:08:6b:35:b5:47:19:08:0a:31:25:6a:23:ab:
         98:0f:42:7b:b8:46:35:d8:47:2a:59:15:15:86:1e:b3:54:d4:
         d4:69:2b:29:4f:e7:1b:5c:0e:1f:eb:af:cd:e3:d9:ed:fe:3b:
         a8:63:9f:3c:0c:f0:23:26:d0:6f:86:c4:25:ed:05:84:58:ab:
         da:5b:f3:21:e5:7e:b9:03:32:4a:02:c6:f1:4d:44:c4:fb:4b:
         83:08:10:56:c6:bc:f2:cd:5f:24:52:cb:62:e4:68:ab:c7:1e:
         2f:f1:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:09 2024 by rpki-client on console-fra.rpki-client.org