Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa
File:                     323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (raw, json)
Hash identifier:          Jn99cL4fgcEPbh24njIDYKuvldMIr2jNGSja0e4Hk1s=
Subject key identifier:   AA:C4:9C:D9:AC:50:78:D6:7B:8A:99:50:39:C5:9E:84:27:6E:5B:8B
Certificate issuer:       /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A
Certificate serial:       67FAF9FA15DC697B9BDD064CEA6C3BC55B3E8886
Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa
Signing time:             Wed 24 Jul 2024 00:35:17 +0000
ROA not before:           Wed 24 Jul 2024 00:30:17 +0000
ROA not after:            Wed 23 Jul 2025 00:35:17 +0000
asID:                     152841
IP address blocks:        2001:df4:cc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl
                          rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fa:f9:fa:15:dc:69:7b:9b:dd:06:4c:ea:6c:3b:c5:5b:3e:88:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A
        Validity
            Not Before: Jul 24 00:30:17 2024 GMT
            Not After : Jul 23 00:35:17 2025 GMT
        Subject: CN=AAC49CD9AC5078D67B8A995039C59E84276E5B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1a:73:1b:ea:29:8f:24:b1:e9:d8:fa:6c:09:
                    5a:f1:91:04:7d:4e:6c:e5:cb:d1:82:03:b9:cc:bb:
                    13:c8:9b:88:7a:10:3f:7b:56:8e:2e:86:7b:ce:4d:
                    f9:a3:c1:97:8c:24:59:30:2c:7f:b6:8f:60:c8:7f:
                    84:84:1c:18:3c:25:33:ad:ea:33:aa:74:43:82:8e:
                    07:7f:80:ad:f5:68:7d:b4:18:af:1c:7a:c0:62:d2:
                    bf:3d:e4:6d:db:33:82:0f:57:3b:6b:43:f9:d6:cc:
                    47:80:f6:36:b7:37:85:85:dc:6e:8a:ae:36:ae:ac:
                    78:83:a4:e4:05:32:11:65:2c:54:dd:04:62:f5:45:
                    9e:11:d4:c7:3d:82:38:46:72:dd:63:e5:e9:53:ac:
                    e4:bf:8f:5d:2e:ea:46:d7:6f:44:64:45:d0:a9:3a:
                    0b:7b:d3:7d:2f:23:b6:24:b9:9d:d0:e2:76:6e:c5:
                    e9:31:0d:4c:c4:9d:90:08:9d:32:5f:b5:ee:a9:2b:
                    e1:e2:98:77:07:22:72:a1:7c:f8:5c:d0:43:7d:c6:
                    dc:8c:3c:d0:0d:90:df:13:dc:51:e9:0c:cc:54:59:
                    8b:56:5d:67:d9:a9:1b:89:b6:cf:71:e0:ad:f4:33:
                    8e:97:40:a2:47:1c:4c:27:e9:93:a9:08:66:a8:c7:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C4:9C:D9:AC:50:78:D6:7B:8A:99:50:39:C5:9E:84:27:6E:5B:8B
            X509v3 Authority Key Identifier:
                keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:54:7c:01:46:48:01:fc:37:d8:c1:f9:03:f2:95:0b:a0:92:
         3e:6a:f0:28:7d:e3:c4:f3:5e:8a:7f:25:9e:99:fd:34:ec:94:
         74:1f:8c:d2:ec:b2:85:df:c2:57:3e:15:6d:53:88:73:d2:d0:
         f8:aa:84:60:41:29:a4:cb:00:f4:09:25:2a:ab:f9:eb:5a:55:
         45:1a:8b:6a:ec:0b:66:9f:9f:4e:0c:ea:e8:6f:70:cd:43:02:
         ec:4a:4d:b4:16:85:4b:dc:f0:da:e8:44:10:fd:51:e8:67:d9:
         76:dc:45:30:e7:20:a0:f2:fc:0a:09:d6:67:88:1b:fb:e6:3d:
         6d:68:a1:4e:4a:fa:af:0e:56:c9:32:58:33:ca:1f:f0:02:dd:
         54:a5:16:7f:06:ba:43:87:5a:c0:45:21:4d:89:ae:ec:db:83:
         78:aa:fe:c1:60:d2:94:bf:9a:00:1a:32:83:fe:ef:37:38:9f:
         82:a1:5c:a2:81:3e:f9:df:97:c8:f8:27:bf:74:e2:d3:8f:e2:
         f7:04:d6:08:ee:1d:d7:91:b5:83:61:94:fe:d5:04:81:3b:99:
         36:69:5b:b4:ce:56:90:e5:23:69:fb:ff:12:72:ce:5d:dc:b4:
         fe:88:a9:7d:1d:88:1a:63:c6:2a:b1:5f:9f:fc:98:e2:f6:ca:
         4d:8a:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:57 2024 by rpki-client on console-ams.rpki-client.org