Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa
File:                     323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (raw, json)
Hash identifier:          JZOCGNrXopoaPI4jZi8eXqzn2wPKF8AfdVx1G95vRF4=
Subject key identifier:   BE:2F:55:10:22:40:76:8D:C4:D6:36:CB:D5:A5:18:62:79:80:48:7A
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       02FC3EF56B4FAC13F89F4F33E96666B5F14C280F
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa
Signing time:             Mon 01 Jul 2024 01:02:45 +0000
ROA not before:           Mon 01 Jul 2024 00:57:45 +0000
ROA not after:            Mon 30 Jun 2025 01:02:45 +0000
asID:                     131717
IP address blocks:        2401:10c0:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 19:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fc:3e:f5:6b:4f:ac:13:f8:9f:4f:33:e9:66:66:b5:f1:4c:28:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Jul  1 00:57:45 2024 GMT
            Not After : Jun 30 01:02:45 2025 GMT
        Subject: CN=BE2F55102240768DC4D636CBD5A518627980487A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:36:8e:42:e5:07:49:05:06:ab:10:5b:f1:
                    d5:3b:d0:bd:63:e2:67:97:12:61:06:cb:79:a0:36:
                    ee:4f:d9:f9:ec:6b:6a:a6:db:d0:20:5a:53:04:30:
                    c7:ed:c4:66:7e:31:20:12:62:c9:74:1c:ad:c3:a9:
                    df:c4:59:b0:8f:6b:b2:7e:f0:2d:88:ad:97:5e:6d:
                    c5:3a:a3:0c:99:b7:03:6e:9d:cf:98:57:94:d3:15:
                    2a:54:70:84:f9:ac:8c:5e:bc:d5:8c:5f:58:a9:fc:
                    71:f8:b5:d1:1f:4c:02:13:b9:a5:06:6b:75:c6:d4:
                    ad:cc:f9:93:d1:35:ad:3e:ed:4d:41:af:d1:09:43:
                    c4:b6:14:43:ff:cb:99:7e:32:9d:99:e1:ed:b2:76:
                    0a:94:89:d9:42:ab:7d:bf:56:9d:03:a0:e5:cf:73:
                    10:f0:8d:6e:f7:43:ff:01:de:5d:c7:70:0c:cb:a6:
                    da:b0:fa:0f:21:db:23:b3:44:b9:64:f2:46:1e:bf:
                    ad:b0:06:fe:93:f6:dd:6d:24:9e:1d:a4:d3:86:87:
                    e3:cd:21:72:38:c4:d4:9b:22:d7:dc:74:0b:ba:cc:
                    53:0f:5d:37:6b:67:a4:4d:86:ce:5f:c0:34:53:df:
                    5d:a2:14:d7:df:8b:fa:e5:98:db:3f:9c:f6:c6:d5:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2F:55:10:22:40:76:8D:C4:D6:36:CB:D5:A5:18:62:79:80:48:7A
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:10c0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         35:d9:99:5b:27:a7:2e:ec:dd:75:4f:63:fb:42:75:a2:24:3e:
         25:69:77:03:93:22:bc:ab:38:e4:af:3c:37:d6:6e:f5:82:50:
         bf:37:24:8d:a2:28:81:a2:3d:af:3e:fb:65:b0:e1:d4:66:04:
         c2:0c:03:1b:9d:56:ee:b3:c7:33:b1:9d:d8:db:66:56:6e:17:
         4b:c0:ff:90:90:77:9b:63:a5:cf:09:b4:c6:ed:b7:97:a5:45:
         7e:b4:89:8f:8a:3f:ce:87:45:c8:e8:db:ba:c7:4a:50:a7:cc:
         69:72:14:ff:a4:8f:d0:56:cc:bb:92:2d:ea:04:d1:41:00:82:
         57:82:c4:cc:14:2a:2d:f0:8a:25:ba:4b:8f:32:44:53:6d:df:
         cf:d4:c4:bd:9f:d6:f7:c2:62:9f:ba:7a:f0:fe:bb:c5:a0:6d:
         3a:57:95:96:39:0c:1b:8e:4a:bc:12:3a:e1:6e:7d:00:ba:d4:
         08:a4:e0:79:2f:3a:eb:8a:c5:b8:e5:31:e1:0a:63:30:c4:26:
         f9:75:68:cc:8a:2e:bf:16:d9:70:ab:22:bd:8e:f7:43:2d:05:
         8d:37:9d:e4:5d:28:b8:7b:9f:0e:0b:ae:18:f7:ee:b0:3e:b0:
         3f:56:25:ef:19:13:5c:f2:9a:c1:12:42:67:92:e2:1e:27:1b:
         bb:b0:ae:6d
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUAvw+9WtPrBP4n08z6WZmtfFMKA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4
MTg2NTA4NzAeFw0yNDA3MDEwMDU3NDVaFw0yNTA2MzAwMTAyNDVaMDMxMTAvBgNV
BAMTKEJFMkY1NTEwMjI0MDc2OERDNEQ2MzZDQkQ1QTUxODYyNzk4MDQ4N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcjaOQuUHSQUGqxBb8dU70L1j
4meXEmEGy3mgNu5P2fnsa2qm29AgWlMEMMftxGZ+MSASYsl0HK3Dqd/EWbCPa7J+
8C2IrZdebcU6owyZtwNunc+YV5TTFSpUcIT5rIxevNWMX1ip/HH4tdEfTAITuaUG
a3XG1K3M+ZPRNa0+7U1Br9EJQ8S2FEP/y5l+Mp2Z4e2ydgqUidlCq32/Vp0DoOXP
cxDwjW73Q/8B3l3HcAzLptqw+g8h2yOzRLlk8kYev62wBv6T9t1tJJ4dpNOGh+PN
IXI4xNSbItfcdAu6zFMPXTdrZ6RNhs5fwDRT312iFNffi/rlmNs/nPbG1fLRAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUvi9VECJAdo3E1jbL1aUYYnmASHowHwYDVR0j
BBgwFoAUiCIJ43NW4FEvvk6BsA5PJIGGUIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MDc0NzFhMy1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMC84ODIyMDlFMzcz
NTZFMDUxMkZCRTRFODFCMDBFNEYyNDgxODY1MDg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4MTg2
NTA4Ny5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05
ZjJkLWNmMTZiMWU0YTM1My8wLzMyMzQzMDMxM2EzMTMwNjMzMDNhNjMzMDMwMzAz
YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMTMzMzEzNzMxMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYk
ARDAwDANBgkqhkiG9w0BAQsFAAOCAQEANdmZWyenLuzddU9j+0J1oiQ+JWl3A5Mi
vKs45K88N9Zu9YJQvzckjaIogaI9rz77ZbDh1GYEwgwDG51W7rPHM7Gd2NtmVm4X
S8D/kJB3m2Olzwm0xu23l6VFfrSJj4o/zodFyOjbusdKUKfMaXIU/6SP0FbMu5It
6gTRQQCCV4LEzBQqLfCKJbpLjzJEU23fz9TEvZ/W98Jin7p68P67xaBtOleVljkM
G45KvBI64W59ALrUCKTgeS8664rFuOUx4QpjMMQm+XVozIouvxbZcKsivY73Qy0F
jTed5F0ouHufDguuGPfusD6wP1Yl7xkTXPKawRJCZ5LiHicbu7CubQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:38 2024 by rpki-client on console-ams.rpki-client.org