Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa
File:                     323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa (raw, json)
Hash identifier:          5ZcibTabKO6oo8h37eajZx/JPR9G0YVZwJ8TaG55hAA=
Subject key identifier:   C7:E2:C6:F0:C0:07:0E:22:C8:BF:D9:86:C0:6C:C3:38:36:B8:45:E9
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       7D55EED831AA71AF6CE89D9D0F81BB2EEF62D96E
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa
Signing time:             Thu 04 Jul 2024 09:25:30 +0000
ROA not before:           Thu 04 Jul 2024 09:20:30 +0000
ROA not after:            Thu 03 Jul 2025 09:25:30 +0000
asID:                     137363
IP address blocks:        2402:fdc0:c801::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
                          rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 30 Sep 2024 00:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:55:ee:d8:31:aa:71:af:6c:e8:9d:9d:0f:81:bb:2e:ef:62:d9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: Jul  4 09:20:30 2024 GMT
            Not After : Jul  3 09:25:30 2025 GMT
        Subject: CN=C7E2C6F0C0070E22C8BFD986C06CC33836B845E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:d9:3d:08:2f:f7:94:21:a4:ad:19:00:a3:
                    5d:fa:f0:e3:01:f2:48:8f:34:9b:de:57:df:96:ca:
                    7b:47:fb:48:a4:a8:c0:b1:28:86:d3:83:d7:90:2e:
                    76:56:8d:64:ea:18:c3:65:2e:37:57:e3:1f:c4:18:
                    87:13:3e:f8:ca:da:97:a4:22:06:8e:5e:46:01:b1:
                    69:04:30:cf:27:db:ac:fc:9b:8e:d9:1b:ba:7a:7d:
                    da:aa:b1:d9:74:fa:18:47:33:8c:1b:6f:7f:cf:82:
                    b4:38:7d:08:84:dc:64:84:0e:1f:d3:c7:ea:5b:12:
                    a0:7e:74:30:b4:65:60:44:37:bf:95:bb:16:0b:90:
                    68:21:9c:9a:db:d9:86:03:2b:b9:30:dc:4d:4a:c3:
                    2c:a0:e9:c1:12:e7:bb:29:5e:65:33:30:fd:da:55:
                    7b:18:89:c5:a3:24:4c:dc:21:6d:cc:aa:85:98:b5:
                    86:9e:7d:84:1b:5f:f1:3f:2f:18:c7:13:c7:d6:59:
                    d5:90:a9:38:dd:95:7a:54:c1:ff:0c:cc:c8:19:4b:
                    f6:7a:5b:d6:23:31:4e:c9:36:e3:95:39:22:02:01:
                    90:62:25:40:a1:fb:23:24:88:6e:9f:2b:83:39:b7:
                    af:e2:13:cd:11:48:57:48:ae:ad:4f:ee:32:99:be:
                    23:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E2:C6:F0:C0:07:0E:22:C8:BF:D9:86:C0:6C:C3:38:36:B8:45:E9
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:fdc0:c801::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:5a:37:55:2b:18:46:ee:db:ca:b9:b4:08:68:5a:c8:49:
         26:1d:88:9b:ad:22:9d:69:17:31:2f:cb:7d:4e:12:8d:76:a4:
         e4:f4:ab:01:b3:4a:d9:3d:7d:e1:b4:24:ea:8e:e0:84:26:a8:
         10:ee:e7:65:32:7d:f2:61:e7:b9:4c:81:9f:9d:bc:a6:02:cf:
         1e:c7:cb:d4:0b:fa:ae:6f:3d:96:a7:d1:8e:e0:d4:eb:8e:40:
         39:f6:d4:08:67:e3:44:60:3c:ea:38:5e:e5:7e:d9:6b:e8:c4:
         1f:32:7f:5c:49:54:a4:79:1b:1e:4b:0d:39:04:de:f0:b4:8e:
         68:68:4d:d9:68:ed:35:c5:91:6d:ab:11:ee:eb:24:da:5e:c1:
         a4:43:c4:95:6f:b1:47:85:53:75:c3:d9:9d:22:56:87:e1:17:
         5f:4d:f2:a3:7d:93:04:f6:9f:3d:69:7e:a3:c5:0c:bb:b6:93:
         fb:99:eb:ff:bb:25:25:35:25:7d:95:cb:11:9d:cb:78:95:f7:
         74:b0:af:88:d2:2e:bf:05:b7:b2:5d:c5:99:81:d5:a3:01:ef:
         88:dc:e5:b1:41:54:a5:37:6b:ba:01:5b:24:b2:86:74:a4:fb:
         3f:09:4b:c4:06:a2:09:83:97:69:68:06:64:80:2a:59:35:d9:
         ce:95:c3:7a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfVXu2DGqca9s6J2dD4G7Lu9i2W4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEy
NDk5M0NBMzAeFw0yNDA3MDQwOTIwMzBaFw0yNTA3MDMwOTI1MzBaMDMxMTAvBgNV
BAMTKEM3RTJDNkYwQzAwNzBFMjJDOEJGRDk4NkMwNkNDMzM4MzZCODQ1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrDNk9CC/3lCGkrRkAo1368OMB
8kiPNJveV9+WyntH+0ikqMCxKIbTg9eQLnZWjWTqGMNlLjdX4x/EGIcTPvjK2pek
IgaOXkYBsWkEMM8n26z8m47ZG7p6fdqqsdl0+hhHM4wbb3/PgrQ4fQiE3GSEDh/T
x+pbEqB+dDC0ZWBEN7+VuxYLkGghnJrb2YYDK7kw3E1Kwyyg6cES57spXmUzMP3a
VXsYicWjJEzcIW3MqoWYtYaefYQbX/E/LxjHE8fWWdWQqTjdlXpUwf8MzMgZS/Z6
W9YjMU7JNuOVOSICAZBiJUCh+yMkiG6fK4M5t6/iE80RSFdIrq1P7jKZviN1AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUx+LG8MAHDiLIv9mGwGzDODa4RekwHwYDVR0j
BBgwFoAUtu4fYdbo6e7GQMzB15HboSSZPKMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MTA4NWI0YS1mNTczLTQyZjMtODI1Yy0xY2YwYzg3MmIxNTIvMC9CNkVFMUY2MUQ2
RThFOUVFQzY0MENDQzFENzkxREJBMTI0OTkzQ0EzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEyNDk5
M0NBMy5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRhLWY1NzMtNDJmMy04
MjVjLTFjZjBjODcyYjE1Mi8wLzMyMzQzMDMyM2E2NjY0NjMzMDNhNjMzODMwMzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzM2MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
Av3AyAEwDQYJKoZIhvcNAQELBQADggEBAC7bWjdVKxhG7tvKubQIaFrISSYdiJut
Ip1pFzEvy31OEo12pOT0qwGzStk9feG0JOqO4IQmqBDu52UyffJh57lMgZ+dvKYC
zx7Hy9QL+q5vPZan0Y7g1OuOQDn21Ahn40RgPOo4XuV+2WvoxB8yf1xJVKR5Gx5L
DTkE3vC0jmhoTdlo7TXFkW2rEe7rJNpewaRDxJVvsUeFU3XD2Z0iVofhF19N8qN9
kwT2nz1pfqPFDLu2k/uZ6/+7JSU1JX2VyxGdy3iV93Swr4jSLr8Ft7JdxZmB1aMB
74jc5bFBVKU3a7oBWySyhnSk+z8JS8QGogmDl2loBmSAKlk12c6Vw3o=
-----END CERTIFICATE-----
Generated at Fri Sep 27 03:15:28 2024 by rpki-client on console-fra.rpki-client.org