Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a633830333a3a2f34382d3438203d3e20313337333633.roa
File:                     323430323a666463303a633830333a3a2f34382d3438203d3e20313337333633.roa (raw, json)
Hash identifier:          jjYZ4eJUFFJPhThhvnf4AN9X0vH92RIvKoxNmwQOaeQ=
Subject key identifier:   FB:14:5B:BC:9F:7E:12:DA:F3:CA:D2:4D:CC:CC:3E:45:F9:76:A8:5A
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       77E4F54D1D091DDF31906147A6C4F0D4E0E503F4
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a633830333a3a2f34382d3438203d3e20313337333633.roa
Signing time:             Thu 04 Jul 2024 09:25:49 +0000
ROA not before:           Thu 04 Jul 2024 09:20:49 +0000
ROA not after:            Thu 03 Jul 2025 09:25:49 +0000
asID:                     137363
IP address blocks:        2402:fdc0:c803::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
                          rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 30 Sep 2024 00:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e4:f5:4d:1d:09:1d:df:31:90:61:47:a6:c4:f0:d4:e0:e5:03:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: Jul  4 09:20:49 2024 GMT
            Not After : Jul  3 09:25:49 2025 GMT
        Subject: CN=FB145BBC9F7E12DAF3CAD24DCCCC3E45F976A85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:6d:29:07:0a:6f:6a:ee:c1:b6:2e:ca:62:
                    09:c7:55:0a:29:d6:81:b0:a4:dd:78:24:e9:72:6e:
                    43:99:fb:a6:a3:05:c4:58:5b:67:8b:0b:fe:d4:d7:
                    5d:72:b2:90:4a:9b:60:59:ed:1e:bd:b4:b2:1d:04:
                    ad:a2:d8:f4:45:be:05:a5:a3:c7:8a:e6:a1:2f:e2:
                    51:54:d1:ab:41:fd:ad:96:97:70:5f:65:de:b6:90:
                    ea:dc:aa:50:06:10:c5:43:8d:1b:b6:85:08:52:04:
                    1b:b6:83:fa:52:c8:63:86:7b:f3:83:93:6b:00:35:
                    3e:37:a3:81:a0:0a:cf:83:13:1f:5c:54:6d:b3:e1:
                    fa:10:03:d9:ed:ab:00:ff:ad:a0:75:a7:ca:8d:16:
                    86:4a:75:d1:45:5f:c8:4c:f7:a4:ad:6f:75:c2:b4:
                    6d:db:56:49:0f:15:b0:5e:d8:99:4e:ce:13:50:80:
                    d0:af:50:d5:12:3e:21:d2:86:2a:65:29:7a:91:f6:
                    61:04:e1:c1:47:ad:2a:0b:26:36:1d:99:50:07:4f:
                    93:62:e2:81:79:1a:8f:85:e2:55:29:61:0c:66:29:
                    21:1d:98:41:dc:91:a9:eb:3c:a3:f2:4a:77:d1:40:
                    81:22:50:f5:c5:b7:2b:3d:5a:a3:10:a6:38:38:5d:
                    5d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:14:5B:BC:9F:7E:12:DA:F3:CA:D2:4D:CC:CC:3E:45:F9:76:A8:5A
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a633830333a3a2f34382d3438203d3e20313337333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:fdc0:c803::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:bf:4e:73:62:07:49:c9:f6:1d:49:5b:65:3e:41:26:22:f9:
         c4:bb:71:2b:3d:ac:61:e2:fe:f7:6b:0b:95:4c:40:a9:28:72:
         97:3b:93:bd:fb:d1:cf:6f:fe:7e:5b:97:30:38:b6:67:11:dd:
         8d:6f:d5:fa:87:f7:94:58:f0:b1:ed:f6:5f:8f:9b:f6:cb:6e:
         22:03:40:c0:57:c2:6e:72:ff:69:57:24:ee:aa:45:21:4c:b0:
         7b:6c:00:5d:78:d9:02:33:9d:3d:e8:66:85:79:2c:4f:53:89:
         90:a9:66:2e:b6:27:f4:36:66:6a:dd:82:6b:ef:fd:ff:c2:05:
         16:b8:70:3f:94:ad:06:28:a6:58:65:fc:98:6f:e0:89:42:15:
         c8:c3:fb:e7:b0:a6:73:01:71:2f:a7:79:a7:f1:e8:54:d4:1f:
         16:93:9e:6d:53:84:5f:cc:0f:a0:43:54:7a:64:dd:a4:ab:6d:
         ca:cc:df:e6:d9:3d:6b:47:ac:69:a4:80:64:bf:01:11:9d:9b:
         c3:72:5b:da:1c:84:ff:f7:5f:e4:75:0f:e2:31:27:0e:03:be:
         8f:e7:bb:27:37:c5:94:b2:fa:01:7e:e4:2e:d6:0c:f1:2a:b0:
         8d:b7:81:81:65:18:d1:4e:f9:ca:7a:5c:fa:3f:65:51:4c:bf:
         22:0c:a9:72
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUd+T1TR0JHd8xkGFHpsTw1ODlA/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEy
NDk5M0NBMzAeFw0yNDA3MDQwOTIwNDlaFw0yNTA3MDMwOTI1NDlaMDMxMTAvBgNV
BAMTKEZCMTQ1QkJDOUY3RTEyREFGM0NBRDI0RENDQ0MzRTQ1Rjk3NkE4NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvoG0pBwpvau7Bti7KYgnHVQop
1oGwpN14JOlybkOZ+6ajBcRYW2eLC/7U111yspBKm2BZ7R69tLIdBK2i2PRFvgWl
o8eK5qEv4lFU0atB/a2Wl3BfZd62kOrcqlAGEMVDjRu2hQhSBBu2g/pSyGOGe/OD
k2sANT43o4GgCs+DEx9cVG2z4foQA9ntqwD/raB1p8qNFoZKddFFX8hM96Stb3XC
tG3bVkkPFbBe2JlOzhNQgNCvUNUSPiHShiplKXqR9mEE4cFHrSoLJjYdmVAHT5Ni
4oF5Go+F4lUpYQxmKSEdmEHckanrPKPySnfRQIEiUPXFtys9WqMQpjg4XV3jAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU+xRbvJ9+EtrzytJNzMw+Rfl2qFowHwYDVR0j
BBgwFoAUtu4fYdbo6e7GQMzB15HboSSZPKMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MTA4NWI0YS1mNTczLTQyZjMtODI1Yy0xY2YwYzg3MmIxNTIvMC9CNkVFMUY2MUQ2
RThFOUVFQzY0MENDQzFENzkxREJBMTI0OTkzQ0EzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEyNDk5
M0NBMy5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRhLWY1NzMtNDJmMy04
MjVjLTFjZjBjODcyYjE1Mi8wLzMyMzQzMDMyM2E2NjY0NjMzMDNhNjMzODMwMzMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzM2MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
Av3AyAMwDQYJKoZIhvcNAQELBQADggEBAJS/TnNiB0nJ9h1JW2U+QSYi+cS7cSs9
rGHi/vdrC5VMQKkocpc7k7370c9v/n5blzA4tmcR3Y1v1fqH95RY8LHt9l+Pm/bL
biIDQMBXwm5y/2lXJO6qRSFMsHtsAF142QIznT3oZoV5LE9TiZCpZi62J/Q2Zmrd
gmvv/f/CBRa4cD+UrQYoplhl/Jhv4IlCFcjD++ewpnMBcS+neafx6FTUHxaTnm1T
hF/MD6BDVHpk3aSrbcrM3+bZPWtHrGmkgGS/ARGdm8NyW9ochP/3X+R1D+IxJw4D
vo/nuyc3xZSy+gF+5C7WDPEqsI23gYFlGNFO+cp6XPo/ZVFMvyIMqXI=
-----END CERTIFICATE-----
Generated at Fri Sep 27 01:14:21 2024 by rpki-client on console-ams.rpki-client.org