Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa
File:                     323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (raw, json)
Hash identifier:          L7xlQSMRW8992zD5GKgUVfmbm2CWCHA326rlGEHghKg=
Subject key identifier:   AD:CF:62:9D:B4:62:7C:AA:A4:EA:D6:08:E7:E1:EB:C6:8D:09:44:AD
Certificate issuer:       /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D
Certificate serial:       30968BE0677C53ADC93F84B9C9791EAD68267820
Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa
Signing time:             Sat 06 Jul 2024 07:02:09 +0000
ROA not before:           Sat 06 Jul 2024 06:57:09 +0000
ROA not after:            Sat 05 Jul 2025 07:02:09 +0000
asID:                     137338
IP address blocks:        2001:df4:bd00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl
                          rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:96:8b:e0:67:7c:53:ad:c9:3f:84:b9:c9:79:1e:ad:68:26:78:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D
        Validity
            Not Before: Jul  6 06:57:09 2024 GMT
            Not After : Jul  5 07:02:09 2025 GMT
        Subject: CN=ADCF629DB4627CAAA4EAD608E7E1EBC68D0944AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:df:17:fb:ea:e1:8a:ad:fa:0e:8d:46:eb:
                    1f:ed:62:af:d2:35:f1:c4:a7:da:62:90:18:8a:cc:
                    cd:f7:5e:c8:cd:2f:06:a4:7b:a2:c9:e9:7f:7c:c6:
                    b7:57:75:97:8e:e2:e0:38:f9:5e:04:70:7c:83:85:
                    a2:67:00:f9:48:a6:65:f5:82:ef:3a:e0:d4:82:ce:
                    d4:56:bd:e3:60:7b:58:8f:ae:f1:2a:2e:39:00:8d:
                    1c:16:ae:20:30:c6:b8:37:59:5d:14:0d:96:c4:95:
                    23:0e:1f:3f:f6:94:49:c4:3b:6f:93:ac:d5:24:0f:
                    4e:63:98:59:23:4a:fe:d4:59:5d:6d:9a:1d:53:ea:
                    15:01:86:86:11:1e:d3:ae:bf:96:cb:44:72:0c:f3:
                    16:8b:ce:f6:71:d6:41:72:88:20:14:5a:37:2f:98:
                    1f:50:31:06:53:8e:69:0f:3b:c8:6e:f4:f1:26:5b:
                    e2:5e:bb:9d:3d:52:72:7a:eb:b5:86:b0:63:67:26:
                    a8:05:77:98:8d:f1:1d:32:6d:f8:19:4a:a0:e3:3c:
                    6d:e6:d4:dd:11:d9:3a:43:a0:0c:3f:6f:56:4e:ce:
                    3b:bb:98:04:d2:07:cf:5b:4f:88:2a:4a:5c:5c:7a:
                    00:da:a6:a8:28:a5:97:a1:47:cd:8f:de:fd:d1:80:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CF:62:9D:B4:62:7C:AA:A4:EA:D6:08:E7:E1:EB:C6:8D:09:44:AD
            X509v3 Authority Key Identifier:
                keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:bd00::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:83:96:8f:84:74:37:5d:81:d1:75:67:d8:ac:97:79:97:ad:
         bb:6b:06:b9:61:59:47:4c:43:2b:22:9b:09:6e:75:b8:c7:51:
         1a:75:14:7c:60:78:49:e6:55:4e:ba:07:96:58:c6:d8:53:68:
         d3:3b:a4:cb:51:58:72:5a:17:f9:fd:5e:36:cd:3a:32:31:fd:
         8d:4e:64:e3:f3:14:39:49:ab:cf:0b:fb:b3:e2:bf:55:43:6f:
         88:b9:6b:6a:5e:dc:a9:af:10:ef:af:55:1f:a5:63:67:4a:b1:
         f8:8c:ca:38:97:67:48:59:fd:19:a4:88:bd:ca:59:e4:20:04:
         aa:70:13:a4:54:34:d1:7d:fd:65:99:61:aa:96:7f:5b:08:67:
         f8:42:53:93:58:ba:42:35:1d:fb:23:21:33:d0:15:4c:03:2e:
         9b:61:db:a7:ff:9f:e9:54:94:ef:96:be:90:e0:e8:7a:0d:c5:
         64:b7:18:8d:fc:26:b0:91:dd:a0:8a:ad:be:b1:09:34:e9:df:
         d7:1d:9e:b1:78:57:b7:6d:6c:92:d6:14:cd:77:88:3f:f3:86:
         1a:d0:0a:4d:13:95:cb:1c:bd:39:e8:0d:91:c5:67:a5:b9:a0:
         71:77:be:ff:fa:31:ff:d1:fb:ed:bf:04:23:18:bb:f5:1e:69:
         04:fd:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org