Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/323430373a343630303a3a2f33322d3438203d3e203435323935.roa
File:                     323430373a343630303a3a2f33322d3438203d3e203435323935.roa (raw, json)
Hash identifier:          SeGVAY1slIk2TaNYzAuvLycIqKZDFIcM4VA3PpPbZYA=
Subject key identifier:   83:E1:FA:D6:4B:8D:77:6B:0E:19:57:FF:9E:0D:87:DD:46:21:26:21
Certificate issuer:       /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Certificate serial:       463652A73594AD199215AF2B031CA1C2A5F28797
Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/323430373a343630303a3a2f33322d3438203d3e203435323935.roa
Signing time:             Mon 01 Jul 2024 01:04:55 +0000
ROA not before:           Mon 01 Jul 2024 00:59:55 +0000
ROA not after:            Mon 30 Jun 2025 01:04:55 +0000
asID:                     45295
IP address blocks:        2407:4600::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl
                          rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:36:52:a7:35:94:ad:19:92:15:af:2b:03:1c:a1:c2:a5:f2:87:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
        Validity
            Not Before: Jul  1 00:59:55 2024 GMT
            Not After : Jun 30 01:04:55 2025 GMT
        Subject: CN=83E1FAD64B8D776B0E1957FF9E0D87DD46212621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:42:f9:ff:bd:03:14:44:5c:a4:ec:cb:7d:
                    52:3e:58:82:0f:74:1d:60:7a:3a:6a:b8:c2:ce:35:
                    01:68:b7:9a:43:26:b6:5f:d6:ff:24:b9:4a:b4:d2:
                    5e:24:4e:9c:4e:9e:9e:10:b1:03:35:29:68:a2:ff:
                    e0:bf:4f:92:37:ed:d3:19:5f:d2:2a:49:71:2d:7a:
                    f1:24:eb:f1:67:90:31:10:e8:9a:09:64:72:9b:3f:
                    70:17:fb:6f:2c:65:76:bb:16:cb:7a:72:cf:df:6e:
                    85:eb:96:00:9c:21:7c:c4:63:eb:32:5c:74:bc:bc:
                    d5:06:32:89:4d:0a:f7:b8:d6:1e:60:6a:05:d1:c3:
                    0f:a7:4e:8b:a6:6a:cb:a9:20:e5:21:32:5d:ac:35:
                    28:3e:dc:ae:15:eb:21:d3:3f:c0:f1:2a:52:29:61:
                    6b:93:49:8d:0b:a0:ca:e1:17:d4:d4:46:d1:d0:84:
                    8d:42:e7:6b:67:a3:db:6f:5c:86:e6:00:e1:fc:af:
                    1c:c9:b5:f7:4e:55:bc:4f:38:03:c8:6f:cf:de:b6:
                    5f:a1:be:29:07:0b:b7:e6:60:26:6f:f9:4c:fa:40:
                    e5:a7:7e:fe:a6:f3:1c:d3:a3:a4:14:0f:c7:ad:fb:
                    c2:18:07:21:11:8d:74:fc:87:07:eb:0e:ee:28:ae:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E1:FA:D6:4B:8D:77:6B:0E:19:57:FF:9E:0D:87:DD:46:21:26:21
            X509v3 Authority Key Identifier:
                keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/323430373a343630303a3a2f33322d3438203d3e203435323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:a4:8e:b4:52:be:d4:5c:84:87:e2:96:39:98:db:a8:dd:1d:
         85:a4:d1:82:5e:3d:af:0a:51:0d:57:e8:6e:8a:44:3a:ed:53:
         98:b5:68:f1:94:1c:15:6f:f6:41:22:da:23:94:93:40:29:08:
         ce:19:82:6d:8d:1e:7e:c0:ae:65:1a:e7:d5:03:4d:28:fa:dd:
         e8:ce:c9:c1:ab:2c:ee:00:c5:c4:9d:d5:f3:af:ca:8d:53:44:
         22:dd:3d:f3:6a:66:45:f1:8f:5d:c1:6f:ea:38:9f:5c:79:3f:
         e9:29:2b:a0:3c:74:41:9e:0a:4d:71:21:86:64:91:09:be:be:
         94:b9:79:bb:7c:d1:4e:14:18:d8:9e:21:12:87:01:4b:a3:5e:
         43:2d:bf:3b:cd:75:29:4f:07:e1:05:b9:9d:08:9d:d8:45:36:
         05:f2:90:96:8a:0e:cf:4a:04:ab:d3:99:94:3c:b4:fe:19:09:
         7c:ac:59:4d:fc:1d:b4:42:e2:30:51:25:bb:69:82:6a:ed:17:
         51:3f:53:c4:68:5b:9f:e3:c5:cb:1c:fb:85:fe:83:ed:70:81:
         48:6d:22:4e:4c:20:3c:78:95:d9:03:7d:15:7d:83:20:36:7d:
         f0:74:a9:42:02:3c:09:2b:66:03:b3:d9:c2:5a:49:59:c9:14:
         07:fd:f3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org