Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/323430373a343630303a3a2f33322d3438203d3e203435323935.roa
File:                     323430373a343630303a3a2f33322d3438203d3e203435323935.roa (raw, json)
Hash identifier:          rvrNZqOt+iRVfEtr2reeH2h9kuZ0QSQR5X6546rnAM4=
Subject key identifier:   93:31:48:3E:09:E6:14:25:E2:00:3D:30:3F:33:4E:E5:3C:16:38:04
Certificate issuer:       /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Certificate serial:       3D02F1189A815D964B1B7C380185AD03EF583D67
Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/323430373a343630303a3a2f33322d3438203d3e203435323935.roa
Signing time:             Mon 31 Jul 2023 00:08:17 +0000
ROA not before:           Mon 31 Jul 2023 00:03:17 +0000
ROA not after:            Mon 29 Jul 2024 00:08:17 +0000
asID:                     45295
IP address blocks:        2407:4600::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl
                          rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:02:f1:18:9a:81:5d:96:4b:1b:7c:38:01:85:ad:03:ef:58:3d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
        Validity
            Not Before: Jul 31 00:03:17 2023 GMT
            Not After : Jul 29 00:08:17 2024 GMT
        Subject: CN=9331483E09E61425E2003D303F334EE53C163804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:e6:5d:8d:2f:35:9f:18:e9:08:e8:89:a7:
                    fd:10:eb:46:9f:62:6e:0b:2f:ff:08:fe:c6:a1:d0:
                    9f:e2:60:41:0c:37:0b:aa:28:5f:f8:7c:0f:57:05:
                    65:34:bc:8b:1b:90:06:84:0a:d1:8a:1c:90:78:fa:
                    e4:ca:f8:17:f2:9c:85:64:f0:68:61:40:68:65:99:
                    24:0c:a3:96:7e:91:3a:e0:1f:0b:d8:33:6e:ee:a3:
                    19:1b:73:24:10:13:c8:aa:7a:fb:4b:c4:bd:8b:1a:
                    5a:58:1a:92:eb:b5:71:fb:d4:6e:c0:4a:c2:d4:64:
                    3a:6d:3d:c4:c3:a1:79:6a:13:22:37:be:53:2d:97:
                    af:76:e7:7a:92:2f:0b:34:00:3c:e0:cc:22:84:cf:
                    d9:4d:08:e8:34:60:c2:4b:58:96:8c:e7:1a:0b:2e:
                    62:dd:0b:25:da:d0:dc:03:8b:66:bc:e8:52:d4:c0:
                    db:4f:c3:63:36:49:23:77:a1:ed:be:13:d8:29:03:
                    09:11:64:07:0b:cd:2b:00:15:05:9b:1c:c4:2f:d2:
                    9a:eb:a8:17:b7:43:9a:98:29:5d:d4:80:cd:75:f1:
                    ad:1d:7d:e6:90:e9:4e:87:5c:05:88:39:7e:9a:d2:
                    1d:19:e8:ed:07:95:77:20:91:05:ae:1c:2b:a8:40:
                    33:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:31:48:3E:09:E6:14:25:E2:00:3D:30:3F:33:4E:E5:3C:16:38:04
            X509v3 Authority Key Identifier:
                keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/323430373a343630303a3a2f33322d3438203d3e203435323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:13:b6:ad:1b:00:1d:c4:b5:d0:ed:04:c1:9a:74:48:5a:52:
         0d:aa:39:7b:f9:a5:32:54:6b:36:a6:96:19:4b:ec:38:a9:68:
         b8:ee:7a:7a:4f:56:2d:de:61:e0:a8:92:93:04:85:5d:85:42:
         07:19:41:e8:d0:36:55:0b:18:18:6d:65:3e:b9:c8:01:d4:92:
         91:9b:fa:b4:1a:60:b5:aa:b8:42:61:64:bc:04:f6:26:f4:9a:
         81:60:40:72:c5:d5:81:ec:d7:4e:9e:c8:2d:b8:1d:e3:89:ea:
         60:e6:b6:4e:1e:ce:19:ff:48:2c:d0:ea:e7:41:04:52:f0:07:
         0d:8e:9c:2a:29:26:40:8d:88:59:42:42:b5:c7:e8:fe:ed:8b:
         c6:d8:e6:ff:c7:7f:f0:5e:7f:c6:73:bb:f7:f0:0d:df:f4:ce:
         b8:18:50:52:b9:32:b2:94:01:1d:e5:93:45:9f:b6:72:aa:b2:
         08:e3:61:7b:a8:a2:ee:a7:5b:a5:2d:9f:99:53:8d:78:98:c2:
         08:b1:e2:ed:21:30:48:a5:dd:31:be:45:aa:43:42:d8:3a:a5:
         e0:a9:be:da:13:bf:b9:c1:9f:82:c7:a5:66:e1:a6:90:da:7e:
         f7:c7:ce:16:6f:7d:04:d6:e3:71:22:1e:14:56:c8:e3:ea:cf:
         6e:26:4a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:32:10 2024 by rpki-client on console-ams.rpki-client.org