Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa
File:                     323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (raw, json)
Hash identifier:          XsaQ/U9Kr9yLnjasE2URoVoOaYVUiblHMtA00VDq9jU=
Subject key identifier:   97:6C:4B:F5:E0:AE:CD:EF:D0:E1:98:2B:CB:19:36:A3:D6:A8:D2:13
Certificate issuer:       /CN=A7422B678A17489054C0697D44A3B19EB9F67509
Certificate serial:       097F87D54D0F8A612DDEA5A9A082C66A3BF7A8C7
Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa
Signing time:             Mon 01 Jul 2024 01:04:59 +0000
ROA not before:           Mon 01 Jul 2024 00:59:59 +0000
ROA not after:            Mon 30 Jun 2025 01:04:59 +0000
asID:                     38775
IP address blocks:        2001:df4:9800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl
                          rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 19:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7f:87:d5:4d:0f:8a:61:2d:de:a5:a9:a0:82:c6:6a:3b:f7:a8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509
        Validity
            Not Before: Jul  1 00:59:59 2024 GMT
            Not After : Jun 30 01:04:59 2025 GMT
        Subject: CN=976C4BF5E0AECDEFD0E1982BCB1936A3D6A8D213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:92:78:6b:6d:d2:e5:7a:78:b1:8d:24:26:
                    30:4a:e4:48:57:00:94:99:9b:76:54:20:37:f7:bc:
                    0e:80:f3:0c:b5:92:44:b8:f1:ba:52:45:d9:aa:07:
                    19:a8:b7:b7:32:8d:8d:d3:39:d3:6f:bb:c4:9a:06:
                    e0:5b:bd:79:64:87:f4:76:ab:15:83:a8:20:8e:c7:
                    98:38:23:d0:a4:24:3c:63:bc:7b:76:ff:b6:89:04:
                    de:de:3d:78:d1:4d:5c:23:c9:bf:c5:7d:cf:0e:ad:
                    c8:e2:10:7c:1c:48:35:6e:63:48:c6:fc:da:66:81:
                    62:90:b0:da:7b:d3:78:1c:61:dd:6b:57:32:01:7d:
                    1f:70:a9:e7:28:df:58:03:dd:71:35:a3:a1:f4:e1:
                    7c:5a:59:2f:ed:75:3f:1a:29:94:6a:c2:74:9d:a3:
                    a0:54:72:a5:31:d8:5f:2e:a5:e5:99:5d:7f:01:cd:
                    b2:e7:e9:4a:ee:66:ef:e9:8c:62:cc:d3:30:cb:7e:
                    e6:53:18:c5:73:2a:63:6c:55:88:0d:bd:f3:36:b9:
                    20:8d:0a:5e:72:d6:fd:d1:33:d5:92:29:2c:16:5b:
                    da:9c:a9:8b:5d:b0:3f:c7:fd:6e:b7:ba:a6:9f:b5:
                    1e:85:05:77:0a:f3:cf:f2:9e:0f:d8:2a:2c:0d:50:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6C:4B:F5:E0:AE:CD:EF:D0:E1:98:2B:CB:19:36:A3:D6:A8:D2:13
            X509v3 Authority Key Identifier:
                keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:40:ab:c1:38:3f:27:7b:aa:8e:5c:7b:84:ad:03:96:e5:3d:
         98:53:81:81:c6:5e:2d:73:b7:8e:76:9b:3c:43:bc:74:2e:ac:
         bf:8c:b9:08:da:e5:d1:f0:39:1f:f4:80:15:12:97:29:b1:e0:
         7f:fe:df:f6:0a:a6:34:9f:d9:4b:07:66:08:51:3a:09:4f:65:
         97:2c:59:96:3d:5f:76:f1:12:41:6b:71:34:9a:55:32:9b:38:
         d6:55:47:37:95:ab:c8:ee:e5:cc:d2:ec:c8:1c:2c:df:19:2e:
         55:f9:e5:b6:8b:82:b1:45:b2:60:bf:3d:28:9e:85:22:55:e7:
         cd:a3:48:4e:0c:ae:66:ca:8e:b3:ab:f7:90:08:08:6d:99:07:
         4a:a5:c5:c0:22:dc:1b:a0:be:74:9d:4f:42:e1:df:0f:d2:bb:
         fc:d5:8a:01:05:70:d8:26:fb:bb:4b:a9:04:3d:99:81:aa:5d:
         76:a3:b8:c5:b4:39:7f:aa:c3:b2:51:42:47:39:df:8a:ca:1a:
         91:c4:42:f7:11:47:91:84:d0:40:f8:98:0b:a7:0f:9a:2c:1f:
         9f:24:10:cf:70:02:ca:da:7e:5d:80:2e:ea:5c:8b:b0:e3:68:
         d7:63:87:2f:c8:a9:46:3f:26:0d:fe:f4:c9:48:b3:8f:f1:28:
         f0:19:aa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:03 2024 by rpki-client on console-ams.rpki-client.org