Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313030333a3a2f34382d3438203d3e20313337333239.roa
File:                     323430323a343834303a313030333a3a2f34382d3438203d3e20313337333239.roa (raw, json)
Hash identifier:          ljPIsdHsuZegg4TaOdn9lnJfk1RPM+cT3aMQSDkZ+C0=
Subject key identifier:   DB:3D:E9:DA:24:CE:21:71:45:F4:5E:72:16:C6:7E:1D:AA:F7:DA:DA
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       09288F4E9EAC483C80D7B6491C5525A5E4FAF26D
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313030333a3a2f34382d3438203d3e20313337333239.roa
Signing time:             Tue 28 May 2024 19:39:02 +0000
ROA not before:           Tue 28 May 2024 19:34:02 +0000
ROA not after:            Tue 27 May 2025 19:39:02 +0000
asID:                     137329
IP address blocks:        2402:4840:1003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:28:8f:4e:9e:ac:48:3c:80:d7:b6:49:1c:55:25:a5:e4:fa:f2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: May 28 19:34:02 2024 GMT
            Not After : May 27 19:39:02 2025 GMT
        Subject: CN=DB3DE9DA24CE217145F45E7216C67E1DAAF7DADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:ab:f7:fc:18:31:48:2d:8a:17:94:53:03:
                    37:5d:fa:b7:f1:6f:e2:dd:00:3b:d7:75:f7:37:93:
                    08:8f:ce:99:96:a9:77:4f:5d:29:64:4c:a9:df:94:
                    ea:2a:68:b9:39:76:a4:39:0f:1a:13:07:00:07:32:
                    06:24:ed:f7:09:e7:7f:e3:19:b0:61:1e:98:92:b0:
                    22:9e:9f:29:dc:76:53:ab:f2:ff:c2:b9:99:c0:d2:
                    b7:88:7d:37:bf:15:3f:a8:92:63:1a:c2:08:dc:c1:
                    10:59:01:13:07:d7:9a:32:e8:b7:92:0c:07:35:81:
                    c0:a8:cf:f0:42:b9:43:20:33:e3:80:f9:31:5d:cb:
                    01:09:46:b5:9c:45:91:cd:b4:64:7d:9c:da:0e:47:
                    98:a2:89:e3:a1:b8:4e:96:bf:02:ec:2d:3e:6f:e1:
                    41:95:0b:ba:4f:a8:94:7a:82:d5:08:f2:30:9e:ef:
                    72:90:09:53:08:f7:4c:b0:74:e9:89:31:d1:ac:77:
                    21:1d:1b:f7:32:13:36:75:eb:11:c8:f9:8a:49:48:
                    9a:16:d6:ea:b1:e0:42:76:ce:f2:5d:92:a8:6d:f3:
                    08:77:40:ce:84:27:1d:4e:65:8d:4c:e7:11:07:ae:
                    84:0a:11:79:c7:a0:ed:dc:48:38:96:d6:88:02:9a:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3D:E9:DA:24:CE:21:71:45:F4:5E:72:16:C6:7E:1D:AA:F7:DA:DA
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313030333a3a2f34382d3438203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4840:1003::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:87:92:20:34:f2:42:7c:da:fb:bb:ac:2b:98:93:64:09:
         ca:09:af:0c:93:11:a6:f3:66:46:35:17:5a:7e:ea:ba:6f:72:
         10:57:d7:77:69:41:fc:62:a3:e3:12:c0:98:ae:24:be:6e:67:
         0d:8d:bb:b1:a3:00:ed:0d:15:8d:13:71:69:0e:16:64:c7:c8:
         65:79:88:58:73:0b:3f:ca:3f:95:74:57:87:70:e0:96:f0:c5:
         ca:79:92:0f:8c:40:3f:ed:a8:53:7c:b6:70:00:f6:ab:5e:11:
         96:5f:ac:92:29:7b:7a:07:a7:cf:05:c2:f1:ce:cf:f9:a6:69:
         55:a0:b0:f7:bb:56:3d:99:fb:92:ae:09:30:4f:c4:99:d3:a3:
         86:34:04:39:34:e2:81:21:7f:cf:3d:6c:8c:e6:00:a3:1a:74:
         f0:c8:7f:77:5e:53:65:76:a9:04:b1:8c:09:5a:65:cb:82:c2:
         48:1b:ee:27:66:09:9e:61:ef:1a:ea:98:95:7e:a3:90:98:83:
         d6:69:da:5b:72:02:c6:10:83:b3:bf:cd:ea:66:b5:27:43:ce:
         23:88:73:37:5a:71:b0:18:89:2f:b2:08:2b:38:13:70:6f:67:
         91:0e:00:89:d8:96:01:db:2b:94:0a:dd:ff:66:a6:8d:37:32:
         35:57:53:2f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUCSiPTp6sSDyA17ZJHFUlpeT68m0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRB
REMyMTIxRTAeFw0yNDA1MjgxOTM0MDJaFw0yNTA1MjcxOTM5MDJaMDMxMTAvBgNV
BAMTKERCM0RFOURBMjRDRTIxNzE0NUY0NUU3MjE2QzY3RTFEQUFGN0RBREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzqv3/BgxSC2KF5RTAzdd+rfx
b+LdADvXdfc3kwiPzpmWqXdPXSlkTKnflOoqaLk5dqQ5DxoTBwAHMgYk7fcJ53/j
GbBhHpiSsCKenyncdlOr8v/CuZnA0reIfTe/FT+okmMawgjcwRBZARMH15oy6LeS
DAc1gcCoz/BCuUMgM+OA+TFdywEJRrWcRZHNtGR9nNoOR5iiieOhuE6WvwLsLT5v
4UGVC7pPqJR6gtUI8jCe73KQCVMI90ywdOmJMdGsdyEdG/cyEzZ16xHI+YpJSJoW
1uqx4EJ2zvJdkqht8wh3QM6EJx1OZY1M5xEHroQKEXnHoO3cSDiW1ogCmgwNAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU2z3p2iTOIXFF9F5yFsZ+Har32towHwYDVR0j
BBgwFoAUGQk/d2Gp4zfQNAVgR1C/1K3CEh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC8xOTA5M0Y3NzYx
QTlFMzM3RDAzNDA1NjA0NzUwQkZENEFEQzIxMjFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRBREMy
MTIxRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h
MmFkLWQxNzU0MzY1YTQ1ZC8wLzMyMzQzMDMyM2EzNDM4MzQzMDNhMzEzMDMwMzMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMyMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
AkhAEAMwDQYJKoZIhvcNAQELBQADggEBAFIuh5IgNPJCfNr7u6wrmJNkCcoJrwyT
EabzZkY1F1p+6rpvchBX13dpQfxio+MSwJiuJL5uZw2Nu7GjAO0NFY0TcWkOFmTH
yGV5iFhzCz/KP5V0V4dw4Jbwxcp5kg+MQD/tqFN8tnAA9qteEZZfrJIpe3oHp88F
wvHOz/mmaVWgsPe7Vj2Z+5KuCTBPxJnTo4Y0BDk04oEhf889bIzmAKMadPDIf3de
U2V2qQSxjAlaZcuCwkgb7idmCZ5h7xrqmJV+o5CYg9Zp2ltyAsYQg7O/zepmtSdD
ziOIczdacbAYiS+yCCs4E3BvZ5EOAInYlgHbK5QK3f9mpo03MjVXUy8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org