Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa
File:                     323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa (raw, json)
Hash identifier:          bpYLnqe2clQ4EE4a3ZDV/Al0jCZjuAWduAfOwGisFaw=
Subject key identifier:   53:0A:65:EB:DB:7B:0D:DE:33:FB:73:FD:A3:D5:1D:31:E6:60:00:10
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       34AF78989CE84E48999349BB51D1DAF33D26092D
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa
Signing time:             Tue 28 May 2024 19:36:54 +0000
ROA not before:           Tue 28 May 2024 19:31:54 +0000
ROA not after:            Tue 27 May 2025 19:36:54 +0000
asID:                     137329
IP address blocks:        2402:4840:1113::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Mar 2025 11:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:af:78:98:9c:e8:4e:48:99:93:49:bb:51:d1:da:f3:3d:26:09:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: May 28 19:31:54 2024 GMT
            Not After : May 27 19:36:54 2025 GMT
        Subject: CN=530A65EBDB7B0DDE33FB73FDA3D51D31E6600010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:96:30:96:a2:31:e5:28:7a:d1:38:f2:bf:
                    86:b4:f3:52:c9:43:ba:8a:63:30:69:88:a4:3b:a3:
                    a4:c5:1c:51:d2:0f:69:19:0d:c7:86:7a:79:04:2a:
                    e0:ba:d6:ce:79:e0:0e:ee:26:6d:b7:d1:d3:94:7c:
                    5f:62:3f:b5:68:3f:30:f8:ef:50:a0:d6:d3:2d:37:
                    93:3e:bf:48:7c:70:cb:ee:82:f2:d5:0d:ef:a5:a7:
                    8f:0e:4c:31:99:df:94:ca:0c:d5:61:51:dc:45:44:
                    a1:3e:ec:bf:c0:70:df:ae:4f:e3:18:8c:42:d8:d4:
                    e4:6a:c1:46:7f:81:32:e3:0b:5d:cc:e7:90:1e:42:
                    c7:8e:ed:1b:95:ba:71:26:a4:1b:07:7e:cb:dd:83:
                    77:06:28:05:44:d0:ee:3c:00:90:a4:81:37:81:c6:
                    5c:6a:7c:04:da:17:1a:d1:53:dc:7b:06:de:46:0b:
                    bf:21:75:1b:37:7a:dc:a2:6c:71:23:e1:5a:f6:bf:
                    45:a8:35:a7:e1:69:a8:82:2e:56:eb:a1:2f:5e:a0:
                    92:94:f0:af:6e:e8:6d:bc:b7:57:bc:9b:4a:9d:11:
                    f3:5e:bf:ec:d0:67:5a:75:e3:09:b7:85:50:d1:9a:
                    53:db:b1:aa:4a:c7:b0:ef:ef:bd:7a:22:53:16:17:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0A:65:EB:DB:7B:0D:DE:33:FB:73:FD:A3:D5:1D:31:E6:60:00:10
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4840:1113::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:c6:fa:3b:31:b2:29:3a:41:df:c2:88:0c:b6:86:2f:77:74:
         6a:e2:cd:ac:b1:09:69:b3:2a:d7:01:c0:b7:d8:d2:12:ad:6c:
         93:fe:fc:30:bf:45:bc:2d:80:9a:fa:01:94:69:95:4a:12:d2:
         3f:60:05:ab:8c:32:a2:5d:e7:34:5f:76:e4:e5:dd:c0:77:b1:
         ed:35:32:ae:4b:a4:f2:02:27:51:74:78:d0:51:6b:2f:16:00:
         ce:8a:23:55:14:4d:8c:27:3b:6d:c2:93:5d:c7:2b:dc:e5:31:
         da:39:d2:cf:af:fc:12:06:16:83:c5:82:26:3f:b0:43:f2:3f:
         38:ee:a6:22:08:cb:92:40:02:c6:6a:fc:ec:b9:f7:28:af:db:
         0c:1c:53:a0:26:2e:c2:50:94:8c:e5:54:f3:3a:2c:83:e4:25:
         f4:8b:d6:74:49:ba:23:9f:da:91:06:39:f2:65:54:b9:09:d1:
         a6:ac:1e:52:02:66:55:6c:e0:78:44:b3:2c:6c:82:a2:79:3c:
         a8:dc:1b:77:92:a5:ec:e6:40:d7:e6:f8:27:6a:a9:98:00:79:
         7e:24:15:1f:7e:c8:f6:13:b0:b8:0b:99:40:6c:e7:ac:5a:56:
         40:04:de:15:f1:f0:9d:95:ee:22:e5:07:4c:d3:4d:de:2b:d1:
         fa:bb:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:02:18 2025 by rpki-client