Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313a3a2f34382d3438203d3e20313337333239.roa
File:                     323430323a343834303a313a3a2f34382d3438203d3e20313337333239.roa (raw, json)
Hash identifier:          rVAa0Wm5xgDgfFk0hRfM/BaKTGEEu3U28si9xpVbIwo=
Subject key identifier:   9E:60:4D:55:BC:AB:62:CB:91:B6:0C:6B:E5:A0:00:C1:5E:F0:A8:01
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       1A5136F9B645EF59F069703038C6F8BA0DAC8D7B
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313a3a2f34382d3438203d3e20313337333239.roa
Signing time:             Tue 28 May 2024 19:39:40 +0000
ROA not before:           Tue 28 May 2024 19:34:40 +0000
ROA not after:            Tue 27 May 2025 19:39:40 +0000
asID:                     137329
IP address blocks:        2402:4840:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:51:36:f9:b6:45:ef:59:f0:69:70:30:38:c6:f8:ba:0d:ac:8d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: May 28 19:34:40 2024 GMT
            Not After : May 27 19:39:40 2025 GMT
        Subject: CN=9E604D55BCAB62CB91B60C6BE5A000C15EF0A801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:eb:1d:c5:47:28:9b:b5:d0:f7:c8:c8:26:11:
                    24:bd:30:be:c9:0b:f2:ea:50:5a:5c:b0:28:ec:35:
                    08:08:cd:b3:47:e9:72:59:88:b0:7c:af:55:84:d4:
                    9f:7a:40:0c:39:48:ca:20:71:01:dd:43:bd:db:11:
                    09:6e:e0:7a:b3:e5:fd:1c:40:46:06:6a:df:f0:2a:
                    03:06:ca:45:4e:fb:fa:52:76:ec:e1:7d:e8:47:65:
                    61:c6:5c:b8:b2:e9:17:cc:ec:fb:7d:31:dc:81:3c:
                    21:6d:92:e5:bf:47:e2:a7:84:cb:97:d6:2b:24:92:
                    2e:ba:5e:5c:ef:e5:c7:82:b7:b1:01:fc:3d:9a:d9:
                    45:43:c1:ff:f4:14:63:44:07:cb:ea:ee:be:bb:e0:
                    d2:3b:b8:38:e3:4b:10:a2:27:b4:ee:bb:02:1f:14:
                    ee:75:65:4e:bc:fe:29:f6:68:19:05:e2:91:13:1f:
                    c3:32:74:89:6a:c6:f2:aa:02:3a:42:68:9e:2a:1c:
                    24:ff:6d:f9:27:9d:b8:f1:f1:40:30:9b:68:de:08:
                    5d:45:5a:78:86:8a:76:75:24:82:04:22:ab:0f:96:
                    89:5f:7c:f9:14:f0:b8:db:23:d3:62:f7:8d:67:9f:
                    24:56:05:50:64:70:7e:76:0a:3d:9d:f2:94:58:99:
                    6f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:60:4D:55:BC:AB:62:CB:91:B6:0C:6B:E5:A0:00:C1:5E:F0:A8:01
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313a3a2f34382d3438203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4840:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:08:b9:5c:55:64:5b:13:4b:c0:d6:04:76:6b:9e:97:fb:55:
         43:9c:8a:0b:2e:25:57:10:b4:9e:2a:ef:5c:86:81:4a:50:82:
         b0:54:03:30:1f:25:3b:03:1e:2f:50:e8:dd:80:d2:4e:04:b3:
         67:d3:a8:a8:a9:99:d4:9b:ec:e7:ad:bf:5d:e3:de:ed:5e:7c:
         14:7e:39:cf:53:26:ec:43:59:3c:62:5a:08:24:eb:30:95:d5:
         66:aa:11:c3:b6:62:0c:22:cf:b8:c4:57:72:2d:ec:bb:8c:5b:
         83:94:b8:4c:cb:98:a0:cb:92:b5:7e:a7:78:f8:e4:e6:de:23:
         12:dd:29:e6:ac:b4:4d:2b:23:1b:b9:76:38:56:5b:83:af:50:
         1d:c9:f2:54:af:18:15:26:db:34:4a:d1:c5:15:60:38:19:18:
         b3:33:8a:fc:ad:f5:4e:29:89:6d:ef:ab:83:54:fe:5e:a9:35:
         e2:b1:7b:9b:a8:03:f2:76:dd:7a:67:47:55:65:29:fd:4c:88:
         3e:a6:d8:b2:50:2d:21:c5:da:ea:8b:2a:71:42:36:8c:7f:bb:
         38:00:15:06:07:eb:49:a1:ca:5c:b4:a3:b2:70:72:6d:d4:f0:
         e0:8f:80:d1:64:63:0d:41:dc:d6:e5:8f:26:de:73:10:52:1f:
         28:b9:9e:16
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUGlE2+bZF71nwaXAwOMb4ug2sjXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRB
REMyMTIxRTAeFw0yNDA1MjgxOTM0NDBaFw0yNTA1MjcxOTM5NDBaMDMxMTAvBgNV
BAMTKDlFNjA0RDU1QkNBQjYyQ0I5MUI2MEM2QkU1QTAwMEMxNUVGMEE4MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66x3FRyibtdD3yMgmESS9ML7J
C/LqUFpcsCjsNQgIzbNH6XJZiLB8r1WE1J96QAw5SMogcQHdQ73bEQlu4Hqz5f0c
QEYGat/wKgMGykVO+/pSduzhfehHZWHGXLiy6RfM7Pt9MdyBPCFtkuW/R+KnhMuX
1iskki66Xlzv5ceCt7EB/D2a2UVDwf/0FGNEB8vq7r674NI7uDjjSxCiJ7TuuwIf
FO51ZU68/in2aBkF4pETH8MydIlqxvKqAjpCaJ4qHCT/bfknnbjx8UAwm2jeCF1F
WniGinZ1JIIEIqsPlolffPkU8LjbI9Ni941nnyRWBVBkcH52Cj2d8pRYmW/FAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUnmBNVbyrYsuRtgxr5aAAwV7wqAEwHwYDVR0j
BBgwFoAUGQk/d2Gp4zfQNAVgR1C/1K3CEh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC8xOTA5M0Y3NzYx
QTlFMzM3RDAzNDA1NjA0NzUwQkZENEFEQzIxMjFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRBREMy
MTIxRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h
MmFkLWQxNzU0MzY1YTQ1ZC8wLzMyMzQzMDMyM2EzNDM4MzQzMDNhMzEzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAkhAAAEw
DQYJKoZIhvcNAQELBQADggEBAHQIuVxVZFsTS8DWBHZrnpf7VUOcigsuJVcQtJ4q
71yGgUpQgrBUAzAfJTsDHi9Q6N2A0k4Es2fTqKipmdSb7Oetv13j3u1efBR+Oc9T
JuxDWTxiWggk6zCV1WaqEcO2Ygwiz7jEV3It7LuMW4OUuEzLmKDLkrV+p3j45Obe
IxLdKeastE0rIxu5djhWW4OvUB3J8lSvGBUm2zRK0cUVYDgZGLMzivyt9U4piW3v
q4NU/l6pNeKxe5uoA/J23XpnR1VlKf1MiD6m2LJQLSHF2uqLKnFCNox/uzgAFQYH
60mhyly0o7Jwcm3U8OCPgNFkYw1B3NbljybecxBSHyi5nhY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org