Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a323030333a3a2f34382d3438203d3e20313337333239.roa
File:                     323430323a343834303a323030333a3a2f34382d3438203d3e20313337333239.roa (raw, json)
Hash identifier:          Wtne8zylG0V7tg/qy7c4IOGaiypzwSS5YwVMOjLbuo0=
Subject key identifier:   2B:5C:E1:66:21:68:8E:22:6E:41:36:2D:22:A8:F2:D0:3A:5A:56:70
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       5144D25E5A82A018847CE16E901E6FF4A33B3DB5
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a323030333a3a2f34382d3438203d3e20313337333239.roa
Signing time:             Tue 28 May 2024 19:37:45 +0000
ROA not before:           Tue 28 May 2024 19:32:45 +0000
ROA not after:            Tue 27 May 2025 19:37:45 +0000
asID:                     137329
IP address blocks:        2402:4840:2003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:44:d2:5e:5a:82:a0:18:84:7c:e1:6e:90:1e:6f:f4:a3:3b:3d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: May 28 19:32:45 2024 GMT
            Not After : May 27 19:37:45 2025 GMT
        Subject: CN=2B5CE16621688E226E41362D22A8F2D03A5A5670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:c9:fb:57:fc:03:01:b3:09:b7:7a:48:e7:
                    e4:48:2e:13:02:9b:a4:b3:18:d3:04:66:e5:a3:6a:
                    0f:ba:2a:41:be:22:b5:81:97:9f:1a:18:ec:27:f2:
                    75:3c:95:46:3d:ad:10:78:77:2e:b3:d5:6c:50:fc:
                    1c:a8:bb:1f:77:ae:d5:96:ec:8f:f4:71:86:ab:5b:
                    b5:fa:6c:fc:b7:5b:fe:22:17:74:01:bd:ba:bc:34:
                    b4:67:17:3e:fc:36:26:e7:0f:1a:4c:c0:f0:66:e4:
                    c1:49:3a:cb:47:ee:c8:a8:69:88:8e:68:34:6b:44:
                    07:0f:97:00:79:a1:f3:65:ce:b8:55:48:5d:a7:98:
                    17:8f:93:63:27:f6:38:7b:1b:ce:07:9a:9d:f3:9c:
                    f2:67:56:ef:5d:8f:50:34:fc:74:1c:33:d8:8f:98:
                    4c:08:ec:93:af:b1:78:07:66:a8:70:87:94:8f:40:
                    2b:17:37:cc:b4:1e:30:23:21:8f:42:2d:f6:93:cd:
                    e5:98:e9:63:ee:dd:78:5f:14:8b:f9:7c:e3:fa:2f:
                    07:08:45:6c:33:ef:7b:2c:0c:f4:18:bf:cd:6b:98:
                    89:42:e6:7c:d8:3e:e0:31:e6:c0:b3:e8:09:cc:7c:
                    c5:0d:8c:54:29:2d:79:61:b9:35:7e:cd:22:f1:71:
                    59:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5C:E1:66:21:68:8E:22:6E:41:36:2D:22:A8:F2:D0:3A:5A:56:70
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a323030333a3a2f34382d3438203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4840:2003::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:f2:69:14:79:33:77:27:69:61:93:bb:42:fe:ea:72:95:4f:
         5d:59:79:e2:64:eb:fe:4a:02:d0:08:aa:f6:07:e0:f1:12:ef:
         5b:ee:f2:05:9f:5b:bd:07:da:ab:82:7f:e1:93:c1:4c:d2:47:
         d2:b3:d6:3a:5a:87:3e:95:39:ce:83:c2:0a:e3:82:7b:f2:6d:
         f3:7a:51:2d:2c:c7:28:04:cb:8b:38:d2:18:d3:da:80:53:9f:
         ae:46:f0:9e:c3:6f:1e:6a:4d:2a:0f:06:17:b7:b2:f6:ae:e1:
         86:7e:be:db:82:11:a4:7f:e7:5c:35:19:35:30:ea:dd:4c:35:
         90:64:b4:a6:aa:87:32:c5:17:d8:f6:f6:04:52:30:e3:f6:b8:
         e5:9a:b9:5d:81:ef:72:78:db:fa:7f:13:78:cc:a5:38:24:aa:
         b1:78:17:8c:7b:3f:23:38:44:0c:5c:c0:1a:e6:43:fc:2f:db:
         42:59:7a:4e:56:aa:82:34:7b:c4:f0:0b:6c:26:b9:b0:4d:20:
         c5:3a:76:a5:5c:fb:78:0b:32:71:f8:88:b1:0f:eb:b2:5f:bc:
         3b:69:95:e3:a7:1a:7b:6f:8d:cf:2f:d4:e5:96:49:24:82:f5:
         bb:0e:08:d1:c0:a3:de:3a:70:ed:71:46:34:18:94:7c:02:4b:
         6e:94:7f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org