Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a323131333a3a2f34382d3438203d3e20313337333239.roa
File:                     323430323a343834303a323131333a3a2f34382d3438203d3e20313337333239.roa (raw, json)
Hash identifier:          nmA46MBqchgBmHjmLj4T4hmDPfySvl7MZnrE1N4uQA0=
Subject key identifier:   9F:97:CD:83:37:39:38:6D:98:04:91:96:AA:9E:F1:A5:E2:23:89:F7
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       02A4A3794CC8FE83C3B4F63B97A1FE9531780113
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a323131333a3a2f34382d3438203d3e20313337333239.roa
Signing time:             Tue 28 May 2024 19:37:19 +0000
ROA not before:           Tue 28 May 2024 19:32:19 +0000
ROA not after:            Tue 27 May 2025 19:37:19 +0000
asID:                     137329
IP address blocks:        2402:4840:2113::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a4:a3:79:4c:c8:fe:83:c3:b4:f6:3b:97:a1:fe:95:31:78:01:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: May 28 19:32:19 2024 GMT
            Not After : May 27 19:37:19 2025 GMT
        Subject: CN=9F97CD833739386D98049196AA9EF1A5E22389F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:91:e9:3c:ff:0e:61:c8:56:04:d6:2e:39:
                    5d:e8:91:0c:0e:cd:9d:b5:ca:7a:4a:d8:95:76:5f:
                    22:09:64:e7:f4:8b:3d:f3:f5:ab:7c:a4:8d:1a:14:
                    27:3b:8d:e8:74:d1:02:ef:da:00:f8:70:5e:ce:35:
                    3c:5a:c5:53:f3:86:49:40:24:ef:6b:6d:bd:eb:8e:
                    29:2d:70:11:c8:e4:34:01:23:bc:df:ec:bb:2c:4a:
                    46:f1:77:b7:47:92:27:ee:34:ca:df:ae:64:34:a9:
                    97:02:71:5c:83:51:31:96:0f:9d:d3:c8:43:97:f9:
                    23:59:31:fd:84:83:cb:f5:55:f5:77:fe:37:7f:a2:
                    8b:9b:9b:4b:61:f3:22:0e:20:5a:ec:2d:60:c0:a8:
                    83:8b:ee:6d:eb:dd:01:55:35:93:14:a7:cf:19:fd:
                    a0:77:b6:e9:13:64:bc:3a:db:ab:c1:10:5b:1a:55:
                    ca:a4:47:fc:22:13:19:d5:ec:02:3c:2f:64:be:6f:
                    20:6a:01:eb:de:93:30:49:74:19:40:d0:7f:89:12:
                    b1:14:80:73:44:b0:45:bb:89:a5:e2:4a:2f:58:27:
                    26:1c:92:ef:60:78:24:ed:47:64:ea:b9:8a:88:86:
                    25:bb:33:21:ab:12:92:25:a6:d4:01:b7:0f:23:47:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:97:CD:83:37:39:38:6D:98:04:91:96:AA:9E:F1:A5:E2:23:89:F7
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a323131333a3a2f34382d3438203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4840:2113::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:92:52:8b:34:ce:ee:c4:63:62:b0:7c:bb:46:c9:48:a1:c3:
         e8:e8:fa:52:25:95:14:56:e7:f1:05:43:b4:0e:73:42:c2:48:
         bb:43:bb:38:46:f7:0d:5f:e8:f0:2d:49:c9:4e:29:9f:be:a3:
         6e:6f:bd:64:44:6c:2a:05:77:0e:22:ff:5c:77:57:bf:21:5c:
         72:40:cb:cc:19:40:e8:dd:09:9e:2e:b0:8b:2b:b5:a9:a4:fe:
         c9:bf:0e:c2:b4:92:0e:d9:41:60:c6:b4:59:5c:ec:a7:0b:f5:
         84:6b:57:6c:46:33:fd:41:ab:c3:e2:ec:dd:a1:93:ca:0d:55:
         eb:fb:6c:04:42:9a:c7:d8:1b:4c:6f:86:93:e1:7c:fc:59:3b:
         58:d6:b8:7e:5b:0e:7f:ee:46:ef:cd:bf:a9:2e:ae:1c:69:30:
         fe:31:d8:8c:b5:45:3c:89:8a:e4:aa:89:03:5a:d1:51:5d:f0:
         1f:8d:82:b3:b6:02:66:f3:e6:13:ba:75:7e:41:9b:84:2f:9f:
         48:cd:17:35:e9:66:47:dc:3f:81:8e:c4:08:33:b1:12:d9:97:
         63:9b:bf:dc:2f:2a:16:17:7f:23:a5:dc:7f:e4:84:a7:d2:f7:
         ee:17:cd:e3:37:3c:76:e6:5d:33:b6:f3:e7:23:06:a2:81:05:
         d5:a7:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org