Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
File:                     323430323a343834303a3a2f33322d3332203d3e20313337333239.roa (raw, json)
Hash identifier:          vIksVMDmUp5AXo2GgDgyWcfxwYLInynbGr+iFnM1cvk=
Subject key identifier:   96:32:43:1D:0C:D3:BA:26:42:EA:02:BC:22:D8:92:E0:21:D4:D7:07
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       73072271BA2AFB943B803AFC4CB647B57684D004
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa
Signing time:             Tue 09 Apr 2024 16:00:01 +0000
ROA not before:           Tue 09 Apr 2024 15:55:01 +0000
ROA not after:            Tue 08 Apr 2025 16:00:01 +0000
asID:                     137329
IP address blocks:        2402:4840::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:07:22:71:ba:2a:fb:94:3b:80:3a:fc:4c:b6:47:b5:76:84:d0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: Apr  9 15:55:01 2024 GMT
            Not After : Apr  8 16:00:01 2025 GMT
        Subject: CN=9632431D0CD3BA2642EA02BC22D892E021D4D707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:af:b8:97:11:60:3a:5c:e1:4b:7b:ff:4a:
                    02:5b:02:73:c2:dd:3d:52:0f:4a:3d:dc:cc:41:7b:
                    ff:05:3b:44:ce:e8:c4:3b:9b:25:1b:62:6a:4d:11:
                    c8:98:eb:cf:43:1f:f3:b7:15:60:61:d2:72:8d:72:
                    51:7d:fd:ad:79:de:05:4d:d1:f2:2d:ff:0a:dd:1d:
                    1b:24:56:17:93:2f:01:ab:14:85:91:81:47:25:80:
                    62:4b:58:dd:32:62:36:67:b6:07:0f:71:8a:29:68:
                    cb:22:21:36:d8:a0:60:c0:55:8f:39:3d:25:55:77:
                    9b:49:96:96:b5:ba:d5:a4:67:1b:33:47:6b:e9:5c:
                    b2:eb:70:73:78:a0:6a:17:cb:9b:63:c5:6e:f6:77:
                    55:f1:f5:97:49:49:77:42:21:93:dc:0b:d9:22:be:
                    12:32:2b:14:1d:3a:06:bb:f6:c7:1b:f6:65:55:12:
                    5a:76:57:be:6e:fb:0d:b9:f7:37:76:05:f9:3f:2f:
                    78:d3:28:64:80:c2:bc:69:3e:73:ad:f8:3f:65:df:
                    56:9f:fb:18:e6:35:46:9c:1a:50:c2:f9:a0:e9:6a:
                    4c:17:f3:1e:f9:21:3c:ff:54:ec:dc:2a:b1:60:0b:
                    75:7d:e7:85:0f:f9:d3:ee:0f:8b:a2:56:3e:8e:20:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:32:43:1D:0C:D3:BA:26:42:EA:02:BC:22:D8:92:E0:21:D4:D7:07
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3a2f33322d3332203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4840::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:2d:21:b7:94:7f:77:84:8f:82:70:71:27:8d:2a:8b:4a:
         8a:65:ea:f1:ba:28:f1:5b:53:1e:6f:ee:16:5b:69:69:84:44:
         23:00:56:d3:fb:b0:f6:09:c9:64:0a:fa:cd:69:2e:bf:0c:fe:
         b4:63:4f:d2:99:58:5f:2f:64:04:68:62:a1:e9:15:2e:9a:a1:
         63:3e:4d:26:c9:35:ed:48:c2:56:7c:79:ed:28:70:20:2d:c4:
         d5:67:38:94:51:6f:55:0f:c9:51:ce:68:1e:3d:ec:85:99:66:
         03:25:2f:a3:5a:11:ef:b2:ef:e5:68:14:8c:e5:ed:d1:c3:64:
         ec:19:41:67:fe:22:cf:1e:e5:34:69:24:c1:d4:91:b6:9b:7d:
         81:a8:2d:56:ce:25:4d:52:cd:a1:cd:99:62:aa:9d:e6:72:39:
         59:7b:a3:98:33:70:4e:20:e3:40:71:8e:9b:c4:e8:e0:24:44:
         1b:45:93:04:26:54:12:22:65:62:77:99:9f:ef:e3:2f:2e:00:
         6c:34:b1:90:a4:2b:ed:2f:26:0d:4d:4f:5e:10:b8:af:ce:94:
         6e:40:31:83:ee:dd:7a:82:3c:4d:bd:8c:10:8d:18:91:da:76:
         42:a5:23:6c:33:98:6c:59:00:64:91:68:48:bb:8d:1b:fa:c7:
         39:b3:4e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org