Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa
File:                     323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (raw, json)
Hash identifier:          jkOiC4NNTSmzLLBFxEQeS+Z4pvz5rqz2ZQTSnwXWI3A=
Subject key identifier:   52:95:A0:B2:D8:BA:6D:BA:31:E7:30:EA:4A:4E:4F:77:8F:7F:A3:E8
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       65E0E13946D37574D2E48707896965AAD4435551
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa
Signing time:             Mon 31 Jul 2023 00:06:15 +0000
ROA not before:           Mon 31 Jul 2023 00:01:15 +0000
ROA not after:            Mon 29 Jul 2024 00:06:15 +0000
asID:                     45786
IP address blocks:        2001:df0:cb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e0:e1:39:46:d3:75:74:d2:e4:87:07:89:69:65:aa:d4:43:55:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jul 31 00:01:15 2023 GMT
            Not After : Jul 29 00:06:15 2024 GMT
        Subject: CN=5295A0B2D8BA6DBA31E730EA4A4E4F778F7FA3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d9:52:27:28:fc:2d:b2:bf:b7:63:b5:11:24:
                    52:12:d6:19:d1:b8:84:91:49:0e:13:99:eb:db:a5:
                    1c:a5:7c:a0:5e:a1:bc:01:94:56:b2:b2:bd:a2:5f:
                    72:be:8e:eb:5a:6d:6b:a6:7e:10:2a:09:3f:26:74:
                    20:69:37:0c:98:89:e9:c1:63:74:d9:ab:bb:30:b0:
                    93:a9:b5:81:3d:37:ae:84:da:8f:ad:0c:16:75:7f:
                    38:39:dc:ae:81:7a:08:90:71:9a:63:d1:15:41:72:
                    01:e0:ca:2b:3a:a6:fc:88:5d:2e:c6:4c:95:14:b3:
                    1d:31:4c:b0:4e:f1:38:5c:90:44:39:05:f4:91:d4:
                    02:07:57:54:33:94:64:a2:35:58:dc:85:dc:6c:fe:
                    a8:f9:06:2f:4c:e0:3c:d1:58:ca:c7:62:9d:d4:be:
                    11:e7:55:7e:55:fc:f2:be:86:90:70:41:e8:3d:4c:
                    0f:c5:42:29:e1:f8:c4:b9:c0:f9:8b:64:db:dd:69:
                    d4:26:cc:84:91:e7:13:3c:8a:3d:2d:1d:91:2c:3f:
                    9f:62:f4:84:4d:1f:21:c7:f9:47:8c:d8:d0:17:33:
                    f5:5a:39:ec:6d:ba:2c:63:59:87:9e:7d:ec:bc:86:
                    ea:50:f0:f2:a4:dc:d1:3c:6c:a4:28:6c:a1:02:29:
                    a8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:95:A0:B2:D8:BA:6D:BA:31:E7:30:EA:4A:4E:4F:77:8F:7F:A3:E8
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:cb::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:69:49:8c:53:8a:ba:d2:6d:d3:6c:13:fc:81:3c:9e:b6:0a:
         3e:13:5c:51:08:c1:a5:4a:d4:56:17:9c:66:af:6d:63:be:22:
         00:86:87:29:2c:b1:41:d9:3f:fc:3c:1a:77:e3:d0:a1:5f:93:
         3c:91:f8:c8:0e:6c:6f:48:00:0e:97:2d:f6:0c:f7:86:1c:18:
         b6:25:f9:84:39:55:d0:24:e2:2c:3d:2c:be:82:b3:96:1f:f9:
         32:c9:c7:17:71:c1:a7:e8:40:ab:e9:b1:d7:20:4d:20:d2:b3:
         5b:22:22:9b:58:75:fd:dc:b3:6a:4a:0c:89:41:9e:a0:b3:f2:
         56:2f:9e:b7:3a:34:66:7c:9c:c8:bd:81:9c:41:01:6b:5b:2b:
         ba:82:4d:41:4e:26:92:22:9c:d2:b1:19:cb:b5:e2:cd:d2:93:
         17:e8:d5:6e:87:85:32:d8:1c:3f:4e:67:de:5e:b2:bc:e4:42:
         b3:19:f9:cf:8e:e7:a8:4e:4b:e8:e4:3f:98:b6:8f:8d:0b:5e:
         94:e5:f4:b6:c5:3e:d6:37:c6:41:8c:0e:6e:d3:35:a2:c8:c7:
         93:6e:5f:b1:ad:15:d1:9e:c6:dc:95:bf:f3:7e:d8:b3:b5:fc:
         79:83:d2:fd:6a:05:4f:6a:cc:b4:30:6a:52:1c:29:4a:83:06:
         cf:14:6f:3c
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUZeDhOUbTdXTS5IcHiWllqtRDVVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJB
RkU4QUEyQjAeFw0yMzA3MzEwMDAxMTVaFw0yNDA3MjkwMDA2MTVaMDMxMTAvBgNV
BAMTKDUyOTVBMEIyRDhCQTZEQkEzMUU3MzBFQTRBNEU0Rjc3OEY3RkEzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh2VInKPwtsr+3Y7URJFIS1hnR
uISRSQ4TmevbpRylfKBeobwBlFaysr2iX3K+jutabWumfhAqCT8mdCBpNwyYienB
Y3TZq7swsJOptYE9N66E2o+tDBZ1fzg53K6BegiQcZpj0RVBcgHgyis6pvyIXS7G
TJUUsx0xTLBO8ThckEQ5BfSR1AIHV1QzlGSiNVjchdxs/qj5Bi9M4DzRWMrHYp3U
vhHnVX5V/PK+hpBwQeg9TA/FQinh+MS5wPmLZNvdadQmzISR5xM8ij0tHZEsP59i
9IRNHyHH+UeM2NAXM/VaOextuixjWYeefey8hupQ8PKk3NE8bKQobKECKajBAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUUpWgsti6bbox5zDqSk5Pd49/o+gwHwYDVR0j
BBgwFoAUvwduokpozxUsMjx6Pf0/kq/oqiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTBkYTQ0Ny1hMTM4LTQ2MjUtYTQyMC1hNzExYWMyNDM1MTkvMC9CRjA3NkVBMjRB
NjhDRjE1MkMzMjNDN0EzREZEM0Y5MkFGRThBQTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJBRkU4
QUEyQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1MGRhNDQ3LWExMzgtNDYyNS1h
NDIwLWE3MTFhYzI0MzUxOS8wLzMyMzAzMDMxM2E2NDY2MzAzYTYzNjIzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzNDM1MzczODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8ADLMA0G
CSqGSIb3DQEBCwUAA4IBAQADaUmMU4q60m3TbBP8gTyetgo+E1xRCMGlStRWF5xm
r21jviIAhocpLLFB2T/8PBp349ChX5M8kfjIDmxvSAAOly32DPeGHBi2JfmEOVXQ
JOIsPSy+grOWH/kyyccXccGn6ECr6bHXIE0g0rNbIiKbWHX93LNqSgyJQZ6gs/JW
L563OjRmfJzIvYGcQQFrWyu6gk1BTiaSIpzSsRnLteLN0pMX6NVuh4Uy2Bw/Tmfe
XrK85EKzGfnPjueoTkvo5D+Yto+NC16U5fS2xT7WN8ZBjA5u0zWiyMeTbl+xrRXR
nsbclb/zftiztfx5g9L9agVPasy0MGpSHClKgwbPFG88
-----END CERTIFICATE-----
Generated at Sat Jun 1 08:14:56 2024 by rpki-client on console-ams.rpki-client.org