Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa
File:                     323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa (raw, json)
Hash identifier:          aeTPtHLhzRmIJCPnkVEtuuu/KSO4LYDua/qaGvh3JI8=
Subject key identifier:   69:0E:10:71:DB:90:AC:78:30:7F:A1:70:0F:5D:D3:0D:AD:E6:E0:FE
Certificate issuer:       /CN=5782DE79396EB62186D082F936F3AB7084CB59CB
Certificate serial:       4E7AFBA65F2BD9321F705CA7164D2EFBC388EFCB
Authority key identifier: 57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa
Signing time:             Wed 22 May 2024 08:00:00 +0000
ROA not before:           Wed 22 May 2024 07:55:00 +0000
ROA not after:            Wed 21 May 2025 08:00:00 +0000
asID:                     64315
IP address blocks:        2001:df7:1a00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl
                          rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7a:fb:a6:5f:2b:d9:32:1f:70:5c:a7:16:4d:2e:fb:c3:88:ef:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5782DE79396EB62186D082F936F3AB7084CB59CB
        Validity
            Not Before: May 22 07:55:00 2024 GMT
            Not After : May 21 08:00:00 2025 GMT
        Subject: CN=690E1071DB90AC78307FA1700F5DD30DADE6E0FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:cd:7a:f4:88:7d:70:5a:e1:ec:9b:07:04:
                    75:bf:ee:8e:6c:e1:86:a2:46:5c:6a:6b:ad:5d:37:
                    29:0c:e1:f2:9c:af:74:e2:0b:3b:94:ac:14:1f:72:
                    90:13:12:06:bf:a3:b3:f4:8a:d2:04:a9:f7:fe:60:
                    5e:5b:c1:7d:2f:df:93:d2:da:bc:fe:ab:66:78:e8:
                    a6:42:aa:70:44:6f:0b:11:28:45:56:80:d7:86:1d:
                    b3:e4:c1:1e:6d:69:99:27:83:44:46:76:17:33:a7:
                    2d:9c:a3:fc:0d:b3:3a:a6:30:30:1d:72:f6:02:63:
                    18:ff:34:79:92:5b:2a:46:92:c6:c0:6a:5c:f1:13:
                    12:83:cc:21:ce:6c:a3:2f:98:72:45:3f:0b:54:a9:
                    c3:f3:ad:e8:eb:a9:7d:47:b3:2d:df:1c:9a:19:85:
                    ce:7b:4c:c9:51:f3:87:3d:5d:84:bc:f3:2d:3a:c5:
                    49:4d:12:fd:13:6f:35:2a:de:15:d0:1a:4d:58:e8:
                    fd:37:49:46:24:08:82:fa:17:fe:73:6f:46:f3:cc:
                    5f:21:b8:d6:7a:b7:63:69:23:be:72:6b:10:b4:fe:
                    77:cd:5f:94:46:ad:91:ba:9a:91:73:33:01:c7:b4:
                    33:5e:74:93:1d:ae:4b:bb:c0:4c:ec:76:58:02:cb:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0E:10:71:DB:90:AC:78:30:7F:A1:70:0F:5D:D3:0D:AD:E6:E0:FE
            X509v3 Authority Key Identifier:
                keyid:57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:1a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:ee:08:9e:f0:b0:b5:bc:59:80:92:51:75:1e:3a:b6:20:cf:
         cd:77:43:81:fb:29:63:3f:f2:cb:ba:5f:4c:df:e9:9c:49:5b:
         90:57:3d:07:4f:4e:e9:a6:75:3b:8e:f6:02:e1:ba:2d:fd:b6:
         55:3d:bf:db:24:ec:18:76:ec:2d:5e:09:ad:3e:d7:f8:44:4f:
         18:a2:5e:9c:9f:6d:42:bc:7f:f0:a1:60:18:a0:54:26:9f:d8:
         2c:f3:54:3d:a3:96:b5:68:15:ec:1e:b2:26:9a:13:94:0e:4f:
         08:d2:b0:bc:69:0c:77:18:64:dc:bd:72:73:b4:18:7e:2d:ee:
         18:1e:7a:98:3d:d0:3c:00:48:24:33:7c:d9:c8:c0:89:12:36:
         e9:b0:a2:de:cf:db:95:57:14:0e:b2:68:e2:a2:69:40:8a:d8:
         60:8a:7c:7f:22:e6:94:d7:83:a2:9c:61:f3:c9:ba:f8:89:ca:
         a1:fc:77:a3:4f:2e:7d:b9:24:97:b0:0b:1b:85:c4:48:f6:99:
         d6:c7:3d:7c:0d:bd:35:ce:91:43:37:0d:d6:8a:a4:53:44:93:
         ef:b4:8b:5a:fd:f0:ed:39:cb:05:94:8c:f6:1a:39:bf:0e:ea:
         e6:04:ef:99:b7:29:49:97:e4:f9:89:8e:c8:10:98:a5:6a:ff:
         f9:5b:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org