Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa
File:                     323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa (raw, json)
Hash identifier:          wRxsQT6Dxg6fCqZowglR5rU1bO/uT/eZdX9cKCCz9eQ=
Subject key identifier:   1A:B8:5A:23:F3:23:B2:C1:A0:87:CC:2A:03:BB:F6:1D:CC:91:0D:18
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       5ACAC0C76CA1DEEEDB7E2FC00E26BC806B7AEE24
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa
Signing time:             Mon 01 Jul 2024 01:02:17 +0000
ROA not before:           Mon 01 Jul 2024 00:57:17 +0000
ROA not after:            Mon 30 Jun 2025 01:02:17 +0000
asID:                     131119
IP address blocks:        2001:d10:8410::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ca:c0:c7:6c:a1:de:ee:db:7e:2f:c0:0e:26:bc:80:6b:7a:ee:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul  1 00:57:17 2024 GMT
            Not After : Jun 30 01:02:17 2025 GMT
        Subject: CN=1AB85A23F323B2C1A087CC2A03BBF61DCC910D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:54:14:25:5d:1e:3e:2e:15:97:9f:d3:9b:
                    b5:c8:fb:49:5d:1c:cd:88:43:1a:58:0c:4d:cd:df:
                    e6:a6:a6:ff:7d:9b:28:cd:85:81:61:a5:9a:96:1c:
                    66:d3:21:64:d1:82:31:10:07:c1:b5:3c:5c:3f:78:
                    4f:6b:a7:6d:d7:39:14:6e:a7:c4:09:5b:69:a2:9a:
                    c5:73:00:ae:6b:c4:8b:13:f8:df:57:df:80:41:cc:
                    c5:69:06:bc:00:4a:e6:a2:2c:bd:ff:d5:49:23:5a:
                    8a:5a:85:4d:ee:0e:7a:bb:3d:b8:5b:63:0c:5b:ac:
                    52:3f:53:56:c2:28:fd:04:5a:e2:9b:12:c5:bc:cf:
                    cb:e1:15:ea:96:6c:f3:8b:a3:19:6c:2b:7f:03:d5:
                    f8:52:ca:23:86:b8:ed:6b:1f:9c:27:c1:06:4e:2a:
                    9c:04:79:9e:0e:f1:54:89:86:2d:e3:5a:40:b4:5a:
                    d9:10:31:54:c8:ec:71:d7:59:cb:2d:3b:f6:a4:88:
                    89:dd:3c:2b:14:6e:10:38:91:97:9f:b8:a1:0b:95:
                    47:11:11:7e:58:e2:91:89:56:de:fd:b6:18:46:54:
                    e8:21:f4:fb:93:8f:bb:92:ca:60:1b:6a:08:ac:84:
                    af:bc:78:fe:9c:f6:5f:f8:94:d1:3c:34:aa:0a:4f:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B8:5A:23:F3:23:B2:C1:A0:87:CC:2A:03:BB:F6:1D:CC:91:0D:18
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d10:8410::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:36:2b:ba:19:67:65:92:33:fe:05:8a:59:3a:06:0d:9d:98:
         aa:e1:e4:89:32:eb:88:6b:c4:b3:1c:32:3f:c2:64:8a:00:7b:
         99:f7:03:23:a0:b9:6e:fa:87:b6:97:43:32:ba:f7:d2:f8:2c:
         71:09:c9:9c:0f:28:cc:73:3f:e3:c8:06:bd:8f:f6:93:7f:14:
         df:f1:c2:63:94:44:1d:5f:da:f0:a3:6c:26:cd:c4:44:e9:f6:
         5c:ad:c5:88:14:62:e8:1e:42:ca:1c:ed:da:3b:b1:47:82:ec:
         39:22:21:6f:e6:90:bd:27:18:46:ad:ca:3c:9b:4c:26:c2:e9:
         19:b9:07:99:cd:74:e3:51:e4:a3:e8:75:46:5f:9c:99:0e:62:
         68:dd:41:f0:51:b6:f9:32:9b:58:2d:1a:1e:4b:e0:e0:f7:94:
         5a:00:1f:a4:97:60:16:b7:34:61:c3:42:16:6d:67:26:65:dd:
         e6:02:50:22:8b:e5:07:9c:d1:62:44:96:e1:3b:12:9c:05:8a:
         5d:42:53:b5:cf:ee:44:aa:1b:7f:11:1a:e4:6d:81:6a:b9:76:
         7a:fe:14:13:81:13:2d:c6:84:93:c9:a7:0f:0a:c6:57:0e:4c:
         32:84:5a:90:90:86:e4:c1:3e:29:96:26:10:dd:af:8a:e2:e3:
         b3:94:23:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org