Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa
File:                     323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa (raw, json)
Hash identifier:          ZmhuROhKT2+pFSBXz+hDtY+OEEMpTban/xyfYtbovI8=
Subject key identifier:   84:58:6A:7D:70:75:BA:5B:6A:6D:E7:86:7B:AE:DE:B3:06:4E:EE:97
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       3D2BA119217E3D2BBE06F8C3DD0FC4670E0B8209
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa
Signing time:             Mon 31 Jul 2023 00:02:24 +0000
ROA not before:           Sun 30 Jul 2023 23:57:24 +0000
ROA not after:            Mon 29 Jul 2024 00:02:24 +0000
asID:                     131119
IP address blocks:        2001:d10:8410::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2b:a1:19:21:7e:3d:2b:be:06:f8:c3:dd:0f:c4:67:0e:0b:82:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:24 2023 GMT
            Not After : Jul 29 00:02:24 2024 GMT
        Subject: CN=84586A7D7075BA5B6A6DE7867BAEDEB3064EEE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3e:28:1b:ce:93:f7:fd:c0:61:71:0f:50:ac:
                    5f:46:bc:40:a1:60:82:d6:77:e8:15:84:cf:4b:0e:
                    80:93:51:e1:02:46:b3:57:47:06:a4:7c:57:fd:c8:
                    24:7c:e6:89:fc:7d:ec:a1:8c:21:54:a4:67:1f:8d:
                    2c:ad:6d:88:f1:64:2c:d9:24:22:c9:64:5a:63:24:
                    5b:ba:15:be:c2:f2:02:15:b1:2d:17:5d:a9:8b:3d:
                    d1:5d:f7:e8:93:1f:4a:b1:28:1d:7c:cc:15:fd:5b:
                    26:52:64:8e:5a:0d:45:35:dd:8f:f3:28:34:11:c3:
                    e1:7b:60:49:7d:6d:20:69:13:d0:f5:1a:13:d0:a3:
                    02:52:b0:86:6c:ed:dc:1a:f3:70:f8:f7:10:21:9d:
                    54:92:cb:a3:bb:e3:6b:f2:88:bf:54:d8:6b:56:77:
                    bc:b9:bf:91:75:d3:a6:61:32:86:31:dd:c4:12:b8:
                    25:a3:9a:2f:d1:9c:27:3c:4e:4d:39:81:27:03:a4:
                    43:2d:84:3a:b1:bb:9b:a3:89:3d:a0:3c:37:7d:9f:
                    0d:91:93:08:39:29:78:5d:fa:4f:20:b0:c1:ef:bb:
                    3a:2b:34:da:95:0b:78:71:5c:8f:7d:c5:c4:2f:36:
                    e0:f7:39:e5:24:f3:e4:1e:f6:11:a9:ff:18:96:3b:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:58:6A:7D:70:75:BA:5B:6A:6D:E7:86:7B:AE:DE:B3:06:4E:EE:97
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d10:8410::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:74:9a:f4:de:67:12:d3:8b:7f:b7:59:cb:d5:a6:68:1a:9b:
         1f:be:59:a6:2f:b8:6f:4c:0c:e5:e7:a4:95:c9:7d:cd:7e:dd:
         c1:04:9e:7a:dc:9e:c0:5f:50:73:a4:48:59:1b:fa:71:c0:53:
         a3:1c:f0:dc:f3:92:8e:3f:c3:73:d3:e2:79:7a:6a:4e:d2:c5:
         d8:49:fe:e4:94:53:9e:14:0a:25:e2:f0:0b:2c:54:d6:77:71:
         b5:5f:fc:94:06:b7:17:a6:75:fa:08:56:07:17:5a:15:33:10:
         fd:8c:ae:aa:80:ae:3b:dc:4f:39:b7:a0:85:36:2d:65:9c:5f:
         f6:34:f9:55:eb:7e:b7:8a:91:0f:45:6d:b7:37:e0:8c:3f:c0:
         4e:8a:e2:e4:34:ee:d7:ec:3a:55:e1:58:7a:fa:be:4c:73:55:
         0e:a0:7e:db:6c:ad:72:fb:cb:17:64:d3:e0:b6:01:0a:b6:7f:
         c3:a2:a6:16:e4:d6:7c:4d:8f:62:df:eb:a9:5c:75:14:92:1b:
         66:04:a9:f5:ac:60:4b:c4:05:20:3b:08:61:91:0b:19:d9:3c:
         1a:47:0e:28:ff:2a:1d:0f:73:81:d6:87:f6:f1:39:02:25:25:
         7c:a6:43:1d:f0:18:0b:c3:8c:c3:64:7b:dc:e5:7b:05:d2:0c:
         48:1d:ae:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:08:35 2024 by rpki-client on console-ams.rpki-client.org