Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a3a2f33322d3438203d3e2034373837.roa
File:                     323030313a6431303a3a2f33322d3438203d3e2034373837.roa (raw, json)
Hash identifier:          IUCIEqlw0aDxkN2SzZcyuNx63dxpSrTdRJT5NURSO24=
Subject key identifier:   0C:90:29:9F:A0:04:4E:BC:D0:71:CB:81:62:47:F4:95:AF:F8:71:11
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       0632750D8D7CAE127C91BBE2A8F9497F3E93A648
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a3a2f33322d3438203d3e2034373837.roa
Signing time:             Mon 01 Jul 2024 01:02:18 +0000
ROA not before:           Mon 01 Jul 2024 00:57:18 +0000
ROA not after:            Mon 30 Jun 2025 01:02:18 +0000
asID:                     4787
IP address blocks:        2001:d10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:32:75:0d:8d:7c:ae:12:7c:91:bb:e2:a8:f9:49:7f:3e:93:a6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul  1 00:57:18 2024 GMT
            Not After : Jun 30 01:02:18 2025 GMT
        Subject: CN=0C90299FA0044EBCD071CB816247F495AFF87111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:e9:82:98:f5:ff:b3:5b:0d:50:6c:de:d7:
                    10:98:dd:ff:b3:d5:16:9e:26:92:b3:b1:df:51:44:
                    2d:96:64:dc:03:a7:e9:7d:27:62:36:9d:7c:e1:ae:
                    df:62:09:50:18:86:d5:8d:0c:7e:42:5f:76:7f:2f:
                    56:60:ed:30:5b:a6:27:b8:cc:64:23:80:bf:39:49:
                    9a:6a:3c:cc:e6:ce:0d:53:a9:82:b8:23:ef:37:29:
                    8d:d7:a9:63:13:e9:ef:7d:25:ce:cd:70:d4:91:b4:
                    78:61:9b:96:d0:52:60:31:a0:8b:83:0f:42:ba:d1:
                    1a:d8:bc:03:3f:00:7f:97:71:84:a4:37:85:ac:c3:
                    77:d9:47:5e:90:3e:39:6b:98:ce:09:79:4d:0d:0b:
                    13:b1:cd:0e:d2:3e:fa:1a:a5:af:ac:14:fc:77:5b:
                    b4:25:c7:84:93:3b:86:db:81:89:03:5c:cd:05:ff:
                    4b:23:7f:38:9e:43:56:40:97:df:bd:39:31:3b:0e:
                    de:63:6d:39:e4:a5:45:1e:d3:08:e2:be:44:de:e5:
                    55:4f:ac:61:b7:a5:ef:d9:a4:fe:55:d5:23:67:2e:
                    33:e8:ea:2b:a9:0d:a3:24:f3:40:6d:48:fc:08:a5:
                    4d:82:f5:c5:b8:e3:11:d8:e8:bf:54:89:e0:2a:9e:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:90:29:9F:A0:04:4E:BC:D0:71:CB:81:62:47:F4:95:AF:F8:71:11
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/323030313a6431303a3a2f33322d3438203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:65:b0:9d:fa:3c:38:32:5a:52:fa:35:d5:28:5d:2b:67:
         1f:4d:42:48:b3:b7:a5:64:34:5f:54:63:f3:fc:e6:2d:31:20:
         62:44:1d:7f:52:f6:1e:54:41:fd:a5:3f:69:f3:9b:ce:31:01:
         f3:db:5b:71:a9:9a:2f:ec:06:3f:43:2c:07:33:4e:17:06:34:
         18:15:4b:78:9f:7b:09:5f:1f:d2:5a:49:3a:58:03:5a:c8:42:
         db:c1:39:88:e5:fd:a2:3c:fb:7c:0e:aa:aa:ec:06:80:e1:e9:
         04:38:99:e0:f4:c0:cd:ff:d6:29:26:32:16:2f:b2:05:85:cc:
         b7:71:c1:f3:72:ea:ac:04:cb:2b:6c:21:41:28:cd:e7:b4:47:
         62:24:9d:dc:b6:1e:bf:a8:8c:fc:93:9c:6f:99:39:87:67:47:
         8b:ce:e7:a1:50:19:2e:e6:c9:7c:ac:a4:3e:12:f6:59:08:f2:
         3b:15:ef:5c:70:26:63:0d:ee:9d:1c:80:6e:ee:e5:33:46:19:
         f2:47:36:1f:08:3d:f5:e1:9e:dc:d0:81:7a:a2:b5:53:0c:62:
         6b:0f:78:4a:bd:e9:ea:ab:29:81:95:32:d2:85:5b:64:a2:c6:
         f5:3c:ae:f9:7c:66:4e:c6:79:ee:af:18:d7:ad:7f:6e:a3:88:
         7e:14:41:4e
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUBjJ1DY18rhJ8kbviqPlJfz6TpkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yNDA3MDEwMDU3MThaFw0yNTA2MzAwMTAyMThaMDMxMTAvBgNV
BAMTKDBDOTAyOTlGQTAwNDRFQkNEMDcxQ0I4MTYyNDdGNDk1QUZGODcxMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzu+mCmPX/s1sNUGze1xCY3f+z
1RaeJpKzsd9RRC2WZNwDp+l9J2I2nXzhrt9iCVAYhtWNDH5CX3Z/L1Zg7TBbpie4
zGQjgL85SZpqPMzmzg1TqYK4I+83KY3XqWMT6e99Jc7NcNSRtHhhm5bQUmAxoIuD
D0K60RrYvAM/AH+XcYSkN4Wsw3fZR16QPjlrmM4JeU0NCxOxzQ7SPvoapa+sFPx3
W7Qlx4STO4bbgYkDXM0F/0sjfzieQ1ZAl9+9OTE7Dt5jbTnkpUUe0wjivkTe5VVP
rGG3pe/ZpP5V1SNnLjPo6iupDaMk80BtSPwIpU2C9cW44xHY6L9UieAqnuRXAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUDJApn6AETrzQccuBYkf0la/4cREwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3MDI3MjYtYjJjNi00NmZjLTgy
OTctMmRiZGVjNmQ2ZDVkLzAvMzIzMDMwMzEzYTY0MzEzMDNhM2EyZjMzMzIyZDM0
MzgyMDNkM2UyMDM0MzczODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAENEDANBgkqhkiG9w0BAQsF
AAOCAQEAZ9RlsJ36PDgyWlL6NdUoXStnH01CSLO3pWQ0X1Rj8/zmLTEgYkQdf1L2
HlRB/aU/afObzjEB89tbcamaL+wGP0MsBzNOFwY0GBVLeJ97CV8f0lpJOlgDWshC
28E5iOX9ojz7fA6qquwGgOHpBDiZ4PTAzf/WKSYyFi+yBYXMt3HB83LqrATLK2wh
QSjN57RHYiSd3LYev6iM/JOcb5k5h2dHi87noVAZLubJfKykPhL2WQjyOxXvXHAm
Yw3unRyAbu7lM0YZ8kc2Hwg99eGe3NCBeqK1Uwxiaw94Sr3p6qspgZUy0oVbZKLG
9Tyu+XxmTsZ57q8Y161/bqOIfhRBTg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org