Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa
File:                     323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (raw, json)
Hash identifier:          dvcIX38GRDA3js59xFs2t1MNKFDciufyUDvhopSvZms=
Subject key identifier:   05:5B:AA:36:A8:F2:0F:68:31:1C:CA:8B:34:84:66:CB:8A:37:F4:70
Certificate issuer:       /CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Certificate serial:       449F5E56CB7DCCD45197399C240195D5E697ABD3
Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa
Signing time:             Thu 30 Nov 2023 02:01:28 +0000
ROA not before:           Thu 30 Nov 2023 01:56:28 +0000
ROA not after:            Thu 28 Nov 2024 02:01:28 +0000
asID:                     18351
IP address blocks:        2001:df5:3900::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl
                          rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 05:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9f:5e:56:cb:7d:cc:d4:51:97:39:9c:24:01:95:d5:e6:97:ab:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889
        Validity
            Not Before: Nov 30 01:56:28 2023 GMT
            Not After : Nov 28 02:01:28 2024 GMT
        Subject: CN=055BAA36A8F20F68311CCA8B348466CB8A37F470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:39:52:63:ff:90:0f:47:ea:74:02:ed:35:
                    c8:f4:06:e7:c9:7b:43:c5:35:c1:e2:c5:39:45:9d:
                    2c:ed:49:2d:22:da:f2:93:23:10:3e:b4:48:92:54:
                    84:b5:fa:06:ce:3e:5c:75:b6:a1:5d:2d:a9:da:50:
                    17:c9:2f:17:b0:f9:17:0f:cc:f1:e7:c2:19:c9:82:
                    dd:52:5a:a9:15:b9:87:44:55:d6:5e:cd:b9:11:76:
                    01:b4:ee:88:0a:58:ad:ed:ad:62:9d:2b:64:3d:e2:
                    9c:b0:90:ee:92:c5:22:8b:e3:13:67:24:0c:10:ae:
                    16:46:f0:94:4a:fd:6d:6c:6e:8f:e4:9f:4f:5f:fd:
                    ec:0e:e3:08:aa:39:3d:68:ff:82:13:b0:7b:55:81:
                    1d:a8:27:81:8f:0f:69:9e:d7:0c:61:03:38:8b:06:
                    0b:72:0b:f3:c6:83:cd:44:30:f2:92:27:27:79:ed:
                    52:90:2f:08:92:a1:b7:5e:96:78:7b:fa:27:68:cb:
                    16:22:90:8c:44:c5:cb:72:56:77:d8:af:87:b2:8a:
                    a8:c8:e1:8e:fb:57:42:cb:a8:d2:30:e8:13:93:e3:
                    32:3c:fc:d8:bf:c6:20:72:b9:c0:8e:80:6e:34:9d:
                    1c:28:62:b6:23:83:8a:fd:c6:45:14:46:b6:aa:ad:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5B:AA:36:A8:F2:0F:68:31:1C:CA:8B:34:84:66:CB:8A:37:F4:70
            X509v3 Authority Key Identifier:
                keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:3900::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:db:ca:16:90:67:df:00:91:b9:f0:36:fb:96:61:5e:a5:
         c3:65:a5:68:3d:f0:30:89:df:5d:1d:24:7d:0f:f2:a2:38:fe:
         44:e2:48:ea:04:76:a5:98:9b:18:92:1a:52:2f:64:38:d4:73:
         9e:93:00:1b:1d:c0:ff:0c:99:f3:65:d7:6f:50:48:f4:a9:5a:
         9f:d5:d8:01:5e:51:db:4e:94:45:5d:80:53:92:27:ee:16:f3:
         1e:02:bb:8a:68:a4:12:73:13:1c:12:7a:d7:47:d7:61:b7:30:
         b2:d5:9d:ae:53:76:42:4a:2d:29:09:de:34:eb:17:0d:5b:a4:
         bf:dc:88:13:ad:8b:5d:b2:78:a5:fc:92:96:0f:a3:a2:bf:19:
         88:f7:4d:14:26:bf:bc:33:ac:95:2a:34:5a:fd:45:25:34:7f:
         46:10:c7:c8:5e:63:dc:04:25:04:f9:e7:d9:42:88:70:47:a8:
         dc:6b:c4:65:1d:ef:3e:cb:81:dd:d7:a1:1d:03:81:f0:7a:fd:
         ad:03:79:ac:b2:81:a9:76:ef:c1:27:f2:cf:8c:3d:53:4d:40:
         4f:16:9b:37:b2:05:20:80:e7:90:49:f7:d0:da:f0:6f:44:e7:
         e5:31:f5:0f:eb:aa:2a:75:e6:d4:0b:0c:b2:09:fa:ed:7e:a4:
         4b:42:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 05:30:15 2024 by rpki-client on console-ams.rpki-client.org