Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa
File:                     323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (raw, json)
Hash identifier:          g3WQkjI4merJkXNx1MS3ZWed7eRbGEEpRl58sblrlY0=
Subject key identifier:   57:23:A3:7E:4B:6F:D9:85:6B:F3:72:81:8F:A5:4A:59:A0:2F:C1:3A
Certificate issuer:       /CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E
Certificate serial:       5E4E10E78D3808D3BDE00DA20F9426EBC72B07DF
Authority key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa
Signing time:             Fri 31 May 2024 07:02:08 +0000
ROA not before:           Fri 31 May 2024 06:57:08 +0000
ROA not after:            Fri 30 May 2025 07:02:08 +0000
asID:                     149369
IP address blocks:        2001:df0:60c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl
                          rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 06:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4e:10:e7:8d:38:08:d3:bd:e0:0d:a2:0f:94:26:eb:c7:2b:07:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E
        Validity
            Not Before: May 31 06:57:08 2024 GMT
            Not After : May 30 07:02:08 2025 GMT
        Subject: CN=5723A37E4B6FD9856BF372818FA54A59A02FC13A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:dc:a8:62:c2:ac:43:cd:8b:19:2b:30:a2:
                    99:fc:a4:e1:71:a4:6b:c6:58:6b:e3:c3:15:64:d9:
                    89:64:6f:16:e5:be:bd:bf:d2:97:9f:2c:17:a5:88:
                    af:1e:82:f1:7f:cf:1e:70:51:13:0a:18:ec:ff:b1:
                    bb:d1:4a:94:72:8b:8d:b2:df:80:bc:15:3d:73:82:
                    63:76:21:b0:e3:4b:70:f3:49:ec:00:3c:48:24:a9:
                    c7:cc:68:6a:6a:33:fc:c0:9c:92:77:ae:db:3d:b6:
                    7f:40:38:94:fa:d2:3c:28:1c:3b:94:80:92:68:44:
                    57:c0:a4:fc:61:59:83:d6:9b:93:c5:9d:76:c0:e7:
                    b1:65:05:96:21:00:30:20:b8:e4:31:6e:6b:01:3a:
                    d8:fc:7b:58:01:3e:3d:36:21:b0:c6:cc:b3:ef:e3:
                    62:92:a8:00:bf:e8:0f:94:4c:4a:8d:0e:02:71:c8:
                    83:5d:de:45:86:30:3d:e9:01:1e:9b:49:12:ea:6e:
                    1b:7f:3c:e5:98:09:20:ec:46:38:c2:a0:09:b7:a9:
                    ef:1d:81:c9:79:5a:97:7a:5d:77:c3:1a:11:03:a3:
                    b5:0b:62:19:a3:55:95:8d:b9:42:81:89:2a:93:7a:
                    5f:dc:95:71:6e:38:78:90:fd:28:e4:0a:89:40:4f:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:23:A3:7E:4B:6F:D9:85:6B:F3:72:81:8F:A5:4A:59:A0:2F:C1:3A
            X509v3 Authority Key Identifier:
                keyid:19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:60c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:19:4e:92:24:e7:f3:ba:61:2a:f0:9b:5e:29:a1:b6:ce:
         a1:6c:0d:9f:9b:08:df:dc:ad:1c:71:51:40:5a:94:8d:68:fa:
         37:de:a4:32:63:32:76:58:9b:ee:7f:a0:46:59:0c:dd:96:59:
         b4:2a:8a:d0:df:12:f6:a2:e2:55:3c:01:1b:86:5a:99:38:52:
         f7:bc:b4:4b:ab:af:d3:5c:49:9b:5a:24:9e:7a:c8:53:62:c5:
         de:c3:43:4b:b6:5f:76:94:83:5e:9c:f4:7c:14:b1:5e:44:a2:
         a5:8b:05:0f:59:fb:6e:73:5f:54:e8:49:65:ce:9e:76:e3:b7:
         20:85:31:95:ec:92:01:8b:95:fc:f6:eb:fd:61:ff:f9:8d:52:
         e4:a6:9f:30:a2:56:20:ad:5f:f4:95:b1:9e:6a:0c:fe:6e:91:
         5f:6a:00:f7:47:19:db:00:8c:49:5c:79:54:83:52:1e:7b:f6:
         bf:fc:27:6a:51:c6:d9:05:d3:af:3d:c2:81:b5:06:13:23:44:
         f5:f3:3a:77:99:9f:e1:89:61:ee:23:55:be:f1:c8:cc:52:2c:
         2d:c5:b6:f4:7c:ad:74:cc:e9:89:c8:c8:96:12:fc:d6:01:8e:
         08:cb:7a:7e:86:58:27:be:d2:57:a2:f8:a5:2c:f5:1b:43:55:
         a2:99:be:25
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUXk4Q5404CNO94A2iD5Qm68crB98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYy
QTZGRjg3RTAeFw0yNDA1MzEwNjU3MDhaFw0yNTA1MzAwNzAyMDhaMDMxMTAvBgNV
BAMTKDU3MjNBMzdFNEI2RkQ5ODU2QkYzNzI4MThGQTU0QTU5QTAyRkMxM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuB9yoYsKsQ82LGSswopn8pOFx
pGvGWGvjwxVk2Ylkbxblvr2/0pefLBeliK8egvF/zx5wURMKGOz/sbvRSpRyi42y
34C8FT1zgmN2IbDjS3DzSewAPEgkqcfMaGpqM/zAnJJ3rts9tn9AOJT60jwoHDuU
gJJoRFfApPxhWYPWm5PFnXbA57FlBZYhADAguOQxbmsBOtj8e1gBPj02IbDGzLPv
42KSqAC/6A+UTEqNDgJxyINd3kWGMD3pAR6bSRLqbht/POWYCSDsRjjCoAm3qe8d
gcl5Wpd6XXfDGhEDo7ULYhmjVZWNuUKBiSqTel/clXFuOHiQ/SjkColAT57BAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUVyOjfktv2YVr83KBj6VKWaAvwTowHwYDVR0j
BBgwFoAUGe15etu40KMYTSsC19HCNipv+H4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NTFkNmM5Yy1lYWQ3LTQ1ZmUtYTE5YS00MjIzNWZjNTM3ODAvMC8xOUVENzk3QURC
QjhEMEEzMTg0RDJCMDJEN0QxQzIzNjJBNkZGODdFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYyQTZG
Rjg3RS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1MWQ2YzljLWVhZDctNDVmZS1h
MTlhLTQyMjM1ZmM1Mzc4MC8wLzMyMzAzMDMxM2E2NDY2MzAzYTM2MzA2MzMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDM5MzMzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8GDAMA0GCSqGSIb3DQEBCwUAA4IBAQB8ChlOkiTn87phKvCbXimhts6hbA2fmwjf
3K0ccVFAWpSNaPo33qQyYzJ2WJvuf6BGWQzdllm0KorQ3xL2ouJVPAEbhlqZOFL3
vLRLq6/TXEmbWiSeeshTYsXew0NLtl92lINenPR8FLFeRKKliwUPWftuc19U6Ell
zp5247cghTGV7JIBi5X89uv9Yf/5jVLkpp8wolYgrV/0lbGeagz+bpFfagD3Rxnb
AIxJXHlUg1Iee/a//CdqUcbZBdOvPcKBtQYTI0T18zp3mZ/hiWHuI1W+8cjMUiwt
xbb0fK10zOmJyMiWEvzWAY4Iy3p+hlgnvtJXovilLPUbQ1Wimb4l
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:00 2024 by rpki-client on console-fra.rpki-client.org