Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa
File:                     323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa (raw, json)
Hash identifier:          HJorga0IKiHzCosho2900+K+4LuiqhB9t6Fw3ETjJjQ=
Subject key identifier:   C6:BB:26:BF:15:91:92:61:39:B6:14:93:C5:6E:45:9A:0E:E4:F6:A5
Certificate issuer:       /CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB
Certificate serial:       224562081DF521816C167BEC1BC4CA87B08FB02B
Authority key identifier: 52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa
Signing time:             Wed 09 Aug 2023 09:01:50 +0000
ROA not before:           Wed 09 Aug 2023 08:56:50 +0000
ROA not after:            Wed 07 Aug 2024 09:01:50 +0000
asID:                     58404
IP address blocks:        2001:df6:ac00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl
                          rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:45:62:08:1d:f5:21:81:6c:16:7b:ec:1b:c4:ca:87:b0:8f:b0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB
        Validity
            Not Before: Aug  9 08:56:50 2023 GMT
            Not After : Aug  7 09:01:50 2024 GMT
        Subject: CN=C6BB26BF1591926139B61493C56E459A0EE4F6A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:54:a4:0c:b1:13:c4:40:87:54:86:07:dd:ce:
                    5a:28:19:cb:74:bc:6f:e4:ed:23:22:51:1d:55:58:
                    d1:5f:b6:12:1a:ff:66:a8:3d:be:82:ed:79:d8:0c:
                    69:75:f5:a8:dc:74:31:4c:e3:3b:7f:77:c4:d6:b6:
                    90:35:3c:a0:c2:b6:59:57:1a:9a:7f:f2:9c:d9:7d:
                    7a:95:70:db:ae:c0:80:cd:f8:45:ad:dd:91:59:2c:
                    5c:fa:5d:dc:fc:97:09:9f:c8:b6:2b:68:9a:2f:22:
                    b8:15:dd:a9:ab:be:02:a8:29:4d:94:c1:70:f8:5d:
                    f4:c8:5f:ba:d0:68:af:1a:57:8c:d9:a4:3d:36:93:
                    cf:b6:6f:b5:89:1b:34:08:09:a9:e4:c2:d3:70:06:
                    0e:85:85:92:43:f4:2f:d1:c5:c0:19:3d:1d:47:11:
                    12:07:c1:58:ab:d1:38:78:6f:f5:bc:d8:3a:bc:4b:
                    33:49:58:6e:93:02:b0:ec:54:f4:1d:fc:63:94:1c:
                    aa:dd:d2:b7:e6:5f:eb:33:cc:9a:a0:d6:a0:23:cc:
                    bb:9e:5d:ad:bd:7f:10:2f:88:f4:11:32:d5:f1:b9:
                    99:c6:00:03:a4:3c:01:6c:50:4d:cd:79:60:3a:80:
                    aa:a5:7c:b5:0c:3a:f6:a0:79:f0:e0:5d:01:17:a0:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BB:26:BF:15:91:92:61:39:B6:14:93:C5:6E:45:9A:0E:E4:F6:A5
            X509v3 Authority Key Identifier:
                keyid:52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:ac00::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:c6:42:2d:9e:4b:f0:dc:18:4d:8c:58:c0:03:07:75:4e:cb:
         d2:1d:9d:c2:87:c9:b9:99:e3:c8:4c:64:50:45:5c:40:e7:e8:
         fb:af:87:8b:29:1b:44:cd:ab:92:4d:16:b3:3c:a6:fd:8c:9c:
         39:68:a6:32:ca:5c:25:4c:83:78:41:d4:04:14:35:f3:cc:c0:
         ab:cd:b6:3f:83:1d:d1:89:34:0b:21:72:6f:be:05:1b:d7:74:
         81:05:a6:af:aa:db:7f:e9:db:de:77:95:b7:b3:b2:57:fe:07:
         48:22:b9:c0:2d:40:a2:8a:4f:f7:51:4e:90:30:94:a5:2d:5a:
         68:b6:6d:74:cf:b1:ba:2c:13:a2:f0:15:ed:51:9b:3d:49:f9:
         8e:87:3a:87:30:24:21:85:2d:4f:34:1e:11:57:b0:e9:20:09:
         16:3e:cd:6b:b4:a1:97:2c:83:9e:dc:c6:29:1a:e9:f5:72:e1:
         47:dd:94:93:1f:cc:76:9c:45:7b:2f:ea:62:f7:da:dd:cb:f9:
         19:c5:ee:69:bc:aa:2f:c8:1a:11:01:71:2c:22:97:fc:a7:a8:
         92:9d:2d:97:49:09:b1:f9:72:48:3c:ee:e0:9b:47:f5:3f:a3:
         44:89:a9:e2:ce:69:70:b7:7b:a8:64:ed:52:b8:f0:1f:80:95:
         96:eb:ae:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:27 2024 by rpki-client on console-ams.rpki-client.org