Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/323430353a6234303a3a2f33322d3438203d3e203535363734.roa
File:                     323430353a6234303a3a2f33322d3438203d3e203535363734.roa (raw, json)
Hash identifier:          jDOgPJZ5yq96ndSMsnjrlvUU5+47oDmmRPzre1fFECc=
Subject key identifier:   22:34:2E:95:F5:08:DC:35:7B:D7:4D:17:E0:42:A6:9F:60:74:C3:A4
Certificate issuer:       /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA
Certificate serial:       4480FAA356E90364B9314253EFF166D4F10BCD7B
Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/323430353a6234303a3a2f33322d3438203d3e203535363734.roa
Signing time:             Fri 04 Aug 2023 04:00:01 +0000
ROA not before:           Fri 04 Aug 2023 03:55:01 +0000
ROA not after:            Fri 02 Aug 2024 04:00:01 +0000
asID:                     55674
IP address blocks:        2405:b40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl
                          rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 05:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:80:fa:a3:56:e9:03:64:b9:31:42:53:ef:f1:66:d4:f1:0b:cd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA
        Validity
            Not Before: Aug  4 03:55:01 2023 GMT
            Not After : Aug  2 04:00:01 2024 GMT
        Subject: CN=22342E95F508DC357BD74D17E042A69F6074C3A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:84:4b:9f:9a:a3:69:94:cd:6a:3c:b1:23:40:
                    17:cd:43:e1:07:d6:49:22:96:4b:d3:2f:93:50:7f:
                    73:98:8f:f5:a4:e7:6b:0b:a6:ae:89:d0:21:cf:0c:
                    a3:06:5c:ac:21:3e:ff:b2:7a:61:03:e6:4d:f5:c1:
                    bc:b2:6e:dc:50:68:b5:bc:b2:57:9c:8e:fc:c3:21:
                    ba:8b:f7:f7:f5:f5:5a:ed:10:3e:c8:35:95:f2:80:
                    49:5a:3c:b9:3b:a9:7f:5f:58:e6:03:8c:a5:e5:4c:
                    fc:86:b9:fb:76:78:c2:9e:e0:c3:c7:5f:2d:4b:16:
                    24:6a:4c:4e:5c:80:fb:aa:20:04:ef:df:f0:32:1a:
                    6d:68:f8:f5:4a:28:dc:81:88:7d:d2:75:12:23:ae:
                    dd:35:08:bc:e0:43:f0:f2:52:0f:59:8b:40:87:96:
                    84:92:ec:87:fd:c6:a0:a8:38:54:de:66:17:20:80:
                    a6:ce:07:af:9b:2d:73:0a:ab:fb:47:c8:1e:94:8d:
                    1c:5b:34:e4:cc:a6:34:b5:98:08:9b:0b:7e:bd:00:
                    88:dc:3c:c3:ab:7e:b9:bf:9c:80:14:2e:63:61:c9:
                    f3:30:e9:e0:f4:43:77:09:f3:2a:f9:f7:ff:9c:3f:
                    02:cc:2a:ea:12:1a:26:74:ad:87:2d:a8:cc:93:e2:
                    a8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:34:2E:95:F5:08:DC:35:7B:D7:4D:17:E0:42:A6:9F:60:74:C3:A4
            X509v3 Authority Key Identifier:
                keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/323430353a6234303a3a2f33322d3438203d3e203535363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:c9:dd:0b:88:95:8d:a5:1a:6c:09:87:41:0d:31:5e:21:
         bc:40:3c:b3:26:ac:c1:91:bc:95:5a:ab:51:2f:dc:a5:8b:9c:
         b2:00:f6:63:07:3f:2d:8e:2e:e5:e9:33:76:c3:b7:e1:4a:53:
         35:68:2c:c2:56:be:09:9d:b4:ab:ad:8c:3e:b7:92:49:48:91:
         f5:c0:54:da:c6:3b:55:14:4e:35:d8:37:13:0e:bd:cd:47:20:
         1e:a8:00:96:43:a0:a5:8a:a7:a3:08:8e:03:a7:9c:d9:0a:a8:
         68:35:e6:4a:0f:d0:d6:d6:a1:12:53:d4:e5:8a:d0:2d:be:98:
         61:46:0c:7d:e1:66:1b:30:5f:4b:f4:f0:0b:ab:b2:c7:97:df:
         72:5c:90:6a:af:28:f0:dc:12:e1:02:8d:29:a6:46:1a:8b:1d:
         53:6b:3b:f7:f0:55:1e:dc:a4:63:5a:56:24:28:ec:53:4b:9c:
         bf:3e:0d:e5:04:9c:00:37:4c:68:19:eb:ef:94:1b:37:ff:42:
         19:2c:4c:bd:1c:9e:40:ee:59:30:e1:39:a4:ed:6f:9b:6c:2c:
         9b:76:a7:f2:69:a0:b0:03:4a:0e:f0:6b:b8:6f:64:74:5f:47:
         cd:71:20:34:4c:fa:25:f3:ec:a3:6f:99:f8:a2:06:74:71:e2:
         1f:f7:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 05:01:04 2024 by rpki-client on console-ams.rpki-client.org