Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/323430363a653930303a3a2f34382d3438203d3e20313332363439.roa
File:                     323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (raw, json)
Hash identifier:          f5hCEgTcdSLpwAEqtQkxZyqio10msk7w3eWkMk9K6yw=
Subject key identifier:   00:46:10:16:1A:61:2C:6B:91:B5:58:D3:BF:8D:C7:FA:62:51:BD:59
Certificate issuer:       /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial:       7DEC3F5E06AF30920058E522A9F86622C846573F
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/323430363a653930303a3a2f34382d3438203d3e20313332363439.roa
Signing time:             Mon 31 Jul 2023 00:03:07 +0000
ROA not before:           Sun 30 Jul 2023 23:58:07 +0000
ROA not after:            Mon 29 Jul 2024 00:03:07 +0000
asID:                     132649
IP address blocks:        2406:e900::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
                          rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Apr 2024 04:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ec:3f:5e:06:af:30:92:00:58:e5:22:a9:f8:66:22:c8:46:57:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
        Validity
            Not Before: Jul 30 23:58:07 2023 GMT
            Not After : Jul 29 00:03:07 2024 GMT
        Subject: CN=004610161A612C6B91B558D3BF8DC7FA6251BD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:67:58:d5:3b:5b:5f:fb:39:1a:88:2a:30:
                    b6:b8:5f:0a:08:3f:5a:57:75:d9:9c:6b:c6:e6:85:
                    33:36:e8:77:7f:91:55:51:aa:cf:ed:52:79:46:4e:
                    a5:38:d0:ac:5c:81:0c:66:e2:4d:7d:f0:a3:0a:94:
                    8f:fb:ac:05:0d:78:dd:06:a3:94:c9:ca:a2:7f:ad:
                    56:37:e0:43:e0:ad:57:ea:91:67:e9:f2:1a:b3:4d:
                    5e:ad:5b:69:6c:6a:0f:4b:44:f1:f5:38:78:a5:fd:
                    2a:5c:13:73:ef:94:ba:79:52:5e:78:b2:9d:ac:0a:
                    73:12:c8:d8:06:93:e2:47:7d:c7:db:30:10:5c:50:
                    a2:f3:81:df:3e:89:15:0e:73:85:4c:68:20:e6:6f:
                    72:9c:6c:93:1a:56:68:fd:48:55:b5:8b:a4:77:af:
                    f2:d1:dd:fc:15:eb:4d:86:d3:5d:d4:1f:9f:65:e5:
                    4e:37:d8:22:19:ce:b7:a3:5e:3a:66:69:cb:db:61:
                    89:3d:2e:7d:77:4d:a9:63:b5:98:e1:1f:87:9b:c6:
                    54:30:5c:7d:09:84:ce:45:13:d1:12:92:18:9e:a7:
                    3a:0c:0f:c4:3e:7f:87:5d:8c:52:42:13:9a:94:de:
                    75:49:db:47:44:4e:16:0e:f6:d5:19:32:1e:80:b2:
                    7c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:46:10:16:1A:61:2C:6B:91:B5:58:D3:BF:8D:C7:FA:62:51:BD:59
            X509v3 Authority Key Identifier:
                keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/323430363a653930303a3a2f34382d3438203d3e20313332363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:e900::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:14:c5:7e:79:8e:11:b4:0a:71:fd:c3:7c:d4:70:7e:4a:32:
         65:4c:79:c3:ee:0d:fe:d5:66:79:42:d5:f3:de:9e:8b:2a:f8:
         ad:3c:6a:64:1e:a9:2e:0d:10:50:40:63:c2:c4:74:9b:09:1c:
         37:c7:e7:d8:66:e0:e2:34:b7:e9:30:74:48:18:78:ac:ee:a8:
         e1:9f:ed:3f:80:6c:f6:b5:6d:3d:d7:3f:a9:d7:b1:30:2a:1b:
         72:fb:a1:69:5c:41:d1:1f:9a:35:a7:13:4d:08:67:97:52:0d:
         c7:4d:6c:b1:e8:2b:12:d8:93:41:b8:0b:b9:dd:46:c3:7c:d2:
         c7:60:95:e6:0c:31:71:89:01:f4:9e:a7:7d:72:0d:41:70:d3:
         73:72:50:67:5e:69:f6:59:1b:19:26:2b:ce:bb:d4:5b:64:46:
         bd:9c:cd:1d:bb:74:b5:36:c7:a4:0c:df:a1:a7:42:e9:59:74:
         47:f5:9c:df:e9:a2:63:b6:25:ff:c6:fe:ad:c7:d4:0f:c6:0e:
         16:b0:67:ff:96:ec:93:75:cf:88:99:57:0d:ba:5a:43:13:fb:
         65:c1:83:d1:d9:76:4f:15:53:c2:3b:b1:f5:12:53:dc:9a:39:
         55:2a:51:5e:92:c2:a3:38:0c:ca:1c:7e:97:84:90:ac:ae:e6:
         6c:b3:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:33:50 2024 by rpki-client on console-ams.rpki-client.org