Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a363030303a3a2f33352d3438203d3e20313430343233.roa
File:                     323430363a323063303a363030303a3a2f33352d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          RJAfHFsbdYYu4Q5nwperDFhe7fc+Aqc3AnMGh+UcY/s=
Subject key identifier:   46:53:41:C6:41:01:54:EB:60:F8:A2:09:61:06:23:78:66:45:EC:C4
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       7ABDEB65CE2A6B28841CAA156D86ABEA3AB979E6
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a363030303a3a2f33352d3438203d3e20313430343233.roa
Signing time:             Sun 01 Oct 2023 06:00:02 +0000
ROA not before:           Sun 01 Oct 2023 05:55:02 +0000
ROA not after:            Sun 29 Sep 2024 06:00:02 +0000
asID:                     140423
IP address blocks:        2406:20c0:6000::/35 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
                          rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 06:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bd:eb:65:ce:2a:6b:28:84:1c:aa:15:6d:86:ab:ea:3a:b9:79:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Oct  1 05:55:02 2023 GMT
            Not After : Sep 29 06:00:02 2024 GMT
        Subject: CN=465341C6410154EB60F8A209610623786645ECC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:57:d8:67:bb:5c:02:49:34:6d:28:18:be:
                    6a:b6:99:22:87:a0:0f:86:d6:27:e8:b0:92:bf:0d:
                    62:44:a6:ae:27:71:d2:2e:1b:a8:3b:88:32:3d:10:
                    19:e3:10:d0:c1:35:3c:6d:72:06:60:76:f5:69:a9:
                    53:a2:5f:d1:b9:b2:d0:15:e8:ab:3d:76:20:e9:af:
                    d5:0d:ae:9c:0f:d7:70:14:dc:af:75:b8:d1:28:72:
                    b5:e2:e4:42:75:80:88:b6:5d:0c:50:25:c7:59:8b:
                    71:e5:a3:95:e5:f1:8c:95:64:7e:d8:e5:5a:28:43:
                    02:36:31:5d:e3:73:08:d0:30:84:52:ba:4f:bc:46:
                    25:43:28:29:85:0b:38:6d:16:93:e8:54:a8:71:77:
                    35:33:e6:08:b2:a9:9b:01:97:26:9b:ef:e6:62:36:
                    c5:9c:ae:15:dd:c8:fa:34:51:bc:65:46:61:21:b7:
                    aa:77:98:3f:71:e2:ba:81:9d:1d:ab:c6:ce:84:e7:
                    9d:e7:c8:cf:9a:1c:24:86:34:a6:77:60:a4:63:c2:
                    f8:32:b2:26:cc:ae:73:dd:ed:36:a5:aa:63:c4:66:
                    df:7c:e9:01:d5:9d:d2:d6:df:46:a8:3f:98:ac:e8:
                    c8:61:7e:4a:41:ad:52:26:dd:a0:d5:86:3a:57:90:
                    27:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:53:41:C6:41:01:54:EB:60:F8:A2:09:61:06:23:78:66:45:EC:C4
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a363030303a3a2f33352d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         36:69:61:de:7a:e9:32:42:bf:68:e3:d6:c8:99:ca:85:b8:9b:
         a2:42:ca:47:0e:a3:00:19:83:9a:a2:54:41:a0:8c:8b:e4:f6:
         86:d3:29:c6:c9:03:6f:99:62:4a:7d:69:c9:4b:16:2d:d6:62:
         a3:16:ae:d3:6e:24:ab:ff:86:93:cc:32:61:34:79:c2:64:81:
         f5:1e:52:71:9c:f3:55:4c:8d:98:2e:ab:a8:11:f4:b2:1f:c9:
         c4:ad:2b:db:e6:1c:c4:30:3c:3e:3c:a3:3e:f1:99:ee:c3:1d:
         58:77:16:c1:ab:50:3b:cb:d8:13:b1:a9:6d:e9:5b:4f:06:1d:
         e6:5e:fd:a5:93:cc:a9:5b:3c:85:85:68:0c:56:06:f6:61:d2:
         38:19:4a:ec:1b:8c:cf:e1:dc:df:2e:45:6b:be:f7:44:77:d3:
         f8:57:09:8b:c0:e6:af:66:e1:70:ca:da:e7:72:99:23:ab:99:
         a3:a9:d2:8d:c3:aa:e3:e4:bd:eb:fb:73:24:81:e5:e4:16:d7:
         8f:fb:55:cf:a8:7a:aa:35:cf:fa:35:50:b8:ba:06:33:55:7d:
         6b:33:88:4a:b0:9c:4d:cb:79:a6:d4:71:50:52:2c:1d:72:ec:
         bd:59:d5:1d:55:6d:05:09:d3:1e:4b:c6:e0:4c:80:6c:c9:bf:
         b8:db:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:48:04 2024 by rpki-client on console-ams.rpki-client.org