Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a643030303a3a2f33362d3438203d3e20313430343233.roa
File:                     323430363a323063303a643030303a3a2f33362d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          e6E+7FrC5wBb+lFSrHxrX+KzVvN6qGKpRiEQSYBODrA=
Subject key identifier:   C4:F3:1C:EF:46:7C:0B:AE:8C:B9:7B:E4:EC:BB:26:53:91:D1:D5:0B
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       695E1F188A52281F5174C22A530CC43021128FD7
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a643030303a3a2f33362d3438203d3e20313430343233.roa
Signing time:             Fri 09 Feb 2024 11:08:38 +0000
ROA not before:           Fri 09 Feb 2024 11:03:38 +0000
ROA not after:            Fri 07 Feb 2025 11:08:38 +0000
asID:                     140423
IP address blocks:        2406:20c0:d000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
                          rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 06:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5e:1f:18:8a:52:28:1f:51:74:c2:2a:53:0c:c4:30:21:12:8f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Feb  9 11:03:38 2024 GMT
            Not After : Feb  7 11:08:38 2025 GMT
        Subject: CN=C4F31CEF467C0BAE8CB97BE4ECBB265391D1D50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:37:ef:eb:a2:d7:1a:1a:af:6d:00:2b:a6:69:
                    4e:d3:73:1a:31:55:d9:fc:41:99:79:67:a8:90:8b:
                    f8:15:c5:8d:75:8a:6b:d3:8c:1e:f8:a2:ef:ad:54:
                    98:8c:19:d1:0b:71:45:eb:01:54:59:97:0a:e0:3a:
                    96:cc:8b:7f:43:9d:aa:25:05:7d:58:00:7b:d5:cc:
                    9c:3e:8a:fc:ca:5f:1b:7a:c4:87:71:e9:b8:3c:bb:
                    38:4b:92:1d:6f:73:e1:61:14:a1:4a:8f:c3:21:b6:
                    27:8f:cc:28:1b:eb:5c:d8:da:96:83:5e:7c:dc:42:
                    db:b4:de:67:2e:59:09:68:96:c6:cb:77:27:66:9c:
                    6d:b1:71:be:a6:c0:7a:ce:9f:7c:17:a6:4e:3e:a6:
                    30:1e:84:1e:cc:c1:b4:2b:47:5f:1e:49:fe:f2:b5:
                    56:cd:02:3e:0e:d0:ad:2f:9e:24:ac:9f:31:cb:53:
                    5d:d4:88:10:c1:4b:27:a0:a9:7a:92:61:34:42:ec:
                    04:40:2f:eb:d1:45:3e:ea:ff:ab:71:53:66:5d:46:
                    3f:70:6b:33:f5:1b:91:60:74:b8:ea:ee:eb:51:97:
                    6d:c7:e2:80:23:81:d0:58:32:82:f0:ee:3b:37:0d:
                    30:67:11:35:23:70:61:ac:d9:d3:b4:8d:b1:2c:7d:
                    69:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F3:1C:EF:46:7C:0B:AE:8C:B9:7B:E4:EC:BB:26:53:91:D1:D5:0B
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a643030303a3a2f33362d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:49:e6:05:49:8e:61:de:88:8e:78:ee:dd:c6:0e:a3:8b:1e:
         f8:bc:a9:4b:e5:dd:54:b6:d5:d0:1e:e9:ed:6c:45:ed:5a:ab:
         8d:67:c6:b7:66:53:57:f4:bf:dc:b7:fb:24:9b:22:98:a3:f1:
         45:44:1c:ad:a2:64:8a:31:b1:0c:af:a8:42:47:af:92:88:34:
         81:f2:90:1d:f1:39:46:26:f2:6a:0b:ea:ec:28:81:bc:f6:8c:
         12:90:3c:c1:83:ab:51:bb:36:16:28:1d:eb:12:69:7f:09:03:
         22:e5:4e:94:20:cd:61:62:fa:2f:4e:65:ec:8c:ae:af:72:22:
         b3:67:29:db:2c:d3:7c:3e:fb:c0:f3:c7:24:d5:89:7f:0f:dc:
         4c:79:71:35:4f:8b:24:c4:49:69:d0:20:59:60:1a:6f:c0:8a:
         82:aa:de:11:62:10:b7:f2:41:2f:33:74:45:72:4e:03:e2:6c:
         2b:d4:22:e0:6d:82:b8:35:4e:00:6c:ab:16:58:75:eb:f3:70:
         52:71:a4:28:ab:62:3e:c5:2c:c9:a6:f6:76:bd:a5:4c:47:ab:
         32:97:4c:fc:fa:31:87:f4:e8:77:17:0c:e7:29:a8:c3:11:80:
         03:9d:ac:7b:f5:9f:da:d6:c8:ef:30:08:7c:99:ca:14:eb:45:
         99:45:02:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:56:37 2024 by rpki-client on console-fra.rpki-client.org