Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f34382d3438203d3e203233363739.roa
File:                     323430313a323930303a3a2f34382d3438203d3e203233363739.roa (raw, json)
Hash identifier:          JP/Ygtyx28mA4SlxwAHrZXtkfd/enzOYaT+193rEdH8=
Subject key identifier:   18:6D:C2:3F:0E:05:0C:5E:81:49:DC:8E:46:A1:BA:07:C1:C0:28:EE
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       58B65604234E9D129078018126D3B815B833515D
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f34382d3438203d3e203233363739.roa
Signing time:             Wed 31 Jan 2024 03:52:54 +0000
ROA not before:           Wed 31 Jan 2024 03:47:54 +0000
ROA not after:            Wed 29 Jan 2025 03:52:54 +0000
asID:                     23679
IP address blocks:        2401:2900::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b6:56:04:23:4e:9d:12:90:78:01:81:26:d3:b8:15:b8:33:51:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Jan 31 03:47:54 2024 GMT
            Not After : Jan 29 03:52:54 2025 GMT
        Subject: CN=186DC23F0E050C5E8149DC8E46A1BA07C1C028EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:83:14:f2:2c:3e:c3:59:bf:c4:f7:e6:30:
                    fb:a2:50:7e:47:fc:4e:f1:9d:48:e5:36:bf:55:45:
                    f4:ed:f7:b1:d9:11:64:58:8a:cb:0e:08:d3:6d:36:
                    2c:b4:0a:b3:8d:ba:d9:48:42:94:f6:9f:3c:8d:06:
                    20:de:db:db:4d:39:ce:00:88:fd:b0:47:c0:5e:71:
                    21:88:bc:b4:6e:28:7a:60:37:ad:5d:20:23:ad:eb:
                    81:90:05:ec:5a:ad:fd:7a:51:3f:a7:33:46:bc:76:
                    da:47:3f:0b:9e:39:09:97:ff:c3:57:53:ec:7f:ca:
                    ac:ac:cb:ff:7e:61:95:27:a9:9d:59:95:44:27:cb:
                    93:d9:55:94:51:9c:45:59:06:6c:6e:47:97:05:d7:
                    a4:c4:31:4a:fe:63:45:8d:c3:7c:e0:98:67:7d:df:
                    e5:49:87:f7:86:65:72:c8:8b:ad:a3:43:07:23:64:
                    cb:d7:b0:ad:26:90:65:68:79:42:4a:75:5e:62:97:
                    ea:a0:b7:39:31:f0:84:f7:58:ba:d9:e9:d6:3a:eb:
                    fb:61:f8:72:00:17:f3:0f:b5:46:28:a1:ab:42:a1:
                    19:25:64:00:be:c7:6e:13:97:93:61:83:04:ca:1c:
                    3d:6a:a9:79:3c:df:a5:13:29:90:0e:05:ae:1b:c8:
                    5e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6D:C2:3F:0E:05:0C:5E:81:49:DC:8E:46:A1:BA:07:C1:C0:28:EE
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f34382d3438203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2900::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:6c:4a:96:7c:c6:d1:ac:e5:ce:33:d9:a6:b2:53:bb:6c:b3:
         03:2a:f1:cb:4d:b6:ee:a2:87:0b:d6:6f:4f:e6:19:b5:4a:8f:
         3a:32:d3:44:ef:c2:b5:c2:ba:b3:58:2f:0f:8a:d5:2d:a5:2a:
         13:a1:3c:ff:19:54:42:77:75:ae:43:94:0f:6f:7a:97:2b:88:
         90:72:1a:94:29:7c:3d:29:d4:8a:4c:bd:9a:cc:3d:ba:f7:20:
         0d:d6:fa:54:df:37:d9:17:e5:5c:81:ac:23:3b:49:ef:46:9f:
         06:73:91:9c:96:66:95:82:7d:0e:1b:7a:d7:1f:d8:bf:0a:00:
         b9:94:70:65:90:1d:19:a8:55:7b:ad:40:66:3b:40:c6:cd:14:
         e5:94:8e:f4:8d:12:f2:d2:f2:39:9e:0a:8e:93:3a:4f:af:33:
         f4:94:5a:1a:d7:fa:9a:48:a8:bd:ab:aa:ec:49:1e:c4:4a:09:
         a1:41:da:60:68:73:93:94:a7:21:87:e9:2a:14:0a:e9:ad:e2:
         91:71:ec:96:52:2a:5b:4e:7f:1e:3d:02:b4:a5:8f:14:49:26:
         ba:c3:63:54:2f:0f:46:4c:9e:76:9d:41:14:8e:09:5a:f7:22:
         5b:3d:6a:ba:49:9a:cd:23:53:46:43:a8:8f:9c:33:23:57:00:
         f3:c7:5d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:58:05 2024 by rpki-client on console-ams.rpki-client.org