Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/323430363a633634303a3a2f33322d3332203d3e20313431313337.roa
File:                     323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (raw, json)
Hash identifier:          rn/Lk1HOU9ifhpJDeFgYsaJG8Tlb26J53a/080xefJE=
Subject key identifier:   B4:AA:63:95:F2:D7:55:6B:41:10:73:D5:37:FE:89:3A:14:97:11:6C
Certificate issuer:       /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9
Certificate serial:       6D0F276B4F3DE134EA33E7B5C3A7F61F34030C81
Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/323430363a633634303a3a2f33322d3332203d3e20313431313337.roa
Signing time:             Fri 03 Nov 2023 00:00:03 +0000
ROA not before:           Thu 02 Nov 2023 23:55:03 +0000
ROA not after:            Fri 01 Nov 2024 00:00:03 +0000
asID:                     141137
IP address blocks:        2406:c640::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl
                          rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 09:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0f:27:6b:4f:3d:e1:34:ea:33:e7:b5:c3:a7:f6:1f:34:03:0c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9
        Validity
            Not Before: Nov  2 23:55:03 2023 GMT
            Not After : Nov  1 00:00:03 2024 GMT
        Subject: CN=B4AA6395F2D7556B411073D537FE893A1497116C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:10:5c:35:1c:99:a8:23:8a:df:4c:14:79:
                    d3:e0:59:c4:86:e2:3b:18:a9:f0:1b:e3:86:f6:1b:
                    45:73:bc:54:bc:e4:0a:da:f4:73:fd:fa:f2:70:7f:
                    f1:56:44:5a:b9:43:07:8a:30:f8:7a:4c:17:c8:b3:
                    e5:93:8c:f3:aa:c4:8d:8c:ac:55:ca:0e:e9:61:6b:
                    5b:7f:55:50:c2:52:b3:cb:12:ab:37:ae:54:c9:27:
                    a8:75:bb:d6:ab:6b:be:be:51:b6:da:fa:9c:83:06:
                    8b:bf:bf:f0:04:bd:f8:ff:d2:42:43:87:be:1f:14:
                    c6:91:d3:ff:57:b8:94:3c:c0:0c:62:17:b5:65:f0:
                    57:bd:ac:e9:d1:f8:26:53:f4:98:01:0c:0f:7e:2e:
                    44:85:b2:39:3d:f6:22:ac:42:83:43:3b:2e:1f:2c:
                    f9:b0:80:c3:3f:71:24:89:17:47:00:d0:ec:3d:8b:
                    29:95:95:84:b7:24:cd:5e:42:6c:a6:45:9d:4b:98:
                    66:6e:10:2b:17:16:8c:bc:4a:b2:94:0e:ee:b4:f5:
                    c6:e7:2a:67:a6:b4:9f:97:99:e3:8a:f0:73:ce:8c:
                    b1:e7:f5:16:27:ab:98:8d:d0:82:1a:4e:e7:6c:87:
                    e1:7a:1b:7d:ec:c1:d1:66:c5:ff:2b:c8:a5:be:15:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AA:63:95:F2:D7:55:6B:41:10:73:D5:37:FE:89:3A:14:97:11:6C
            X509v3 Authority Key Identifier:
                keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/323430363a633634303a3a2f33322d3332203d3e20313431313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:c640::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:36:aa:c7:cd:5a:bd:95:50:fb:f5:49:ec:2f:ed:da:0a:4a:
         7d:3c:72:9a:55:f1:7e:b5:36:f5:cc:3c:4c:d3:cc:67:86:68:
         46:0a:45:7f:1d:53:5f:0e:0d:28:74:cf:a3:fc:fd:ec:90:2d:
         2d:66:b8:de:7a:04:09:0e:ce:aa:89:05:5e:e9:30:c6:27:81:
         ff:27:a2:f8:75:a9:69:a0:fe:60:99:55:c9:31:d6:87:57:c0:
         69:60:f9:91:ad:83:98:13:37:9a:7a:17:a4:22:25:65:30:06:
         9a:c9:3b:7a:c1:a7:a0:ef:f8:3a:95:b2:cc:87:85:e6:dc:2f:
         1e:c5:3e:bb:13:be:59:98:39:18:fc:59:b1:ec:56:51:6e:75:
         47:c0:c1:c8:b9:ed:57:c6:6b:60:7d:86:93:dd:2c:89:ef:de:
         26:9b:e7:60:46:e2:bf:a9:11:64:14:1d:ea:93:cd:6a:45:3c:
         bf:d3:ae:75:17:7e:6d:5f:57:6b:70:dd:dc:a6:fa:64:19:94:
         1a:e8:8d:68:64:f8:f7:d0:d3:25:d0:a6:e1:9f:63:99:12:82:
         28:16:8a:f2:ae:eb:ae:29:b6:c4:99:b7:cb:16:ac:cd:a1:4f:
         53:1c:1e:62:16:3f:5f:78:7e:1f:b8:ce:28:52:4f:12:e1:24:
         d6:28:d6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:10 2024 by rpki-client on console-fra.rpki-client.org