Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          LJR8aPSn8R/wn2Qsi/Ot9SeslR99DJAnE85FK92vBOs=
Subject key identifier:   AE:6C:AF:97:B8:4C:2D:A7:83:FD:73:89:82:EA:74:A5:D3:24:5D:CD
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       1399029AF84540C9478ECB768046C4984F69BCB2
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 02 Jul 2023 13:50:47 +0000
ROA not before:           Sun 02 Jul 2023 13:45:47 +0000
ROA not after:            Sun 30 Jun 2024 13:50:47 +0000
asID:                     140413
IP address blocks:        2406:13c0:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 22:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:99:02:9a:f8:45:40:c9:47:8e:cb:76:80:46:c4:98:4f:69:bc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Jul  2 13:45:47 2023 GMT
            Not After : Jun 30 13:50:47 2024 GMT
        Subject: CN=AE6CAF97B84C2DA783FD738982EA74A5D3245DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:de:13:e5:f8:26:fc:40:5a:f1:51:36:c3:9d:
                    2d:14:7e:90:d7:77:ee:64:d2:04:42:22:26:5b:86:
                    69:76:51:87:cc:4f:5e:35:20:0f:c6:03:78:5e:1a:
                    f2:56:ce:4b:29:52:72:10:c7:e7:99:e2:fe:dc:fe:
                    dc:ae:3c:43:4a:6c:67:a8:d1:37:9d:c2:ca:c9:a1:
                    2b:75:c8:bc:b4:df:dd:78:cb:63:c7:eb:76:5d:dc:
                    d3:6d:e3:41:b8:a2:06:61:ff:10:bd:5c:11:81:9e:
                    3e:4f:7a:52:24:4f:9d:79:ed:3b:14:2a:d9:27:39:
                    1d:9e:3c:ce:c7:dd:37:b2:0e:39:fb:5a:59:40:2f:
                    00:b9:e2:95:3c:b1:0f:b4:57:3c:9c:2f:70:1a:91:
                    7b:a0:30:4a:c7:87:92:d2:80:17:36:2a:a0:4a:d9:
                    0d:d3:48:64:95:d7:47:57:f6:3b:bb:ba:0a:96:a4:
                    5d:7f:fa:10:93:43:cd:2e:a2:96:51:da:e8:b0:7d:
                    1c:4b:e1:a9:8f:42:ca:ca:ed:f9:f2:86:89:ea:68:
                    1a:af:bd:43:3f:1b:ff:74:e7:bd:eb:83:a5:6a:15:
                    30:c4:74:ad:65:0b:9c:24:57:bc:61:72:70:37:2e:
                    38:1f:18:07:cd:c3:2a:34:35:cd:99:ca:f3:56:ad:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6C:AF:97:B8:4C:2D:A7:83:FD:73:89:82:EA:74:A5:D3:24:5D:CD
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:42:2e:be:3f:39:ea:73:e6:41:ec:cc:9d:3f:6d:44:27:ff:
         8d:d2:a1:b7:ea:78:05:60:69:77:90:b5:84:f1:fe:65:dd:88:
         61:95:2d:23:2b:a6:00:65:d7:62:77:fd:3d:bc:73:ce:98:6b:
         9e:dc:40:1a:55:56:c9:d6:2d:45:3a:4b:c2:a2:b9:75:90:21:
         92:19:8c:d0:2c:af:27:ed:f0:20:66:c3:49:4d:4b:7e:88:52:
         f7:fb:76:96:cf:96:65:51:ea:6a:62:af:98:71:52:c5:20:50:
         d0:c0:38:bb:c8:0b:8e:7a:1d:02:91:8e:40:37:5c:8a:6c:5a:
         32:4c:a2:0e:36:54:58:41:87:05:6b:99:3c:da:62:f3:e8:47:
         7a:94:24:d5:3a:d7:64:40:8f:57:34:9b:c3:90:03:fb:d0:6f:
         e2:74:bd:ad:8f:29:6b:db:c8:eb:c9:89:ec:65:75:f4:ac:8d:
         8d:7a:55:e7:cb:6c:f6:30:17:b3:6b:39:4c:8e:50:7d:eb:ff:
         22:6d:a3:c9:b0:f8:04:06:e1:87:fb:e4:4c:c1:35:9f:06:9d:
         7f:aa:92:b8:13:8f:78:4e:fc:66:1b:49:56:95:df:c1:13:45:
         37:58:b6:90:3a:14:70:c2:94:e4:08:9a:ac:f9:74:86:cc:4a:
         ed:61:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:45 2024 by rpki-client on console-fra.rpki-client.org