Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          SkQMeOuwKr5zkb2VnksbCOv6Xjx7H6hUBhmyKDDVo6Q=
Subject key identifier:   77:B8:12:3D:C7:91:B7:3A:FD:63:72:75:32:DD:AE:17:AC:79:0B:D8
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       3EF69D4E80DA19327C38F143F593B8F10E49744E
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 02 Jul 2023 13:52:45 +0000
ROA not before:           Sun 02 Jul 2023 13:47:45 +0000
ROA not after:            Sun 30 Jun 2024 13:52:45 +0000
asID:                     140413
IP address blocks:        2406:13c0:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 22:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f6:9d:4e:80:da:19:32:7c:38:f1:43:f5:93:b8:f1:0e:49:74:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Jul  2 13:47:45 2023 GMT
            Not After : Jun 30 13:52:45 2024 GMT
        Subject: CN=77B8123DC791B73AFD63727532DDAE17AC790BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:74:cd:6c:af:69:f1:aa:82:6d:fc:40:7e:
                    1c:c9:51:31:cc:0e:67:7b:7e:db:81:d4:fb:07:8a:
                    06:86:e6:f3:9c:29:a1:b2:94:a8:e9:f1:71:c4:e8:
                    30:b2:46:5e:8c:96:34:d6:c1:21:d2:a8:cd:aa:a1:
                    46:7f:31:74:bf:ac:68:6d:b5:67:c3:05:19:50:ce:
                    e1:a2:4d:0a:27:8a:56:e3:ea:c0:30:52:da:c1:a5:
                    22:d7:98:3a:e3:f6:0a:50:1c:44:a2:a4:dc:a1:66:
                    f2:aa:24:59:0a:1b:67:ba:ad:b9:2c:ad:e5:3e:d1:
                    bf:74:1f:62:78:91:87:51:11:cc:f8:bb:bf:25:ef:
                    2b:20:b8:88:15:ef:50:57:86:d4:0c:34:83:5a:f6:
                    cf:e5:b3:06:30:9f:53:60:ed:d7:27:01:fe:cd:e4:
                    68:a0:a0:d2:c1:64:f0:8e:43:f5:1e:5c:3a:b2:99:
                    0f:a4:f5:b5:13:c2:06:6a:d5:b9:cf:42:9b:1e:e5:
                    3c:3f:26:3a:4a:9f:18:12:70:9e:68:ac:20:99:ca:
                    df:d7:94:d7:e3:c5:46:fa:c7:9e:88:47:65:06:86:
                    e9:51:59:d0:8b:c7:c1:5c:d9:01:88:04:d1:1b:77:
                    cc:a3:19:86:0e:a6:c6:dc:d3:4d:1d:b4:55:4c:c8:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B8:12:3D:C7:91:B7:3A:FD:63:72:75:32:DD:AE:17:AC:79:0B:D8
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:77:b3:a3:e5:64:ec:d3:ef:04:58:eb:44:79:9e:59:89:e7:
         02:89:ad:6a:a2:d2:19:f1:ea:4f:ed:0f:57:ba:e9:da:30:81:
         c8:f6:a8:33:ac:14:d2:20:94:ed:fa:5e:3c:fa:a4:d1:ae:5d:
         36:51:7b:a0:35:82:0c:8b:c4:d9:49:11:4c:a3:1e:80:46:fa:
         7f:3f:f1:38:cc:ed:67:cf:80:a5:f0:a2:95:ac:a2:5d:7a:92:
         c7:e3:a5:88:99:4c:76:1d:48:6b:24:19:fd:57:ff:ad:71:b0:
         35:16:34:c7:27:54:0b:eb:7f:f7:7c:99:fa:79:36:f1:32:85:
         f9:e4:c4:26:53:78:c7:45:5e:38:c3:7a:94:6a:19:36:e2:8b:
         0a:27:27:22:d9:98:13:d9:7a:84:5b:21:af:e4:de:58:7c:9f:
         54:f3:61:c1:c8:ad:f2:63:0d:06:8b:0e:b7:d9:7c:00:29:2e:
         7c:3c:25:de:36:fa:3a:2a:7d:52:6e:38:54:c9:77:fc:8c:c4:
         7c:38:cb:b6:47:e3:2f:ff:eb:4e:5d:00:16:ad:78:47:3b:be:
         ac:75:e4:3d:e6:ad:f9:86:0d:0f:d5:9a:aa:38:1d:40:fa:ea:
         7b:19:5b:d6:83:07:91:e1:cf:22:20:20:32:46:26:40:43:9b:
         6b:02:54:f9
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUPvadToDaGTJ8OPFD9ZO48Q5JdE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB
ODFBOTNCRTAeFw0yMzA3MDIxMzQ3NDVaFw0yNDA2MzAxMzUyNDVaMDMxMTAvBgNV
BAMTKDc3QjgxMjNEQzc5MUI3M0FGRDYzNzI3NTMyRERBRTE3QUM3OTBCRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRnTNbK9p8aqCbfxAfhzJUTHM
Dmd7ftuB1PsHigaG5vOcKaGylKjp8XHE6DCyRl6MljTWwSHSqM2qoUZ/MXS/rGht
tWfDBRlQzuGiTQonilbj6sAwUtrBpSLXmDrj9gpQHESipNyhZvKqJFkKG2e6rbks
reU+0b90H2J4kYdREcz4u78l7ysguIgV71BXhtQMNINa9s/lswYwn1Ng7dcnAf7N
5GigoNLBZPCOQ/UeXDqymQ+k9bUTwgZq1bnPQpse5Tw/JjpKnxgScJ5orCCZyt/X
lNfjxUb6x56IR2UGhulRWdCLx8Fc2QGIBNEbd8yjGYYOpsbc000dtFVMyOz3AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUd7gSPceRtzr9Y3J1Mt2uF6x5C9gwHwYDVR0j
BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD
RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB
OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i
ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhMzUzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAUw
DQYJKoZIhvcNAQELBQADggEBAFt3s6PlZOzT7wRY60R5nlmJ5wKJrWqi0hnx6k/t
D1e66dowgcj2qDOsFNIglO36Xjz6pNGuXTZRe6A1ggyLxNlJEUyjHoBG+n8/8TjM
7WfPgKXwopWsol16ksfjpYiZTHYdSGskGf1X/61xsDUWNMcnVAvrf/d8mfp5NvEy
hfnkxCZTeMdFXjjDepRqGTbiiwonJyLZmBPZeoRbIa/k3lh8n1TzYcHIrfJjDQaL
DrfZfAApLnw8Jd42+joqfVJuOFTJd/yMxHw4y7ZH4y//605dABateEc7vqx15D3m
rfmGDQ/Vmqo4HUD66nsZW9aDB5HhzyIgIDJGJkBDm2sCVPk=
-----END CERTIFICATE-----
Generated at Thu May 2 01:04:45 2024 by rpki-client on console-fra.rpki-client.org