Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          JfnStn1haN504OvqZ0hOASFwUSWbDG4V83cjXngIjyM=
Subject key identifier:   37:24:6E:79:96:A6:46:DA:79:43:84:47:E1:1D:A0:8D:89:98:70:B4
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       62F31F72CB00C636D84B1CB8A5D3FE863194315F
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 02 Jul 2023 13:53:07 +0000
ROA not before:           Sun 02 Jul 2023 13:48:07 +0000
ROA not after:            Sun 30 Jun 2024 13:53:07 +0000
asID:                     140413
IP address blocks:        2406:13c0:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 22:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f3:1f:72:cb:00:c6:36:d8:4b:1c:b8:a5:d3:fe:86:31:94:31:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Jul  2 13:48:07 2023 GMT
            Not After : Jun 30 13:53:07 2024 GMT
        Subject: CN=37246E7996A646DA79438447E11DA08D899870B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:94:ad:47:20:41:33:03:57:a9:dc:d3:4f:
                    4f:0f:15:66:0c:5d:6a:cb:2a:05:9f:61:93:d8:92:
                    1a:bc:13:70:e9:63:52:94:03:ee:53:3d:f5:12:39:
                    f7:c5:a6:37:82:44:9f:60:c6:7f:2a:e7:8b:09:96:
                    35:4f:8c:4c:6e:89:5f:bd:70:1f:b5:f0:65:53:5c:
                    aa:92:bd:ff:50:c9:57:4c:33:4e:34:85:46:a5:68:
                    4c:2f:c3:ee:31:37:07:6e:79:cb:35:22:94:00:ac:
                    6f:59:0a:12:e0:6f:fa:6b:9d:25:8e:f0:f2:9a:a3:
                    64:5b:c9:24:3f:c2:a0:85:cf:95:6a:06:74:12:35:
                    d1:bd:b4:0e:7f:e6:7e:b0:41:51:75:80:c0:ad:6a:
                    9f:09:34:b0:f8:93:42:62:92:ec:01:10:70:d0:44:
                    48:f4:bc:b4:88:93:7d:df:75:da:8f:f8:60:81:f2:
                    8e:e8:84:8e:8c:a5:d2:37:ae:bd:21:f4:7c:41:a4:
                    c1:cf:85:28:3d:01:a1:ba:a7:21:f0:da:cd:29:53:
                    92:91:6e:25:39:bd:8c:24:ee:87:60:61:43:63:c4:
                    81:41:d5:12:be:f2:9b:2f:45:83:19:bd:0c:07:a7:
                    99:ac:d9:73:70:c2:5f:1c:fc:38:7d:ba:8f:fc:f0:
                    f2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:24:6E:79:96:A6:46:DA:79:43:84:47:E1:1D:A0:8D:89:98:70:B4
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:33:7d:bd:2a:ae:3a:77:de:6e:61:80:62:9d:40:7d:8c:2b:
         58:86:1d:56:95:a2:5d:42:78:4c:49:4a:59:81:d5:9a:ca:00:
         af:6e:48:20:5f:a7:89:b1:b5:cb:c2:7a:cf:b7:7a:9d:be:b6:
         e0:d6:50:eb:d0:31:25:81:9c:a8:15:dc:af:b5:40:84:b8:fb:
         75:86:15:f7:86:df:42:9a:0e:bf:5f:b9:5a:28:90:ec:dd:b5:
         5b:da:c3:34:ef:af:d1:75:c0:dc:f3:d8:b0:dd:8c:c9:03:11:
         e7:1f:23:f4:2c:e4:59:3f:9a:49:51:a0:b7:24:78:9b:d7:f8:
         62:cd:df:7d:47:cf:92:ca:1e:e4:c2:51:f2:5c:48:4d:5a:95:
         6f:e7:33:9d:4f:20:74:3b:6c:31:23:6c:4d:3a:9a:af:27:88:
         8e:34:2a:d3:79:b4:84:4c:eb:3e:23:6f:d5:24:c4:a3:8a:6a:
         60:44:c4:09:f1:8e:cb:b6:4c:10:b0:96:6e:a7:f5:d5:64:76:
         29:20:f1:76:64:d1:2e:0f:ec:7b:b0:b3:f5:9a:40:a1:d2:a2:
         f6:7a:ef:21:93:18:e6:2c:59:f6:d1:37:22:8a:9b:7f:e4:22:
         64:d4:f7:bc:f2:9c:8e:80:2b:6e:fd:29:55:43:52:f4:58:68:
         39:9b:4f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:45 2024 by rpki-client on console-fra.rpki-client.org