Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a3a2f33322d3332203d3e20313430343133.roa
File:                     323430363a313363303a3a2f33322d3332203d3e20313430343133.roa (raw, json)
Hash identifier:          ejoIF3g7vBFA4/bnxe5utct9sxpeJcbreu2Y0WgXrQU=
Subject key identifier:   87:D6:A9:39:E7:52:FF:3B:EE:80:36:C1:C9:74:8A:CE:BC:D5:5A:5E
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       448F438D23F509C77E6F553C8528DF557F222989
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a3a2f33322d3332203d3e20313430343133.roa
Signing time:             Mon 06 Nov 2023 07:00:01 +0000
ROA not before:           Mon 06 Nov 2023 06:55:01 +0000
ROA not after:            Mon 04 Nov 2024 07:00:01 +0000
asID:                     140413
IP address blocks:        2406:13c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 22:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8f:43:8d:23:f5:09:c7:7e:6f:55:3c:85:28:df:55:7f:22:29:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Nov  6 06:55:01 2023 GMT
            Not After : Nov  4 07:00:01 2024 GMT
        Subject: CN=87D6A939E752FF3BEE8036C1C9748ACEBCD55A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:cb:e8:9e:26:49:18:11:83:1d:55:ba:28:
                    a0:69:35:a5:44:ba:28:8f:36:4c:ee:23:e3:90:63:
                    e5:9f:fe:4c:2f:23:18:26:3a:62:1f:42:20:81:03:
                    08:5a:d5:c6:28:02:02:e8:64:4f:c3:73:02:5d:1c:
                    69:1b:98:74:3b:15:25:ac:9f:df:2c:bb:78:06:08:
                    ef:6c:29:31:f4:c4:3e:60:69:3d:58:e8:da:2b:9d:
                    7f:c2:97:8b:a4:24:f5:dd:d3:5f:6c:bd:4b:51:02:
                    2c:44:e8:25:d9:39:3e:2a:b9:1f:e0:5f:32:48:58:
                    29:65:c2:37:3c:23:5b:41:77:41:55:a9:bc:43:cc:
                    fe:23:da:2b:bc:73:0f:4a:17:54:d5:6b:ab:e7:cc:
                    54:a3:0d:9a:1e:c2:ac:89:7c:72:22:bc:f6:54:2b:
                    09:00:70:65:ba:21:09:64:96:33:2c:f1:52:bd:97:
                    5e:68:09:d7:77:b7:b7:b3:aa:38:87:28:fc:bc:0a:
                    21:6f:3b:6b:7f:01:62:e1:01:e3:0b:d0:6a:73:08:
                    25:8b:bb:2e:4b:01:97:b4:37:63:6b:1a:15:ac:9a:
                    bb:9e:7f:10:08:8d:62:c0:08:c6:7f:62:3e:2f:05:
                    7d:90:44:d7:2a:dd:06:5d:06:14:a9:36:70:cb:2e:
                    b9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D6:A9:39:E7:52:FF:3B:EE:80:36:C1:C9:74:8A:CE:BC:D5:5A:5E
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a3a2f33322d3332203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:5e:e8:2c:3a:8b:08:4a:ad:ce:43:aa:7a:46:2e:45:d9:83:
         48:c4:0d:b0:4e:37:a1:ca:f8:bc:9c:52:4f:b5:0b:8a:e1:38:
         f0:fd:8c:4c:ee:1b:c8:d0:76:ae:d8:36:e1:ea:e4:2f:76:f8:
         fe:be:05:96:a5:4a:7c:80:12:aa:d8:25:e9:08:25:b5:23:62:
         de:f8:cb:b9:79:51:ae:56:46:69:7b:9a:7f:39:ad:5c:94:4c:
         d2:57:45:3a:9a:5e:da:12:33:a8:ef:6b:e0:5a:14:9f:16:6c:
         f5:1b:54:8a:d8:e1:f4:dd:d6:f6:fa:76:86:0b:3d:e3:92:06:
         6c:7b:ba:18:46:00:34:09:df:84:fa:7b:8e:4f:e3:cc:3c:2c:
         64:9d:9a:e7:b5:82:1c:d7:fa:bd:1c:a5:d2:c7:59:03:ac:85:
         54:4a:6c:6e:64:3a:f0:07:95:2c:33:fc:37:5b:98:0d:ec:f8:
         9b:ef:39:cc:23:6f:c9:9b:b6:47:f2:1d:3c:d9:72:94:92:47:
         67:fb:a4:83:51:2b:df:c4:18:67:d1:d2:c7:2b:5f:8f:6f:47:
         e5:ba:f9:80:0e:f5:5b:34:46:8b:b1:db:4a:5a:ee:14:42:51:
         30:25:be:31:8a:9a:21:ff:91:89:0f:6b:f1:ab:5b:84:6d:5f:
         e0:22:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:50:25 2024 by rpki-client on console-ams.rpki-client.org