Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          xjG6dPuU8L/xVa/54CsGSsd2h5M5mHP7K5wQv1fI73w=
Subject key identifier:   6E:BB:CD:42:3F:FA:7C:0D:BE:35:0E:23:6B:09:69:A3:4B:B4:47:8B
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       16B48F9ABA536C1F4D3B7FA46FC335A1B6113BF0
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 02 Jul 2023 13:54:08 +0000
ROA not before:           Sun 02 Jul 2023 13:49:08 +0000
ROA not after:            Sun 30 Jun 2024 13:54:08 +0000
asID:                     140413
IP address blocks:        2406:13c0:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 22:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b4:8f:9a:ba:53:6c:1f:4d:3b:7f:a4:6f:c3:35:a1:b6:11:3b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Jul  2 13:49:08 2023 GMT
            Not After : Jun 30 13:54:08 2024 GMT
        Subject: CN=6EBBCD423FFA7C0DBE350E236B0969A34BB4478B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:12:c6:9c:86:2e:ac:7d:cf:4a:84:f1:3a:
                    49:23:fa:d9:80:9c:12:8e:7d:6f:5e:e9:80:e9:e1:
                    fd:ec:27:dd:53:4e:f0:49:74:4a:2e:30:54:19:b6:
                    4e:d8:b4:99:11:29:11:88:54:b4:60:20:99:e9:f6:
                    5a:9d:8b:31:dc:9c:21:24:48:f5:e0:2c:b1:62:39:
                    76:8c:a6:04:72:db:5b:df:1d:22:65:61:c8:08:9f:
                    09:63:41:ae:44:40:bd:6d:be:c3:31:79:f3:e9:92:
                    ed:39:f4:95:8e:b8:19:24:cd:dc:1d:7f:38:bb:42:
                    87:e9:83:8e:1b:be:70:f8:09:9b:b6:52:04:ad:a3:
                    db:5f:0a:46:91:d1:c7:c4:d2:e5:47:8b:17:a1:e7:
                    c8:9c:93:bf:e5:87:b9:73:08:f9:b7:f2:fb:2a:6f:
                    5f:46:ce:ca:b4:8f:74:e5:e7:f4:c8:b4:b7:44:be:
                    39:18:42:68:de:10:a3:cc:49:b5:ae:6d:08:a1:ee:
                    31:a7:86:90:bb:67:d3:0b:84:4a:73:fb:0b:ee:b7:
                    82:dd:7f:80:9d:a8:47:ea:4f:54:e4:bc:50:47:33:
                    1b:88:48:fd:e2:13:0e:b5:66:55:32:94:e2:85:dd:
                    2c:60:cd:1e:1e:72:1a:40:f3:0c:d1:96:9f:df:e8:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BB:CD:42:3F:FA:7C:0D:BE:35:0E:23:6B:09:69:A3:4B:B4:47:8B
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:61:62:c9:1e:ad:1b:18:8e:15:9a:fc:cf:ed:7c:47:ba:96:
         8a:17:b9:8d:61:14:16:07:41:95:6b:c7:58:b6:3d:23:b1:71:
         19:08:c0:21:53:b8:af:23:d1:4b:af:9a:59:b6:92:fc:07:cf:
         1b:4e:12:23:8e:3f:73:db:6f:55:fc:24:11:2f:02:1a:1a:6d:
         2c:c1:b4:bf:fd:aa:ed:9f:b4:fc:e2:5f:b8:2b:00:46:dd:3e:
         e7:6b:9c:d1:ef:26:c4:9a:f2:ac:5c:ff:b5:14:f0:ad:78:6b:
         97:ba:72:7b:57:d9:8c:46:ab:4a:3f:66:bc:a7:e0:95:66:62:
         4e:d4:bd:f7:9a:7c:38:7d:65:81:19:52:2b:f6:96:9b:14:06:
         d7:f9:bb:60:b6:f3:30:97:9e:35:6b:0d:4d:47:95:68:e9:91:
         2e:a0:a9:7a:50:fb:7f:57:0f:31:28:28:b5:1e:5a:8f:04:29:
         9b:81:8f:b4:78:12:3a:9b:ce:87:a1:98:c0:61:e4:14:20:c6:
         2c:4b:db:aa:6b:b9:27:8a:fa:fb:f0:cd:b2:44:86:ca:9e:46:
         70:80:95:98:d6:c0:5f:fe:06:67:ab:e7:34:c9:73:ae:fc:50:
         a8:b1:11:42:46:11:8f:8f:78:45:a1:b4:39:f8:5e:7c:25:48:
         ea:0e:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:45 2024 by rpki-client on console-fra.rpki-client.org