Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/323430353a366134303a3a2f33322d3332203d3e20313339343235.roa
File:                     323430353a366134303a3a2f33322d3332203d3e20313339343235.roa (raw, json)
Hash identifier:          Rb+fJ5Tt9TXAPPQ8FfOItAIsZjUDNj6Jlz0/BiaAa44=
Subject key identifier:   0D:65:42:1D:6E:A4:C2:52:B6:02:DE:A0:00:9E:BD:05:36:F8:B1:38
Certificate issuer:       /CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE
Certificate serial:       656DC41B5929238D717E94AA99FA2FD857BA10D4
Authority key identifier: 1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/323430353a366134303a3a2f33322d3332203d3e20313339343235.roa
Signing time:             Mon 31 Jul 2023 00:02:32 +0000
ROA not before:           Sun 30 Jul 2023 23:57:32 +0000
ROA not after:            Mon 29 Jul 2024 00:02:32 +0000
asID:                     139425
IP address blocks:        2405:6a40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl
                          rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 18:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6d:c4:1b:59:29:23:8d:71:7e:94:aa:99:fa:2f:d8:57:ba:10:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE
        Validity
            Not Before: Jul 30 23:57:32 2023 GMT
            Not After : Jul 29 00:02:32 2024 GMT
        Subject: CN=0D65421D6EA4C252B602DEA0009EBD0536F8B138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:60:ce:01:14:29:48:35:5c:ee:c9:5f:fd:
                    6f:93:f7:c5:15:fd:6c:ad:8f:a0:45:59:96:c0:1f:
                    df:4e:4c:7d:df:a2:c2:56:18:ce:15:b2:7d:fc:fb:
                    c9:61:f4:24:e5:aa:b8:f7:ae:6d:8f:fc:b2:79:8b:
                    3d:dd:5f:6c:41:3a:73:ac:fa:de:4d:3e:f2:ba:ad:
                    2f:c5:f3:08:ea:ab:13:0c:72:40:91:3e:55:9e:0c:
                    f3:7d:09:0f:8c:04:67:4c:f5:6d:ef:f4:0a:bb:79:
                    1c:07:87:f4:c5:82:b7:02:c5:88:7a:e9:37:f6:48:
                    d9:70:df:e0:bd:91:9a:10:81:e3:27:1a:03:c2:bb:
                    8e:d9:47:3c:a2:e3:5e:a0:90:cd:36:df:02:87:41:
                    8e:8e:db:3f:a6:c3:e6:dd:51:0f:fb:20:8a:08:8a:
                    c4:5e:a3:c9:d0:52:25:9a:d7:c2:ea:56:1f:cb:67:
                    78:aa:aa:ba:28:dc:ac:af:e5:f9:5a:52:70:fe:28:
                    d5:70:1b:30:48:3d:ae:e8:52:8a:21:67:d6:bd:6c:
                    1c:38:3e:45:97:f7:e2:e2:78:d2:bd:de:6c:1a:33:
                    77:71:a8:dc:46:35:b8:27:ba:8f:83:8c:a5:98:04:
                    40:e2:b9:83:38:03:d2:14:07:cb:78:2d:b3:29:f5:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:65:42:1D:6E:A4:C2:52:B6:02:DE:A0:00:9E:BD:05:36:F8:B1:38
            X509v3 Authority Key Identifier:
                keyid:1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/323430353a366134303a3a2f33322d3332203d3e20313339343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:6a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:13:4f:0e:e8:bc:31:02:c9:9c:a4:b4:85:5f:3a:00:83:fb:
         06:29:8b:f5:07:9c:e3:a2:92:51:66:c4:c0:e1:78:8c:47:6c:
         06:9c:0c:bc:82:44:15:eb:41:d9:a9:6f:20:0b:67:39:4d:6b:
         13:44:cf:2c:10:0f:8a:76:4c:33:04:44:1f:36:24:cf:3e:fa:
         6d:d4:d9:91:15:e6:cc:5e:9b:3b:b2:31:51:94:a7:96:16:7f:
         54:a7:ca:41:23:fc:b0:23:dc:55:d0:2b:a4:26:ce:9b:cc:63:
         51:a5:f2:87:11:db:37:26:dd:f3:98:86:fd:00:29:fe:b1:6e:
         aa:ae:d7:30:76:9d:36:04:04:01:4d:7b:b9:80:48:66:7e:e0:
         2f:91:52:e8:69:64:37:2e:c2:8e:55:12:b1:12:0f:fe:b6:8c:
         77:5b:64:cd:a7:f8:21:e2:93:86:e4:74:1c:e8:5f:96:b8:c1:
         7e:7a:71:1b:53:38:db:44:a6:c9:bb:95:f3:3c:8c:46:97:3a:
         55:84:48:95:73:b2:0b:7c:41:23:fd:87:49:8a:d6:26:83:f3:
         01:6e:06:ea:d9:6d:ce:50:ae:a2:29:64:e6:c1:c5:06:59:00:
         d0:5f:da:31:96:27:1a:75:ad:86:08:61:04:db:ee:f9:6d:20:
         58:90:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:35:52 2024 by rpki-client on console-ams.rpki-client.org