Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31373a3a2f34382d3438203d3e203535373031.roa
File:                     323430353a623930303a31373a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier:          FDUas079GHJahyhm4+qwXk2jDo0gmXvBxElzML3pQhA=
Subject key identifier:   F1:4C:B3:E2:D0:8F:F9:29:45:F4:18:E0:48:94:59:13:1D:39:D7:8A
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       45AA48C85FA1B2FDA4FE6EBD9E6CC5410E2F75E2
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31373a3a2f34382d3438203d3e203535373031.roa
Signing time:             Thu 08 Jun 2023 03:02:06 +0000
ROA not before:           Thu 08 Jun 2023 02:57:06 +0000
ROA not after:            Thu 06 Jun 2024 03:02:06 +0000
asID:                     55701
IP address blocks:        2405:b900:17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:aa:48:c8:5f:a1:b2:fd:a4:fe:6e:bd:9e:6c:c5:41:0e:2f:75:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: Jun  8 02:57:06 2023 GMT
            Not After : Jun  6 03:02:06 2024 GMT
        Subject: CN=F14CB3E2D08FF92945F418E0489459131D39D78A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:0c:8b:75:90:50:ac:3d:bd:0c:92:56:44:
                    38:e8:99:f2:71:ee:2c:f2:6b:aa:60:e0:3a:73:62:
                    3e:3f:56:9b:a9:6c:a1:c9:21:9b:a9:38:2e:52:ba:
                    04:99:6d:91:f9:64:d0:95:96:99:45:2a:32:db:0f:
                    12:cc:bb:fc:b1:bd:0d:79:c7:09:2e:79:0d:59:a2:
                    0a:26:22:09:47:d5:2a:59:6a:81:19:a2:5f:e0:b0:
                    5f:d3:92:2b:35:af:57:9f:26:98:19:52:51:a9:03:
                    02:df:1c:4f:af:c6:4a:8d:45:4b:75:6a:cf:7f:61:
                    ef:62:58:ed:8e:18:ff:7f:90:83:17:56:ef:5b:f7:
                    cd:22:05:c3:b7:e9:b7:62:19:77:96:55:30:ec:25:
                    6e:4f:45:25:d3:81:af:b4:ac:52:26:ec:2d:e8:42:
                    1e:f0:fd:fd:39:38:02:83:63:e4:43:e8:c5:96:eb:
                    74:c6:82:1d:e5:2e:bf:d1:ce:cc:0c:12:19:f0:ee:
                    e6:0c:03:e9:22:e0:15:83:57:f3:f0:d2:0a:30:c7:
                    cc:b5:75:cb:39:73:4c:91:6a:c1:f1:14:ea:f5:15:
                    72:72:43:9d:25:a1:12:15:94:68:54:b9:be:52:06:
                    d4:bc:bc:3b:7c:c1:ea:77:46:96:03:1b:f6:04:b3:
                    cd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4C:B3:E2:D0:8F:F9:29:45:F4:18:E0:48:94:59:13:1D:39:D7:8A
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31373a3a2f34382d3438203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:b900:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:30:eb:e3:92:e9:9a:21:ab:67:c5:1d:5e:4e:7b:bb:f5:95:
         7f:2a:35:e4:26:89:39:8d:eb:c4:13:07:d8:10:15:d8:46:87:
         3a:34:99:e4:0a:ba:bf:28:b9:d9:21:48:ac:1e:18:21:71:a9:
         f4:35:24:3d:92:aa:27:c1:45:82:95:d7:54:fd:4b:a6:b4:b4:
         01:a4:ff:b5:d5:64:e9:19:d4:3f:d5:fd:0d:04:82:5b:29:a7:
         6c:0c:fe:f0:f1:51:5b:7e:cf:41:a1:7d:c6:14:9e:cd:a4:46:
         3a:79:b8:6b:77:ce:7b:6e:06:95:0e:ff:b2:97:48:4b:9c:80:
         8c:a9:8e:42:19:2e:91:ee:b0:f4:22:9f:76:b5:e9:40:c1:9b:
         77:08:c9:ee:2b:f9:c0:66:c5:88:ab:e8:ce:4a:18:46:6b:93:
         f4:47:bb:27:69:8c:55:8d:3b:f5:ed:89:3d:96:19:55:3f:33:
         4e:e6:cb:a7:79:47:c7:08:1b:01:f9:4a:f1:16:3a:6a:c9:c3:
         b9:ac:04:65:5e:f5:e0:49:f8:be:7a:28:d5:a2:df:c7:92:e6:
         59:00:ad:53:2c:3e:92:c7:bd:56:1c:c7:d1:8c:ef:39:a8:16:
         4b:25:d1:85:6e:27:4d:ef:b3:1f:ac:89:8c:5e:4e:64:63:39:
         ac:0e:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org