Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33303a3a2f34382d3438203d3e203535373031.roa
File:                     323430353a623930303a33303a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier:          1DYzZcea4sATGqHo6D+oAjic/XBgYyuF4bDEDoiQpnA=
Subject key identifier:   69:9E:86:F9:7D:F2:FF:4D:A4:58:4A:06:81:72:A0:EB:CE:4E:43:3B
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       263F243B37B54CB20023349D2E54C72A02D8995E
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33303a3a2f34382d3438203d3e203535373031.roa
Signing time:             Thu 08 Jun 2023 03:02:10 +0000
ROA not before:           Thu 08 Jun 2023 02:57:10 +0000
ROA not after:            Thu 06 Jun 2024 03:02:10 +0000
asID:                     55701
IP address blocks:        2405:b900:30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3f:24:3b:37:b5:4c:b2:00:23:34:9d:2e:54:c7:2a:02:d8:99:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: Jun  8 02:57:10 2023 GMT
            Not After : Jun  6 03:02:10 2024 GMT
        Subject: CN=699E86F97DF2FF4DA4584A068172A0EBCE4E433B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:08:7d:95:7f:c3:db:80:a3:38:f8:80:7d:
                    78:0b:5a:ee:6f:a3:62:b6:85:70:e6:11:30:b2:62:
                    8b:01:93:ca:0a:4a:dc:d5:20:86:37:67:ac:cd:9c:
                    bf:14:a6:3d:d7:bd:f5:3b:09:e0:b0:d0:2a:ea:c1:
                    1f:84:ad:90:c1:d3:89:d2:f6:d7:bf:26:34:a3:bd:
                    a8:7a:22:5f:7f:2f:0a:f5:72:5f:39:89:80:0c:5c:
                    d9:af:90:ba:19:37:76:d8:a1:a0:03:72:50:f3:05:
                    b5:25:e5:95:1a:87:0a:03:ca:e3:bb:38:7e:dc:f9:
                    80:36:5f:65:ed:04:8b:05:87:20:9e:48:4b:de:60:
                    70:99:e8:5e:c7:9f:cb:00:60:73:f4:29:67:12:34:
                    10:9f:8c:70:35:32:89:c1:95:75:be:b8:50:d4:bc:
                    95:c0:8f:98:89:06:ec:cd:be:95:78:39:c6:27:0b:
                    60:da:b0:d2:2b:dd:fc:c4:90:91:ee:6f:e7:96:70:
                    68:dc:80:7e:de:1d:85:df:30:b9:69:fa:4c:4b:6a:
                    16:22:e4:df:4f:16:a0:43:c7:64:d4:10:1f:16:78:
                    05:5a:a7:5b:1c:a2:51:2e:31:0e:b6:e4:42:d2:32:
                    8a:fd:ce:00:4b:74:ea:db:3a:44:cc:e6:05:51:4e:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9E:86:F9:7D:F2:FF:4D:A4:58:4A:06:81:72:A0:EB:CE:4E:43:3B
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33303a3a2f34382d3438203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:b900:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:d5:82:a2:85:2a:42:3a:d5:c2:9b:23:33:b4:02:ce:21:6a:
         8b:cd:0e:69:cc:96:db:a4:38:3c:32:24:ea:6c:90:2e:ae:ee:
         1c:15:a3:d0:ef:95:a3:c7:e9:0c:bf:f2:e3:91:0c:46:5b:aa:
         b9:d2:d1:50:fa:07:c9:26:66:fc:19:62:4c:11:d2:4a:52:90:
         5c:48:68:3b:9b:90:b7:23:fe:86:aa:c5:56:18:9f:de:e1:a6:
         85:5a:06:49:59:cd:85:03:ad:20:a4:15:fb:41:71:93:1c:1f:
         f6:b1:a3:14:c9:93:98:4e:6d:fd:16:ad:7c:1d:24:a1:9c:2e:
         41:40:ed:aa:9e:47:cb:a3:bc:f5:aa:aa:8f:a8:ff:48:3f:4f:
         07:65:89:1b:2a:2e:bc:59:65:ce:b3:05:c1:0f:96:95:f8:7e:
         83:90:f1:5d:8a:c2:ca:89:6d:a2:28:a4:d5:36:79:a5:6e:48:
         f2:63:52:5c:ae:41:4b:bf:fd:c7:ed:3f:76:d5:62:09:55:69:
         1e:15:02:6f:5e:e0:88:02:06:0f:eb:6c:78:1a:79:a5:17:fb:
         7b:bd:59:8a:45:77:f8:df:a8:ee:a2:06:74:e4:a0:98:4e:38:
         f8:35:ac:5e:e8:da:51:21:0c:5a:42:87:61:66:c5:86:51:78:
         f5:64:47:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org