Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33373a3a2f34382d3438203d3e203535373031.roa
File:                     323430353a623930303a33373a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier:          q/ek/xWkUi9dY/3ndrAMl7LrRbKKsTlKhQIreE/NIPE=
Subject key identifier:   0A:9A:CC:DA:3B:99:18:4F:5A:7D:9B:F2:6F:A9:C9:C4:C0:07:CC:08
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       0FB7FCB544D017C062583D7D48355F5978B136FE
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33373a3a2f34382d3438203d3e203535373031.roa
Signing time:             Thu 08 Jun 2023 03:02:05 +0000
ROA not before:           Thu 08 Jun 2023 02:57:05 +0000
ROA not after:            Thu 06 Jun 2024 03:02:05 +0000
asID:                     55701
IP address blocks:        2405:b900:37::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b7:fc:b5:44:d0:17:c0:62:58:3d:7d:48:35:5f:59:78:b1:36:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: Jun  8 02:57:05 2023 GMT
            Not After : Jun  6 03:02:05 2024 GMT
        Subject: CN=0A9ACCDA3B99184F5A7D9BF26FA9C9C4C007CC08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:1d:72:52:51:c8:13:56:d1:26:c6:68:5a:
                    98:94:d6:b8:33:ff:a0:c2:29:9b:69:b4:6f:87:15:
                    74:3c:bf:48:f2:32:32:2d:61:d0:af:57:0b:70:cc:
                    e3:a1:09:89:6b:d3:85:6f:8b:7a:7a:1c:f0:e9:73:
                    b9:9c:62:56:10:2e:80:4d:fd:b2:6e:07:11:a6:61:
                    1e:dd:9c:8e:e9:5d:ac:55:3c:cd:a8:cc:dd:a4:f7:
                    59:ef:45:69:05:80:fb:ca:48:58:e6:fc:99:b0:bb:
                    bb:f9:f2:af:75:f4:36:47:4f:f7:df:21:72:1a:93:
                    72:73:80:f6:92:73:27:6d:a9:88:2a:4b:ff:40:38:
                    ac:a3:24:34:8f:c5:4a:4c:10:0d:7d:04:e3:db:b1:
                    f4:a5:e9:bd:b8:1e:b8:86:f8:b1:a1:f4:35:bb:d7:
                    ad:0d:7e:1d:ec:1c:d1:ef:0f:6e:a3:02:04:3c:c8:
                    e2:cd:aa:9b:4e:79:ec:dc:17:b3:a5:4b:31:42:df:
                    97:7d:34:2d:39:ed:19:c6:ca:b6:46:55:6b:6c:a8:
                    cb:7d:cd:50:d6:40:96:a5:b5:23:64:74:cf:6b:52:
                    04:7a:ae:32:6e:07:56:50:42:ae:e8:16:83:ce:35:
                    cc:cd:94:4a:bb:9a:40:d7:29:7d:27:0c:64:72:33:
                    0f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9A:CC:DA:3B:99:18:4F:5A:7D:9B:F2:6F:A9:C9:C4:C0:07:CC:08
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a33373a3a2f34382d3438203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:b900:37::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:a8:e6:8c:c1:63:b4:d0:d7:25:fc:4d:e1:d8:bb:70:a3:e2:
         fb:13:81:cf:cc:9d:c3:da:d6:28:1c:91:bc:a5:42:77:b6:ca:
         55:a1:ce:a0:db:53:02:4e:da:da:8e:99:63:0e:5e:86:94:32:
         77:d3:11:70:fc:2b:a6:63:66:af:fc:6b:f5:85:ed:6b:b4:dd:
         2c:1b:aa:51:49:cf:8b:10:8e:98:a3:62:60:a5:d7:fd:89:48:
         98:01:e1:1c:3b:69:a7:70:7a:41:7d:51:bd:9c:48:2f:6b:81:
         6e:e8:00:7e:db:54:4a:76:3d:33:6e:ff:f1:d5:21:96:c0:35:
         c2:2e:87:a8:df:13:e7:0d:2a:8e:8c:e4:a3:df:f4:03:96:fe:
         f0:1b:6d:5c:37:39:34:23:f8:a6:6b:30:fd:20:cd:ab:ef:c2:
         a5:3a:c9:68:ab:20:0c:0d:b1:db:5d:fe:c2:d6:ee:38:7f:d1:
         3b:c6:a2:91:3a:c2:f0:77:db:3b:a1:74:a3:bb:8d:a5:42:44:
         63:04:db:1e:fd:f5:11:6d:2c:3c:57:83:6f:26:24:71:9f:8d:
         63:c4:9e:3d:58:07:41:72:21:db:76:dc:b4:b1:ce:ba:0e:e3:
         c4:4e:75:0e:e1:b2:62:7e:0e:9d:ff:d9:dd:c5:42:fa:f1:36:
         58:aa:4d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org