Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36373a3a2f34382d3438203d3e20313431383932.roa
File:                     323430353a623930303a36373a3a2f34382d3438203d3e20313431383932.roa (raw, json)
Hash identifier:          ll+O6OY1K+orS0mdhZ3nMKMn1UPn7Foad0I0COlDXYQ=
Subject key identifier:   70:36:B6:BD:B7:85:54:5B:51:77:65:3C:63:56:B2:40:0D:AE:BB:FA
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       6119DAB4C42F6A0E144585984D3B09A3DF1FC097
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36373a3a2f34382d3438203d3e20313431383932.roa
Signing time:             Thu 08 Jun 2023 03:02:06 +0000
ROA not before:           Thu 08 Jun 2023 02:57:06 +0000
ROA not after:            Thu 06 Jun 2024 03:02:06 +0000
asID:                     141892
IP address blocks:        2405:b900:67::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:19:da:b4:c4:2f:6a:0e:14:45:85:98:4d:3b:09:a3:df:1f:c0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: Jun  8 02:57:06 2023 GMT
            Not After : Jun  6 03:02:06 2024 GMT
        Subject: CN=7036B6BDB785545B5177653C6356B2400DAEBBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:07:1a:db:7d:aa:f0:a3:06:7b:63:e0:d2:
                    7e:6b:6f:7a:d1:67:1b:cb:ad:9e:d7:cf:4b:34:de:
                    5b:d0:28:23:7e:ca:bd:39:47:ce:b2:9a:06:d8:61:
                    06:28:a6:37:50:d1:a5:5a:f7:67:d2:15:57:44:fd:
                    25:91:3a:39:bc:0d:5e:f7:db:14:a7:81:87:c2:d4:
                    a8:c0:ee:c7:98:6f:ef:c9:64:2a:eb:b1:b9:83:ff:
                    72:2f:97:30:7a:5f:c4:08:b2:ee:60:2b:64:8c:bc:
                    85:c1:bd:fe:1f:6a:aa:83:4b:3b:ff:cc:a8:84:78:
                    f9:da:d5:2d:6e:36:1e:7d:39:24:10:71:14:27:26:
                    10:1b:fd:16:5d:f6:38:b2:90:3f:fc:9b:50:e3:95:
                    ac:31:22:0d:1c:d8:a4:bf:43:84:a8:81:c5:70:ce:
                    e4:bb:e3:da:6b:3d:c7:d7:12:5b:d2:ed:e4:c1:00:
                    f0:c9:5a:26:23:98:df:3a:41:46:18:26:89:cb:5a:
                    b5:81:56:45:e9:da:42:25:b3:96:24:09:3d:b1:3f:
                    01:e2:5f:ba:77:01:3c:72:6c:0e:90:dd:d0:00:d6:
                    57:66:de:4b:e6:48:6a:fe:35:a4:f2:22:8a:fc:3c:
                    93:7b:10:0a:7d:52:9f:4b:76:c1:25:16:c8:71:94:
                    e8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:36:B6:BD:B7:85:54:5B:51:77:65:3C:63:56:B2:40:0D:AE:BB:FA
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36373a3a2f34382d3438203d3e20313431383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:b900:67::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:3b:f3:5d:41:b0:db:d3:d4:2d:2f:98:9f:93:99:6d:a5:2b:
         79:9d:9d:1c:02:cc:0c:66:45:ca:be:e5:74:6d:2c:b4:e2:8d:
         9a:ec:cb:2b:bd:2c:a8:6a:46:78:e1:18:94:b3:2c:e3:31:83:
         e1:47:4a:da:61:ff:c1:cf:c2:7c:af:34:0c:df:5e:bc:34:a3:
         0c:a3:11:af:d6:3b:74:2b:81:4f:3a:0b:03:56:47:b9:85:95:
         aa:6b:f0:2b:11:df:67:4c:16:13:44:25:6d:7a:6e:f2:77:b8:
         4d:a2:16:02:c7:43:66:d5:e2:01:57:c5:a9:90:dd:93:2e:01:
         d1:a0:56:09:4a:59:51:a0:4d:08:53:15:44:a8:0f:50:5d:a1:
         66:e7:9c:3b:4c:e7:e7:cb:68:eb:45:9c:c6:c0:72:33:ae:65:
         35:09:f5:95:cd:45:42:1d:6a:f3:3b:0c:60:04:0e:67:a9:6b:
         0f:6b:c7:38:6b:07:f1:19:81:38:97:f6:f2:1f:e5:ca:82:91:
         9b:e5:f4:83:3f:b1:83:f5:dd:c9:e6:67:69:b3:20:9d:e9:93:
         01:78:3f:04:dd:df:6d:5e:9b:f8:c3:1a:0e:72:b3:69:35:e7:
         38:c8:bc:66:14:6a:07:ee:37:72:01:ce:7a:ed:7e:57:7f:81:
         85:fc:25:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org