Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37333a3a2f34382d3438203d3e203535373031.roa
File:                     323430353a623930303a37333a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier:          RObZ01G1VbLoGIIk05USTEcC633deFPzxXlp6Jku6E8=
Subject key identifier:   75:55:10:25:78:6A:3D:AA:79:69:A2:34:01:70:0B:65:8F:53:7A:E8
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       76066711B571ED6897E8F062F9782BE6B69DD93F
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37333a3a2f34382d3438203d3e203535373031.roa
Signing time:             Thu 17 Aug 2023 02:00:01 +0000
ROA not before:           Thu 17 Aug 2023 01:55:01 +0000
ROA not after:            Thu 15 Aug 2024 02:00:01 +0000
asID:                     55701
IP address blocks:        2405:b900:73::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:06:67:11:b5:71:ed:68:97:e8:f0:62:f9:78:2b:e6:b6:9d:d9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: Aug 17 01:55:01 2023 GMT
            Not After : Aug 15 02:00:01 2024 GMT
        Subject: CN=75551025786A3DAA7969A23401700B658F537AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:53:11:dd:70:40:eb:d3:cf:e5:90:ef:18:
                    83:21:47:9d:82:ec:8e:ef:6d:0c:35:81:17:0a:76:
                    92:fb:b0:df:1e:0c:6f:6a:b8:11:25:0a:99:0f:f4:
                    6a:82:e2:27:1a:55:39:18:e2:b6:77:14:0b:cf:67:
                    4a:6f:e6:68:05:13:39:19:df:01:e0:72:09:74:1b:
                    52:e1:80:32:f8:40:f9:8c:02:3d:cf:fd:9d:45:dc:
                    16:e0:fb:e2:c5:9a:1e:86:bb:30:16:ad:bf:32:2a:
                    99:bb:91:17:0a:3a:ea:ea:9a:4a:b8:68:8a:cd:f6:
                    53:0f:f2:85:7c:79:25:7c:22:17:b0:e9:11:0f:38:
                    13:ed:b3:73:ae:ee:b3:f7:69:85:f0:ac:9b:57:b2:
                    da:c1:d6:95:09:07:1a:e6:72:bf:99:36:be:9d:9e:
                    81:35:ff:4b:e5:23:d4:af:78:26:c3:8b:db:86:3a:
                    8b:6f:82:89:b3:f4:50:91:8a:62:81:75:84:d6:3c:
                    3a:60:12:41:42:63:27:8d:69:9d:40:62:f6:a5:d9:
                    f6:45:52:5b:f4:1a:0a:c8:2a:ca:2d:3d:a1:0d:33:
                    99:ef:03:ab:2f:d2:6a:e1:76:05:75:d0:c7:b8:06:
                    bf:d3:21:9e:31:d3:47:02:f6:61:4d:d8:08:0b:98:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:55:10:25:78:6A:3D:AA:79:69:A2:34:01:70:0B:65:8F:53:7A:E8
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a37333a3a2f34382d3438203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:b900:73::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:cc:14:df:53:b4:d5:c2:3b:70:83:e0:1a:db:4f:f4:7a:91:
         11:61:a2:eb:28:ab:97:3c:d4:f9:85:1d:0f:0f:32:4d:e0:a9:
         4d:45:64:0b:74:b3:69:fa:ba:7b:0e:a0:2d:6d:3c:3d:dc:09:
         e7:85:61:32:fb:b7:f0:00:08:b6:7f:d4:6b:f8:81:6f:70:e0:
         ad:0c:9c:c1:03:45:7e:70:91:fe:25:73:75:9b:91:f4:08:6a:
         04:7c:65:dc:a5:ba:13:e4:05:5a:17:d2:e7:f4:cb:73:eb:9c:
         dd:2e:62:3a:f0:67:b0:a1:51:c8:ec:e4:c4:c0:75:19:e4:93:
         96:c8:51:2f:08:f4:8a:f6:13:12:29:4d:08:bc:dd:c7:84:fa:
         60:cb:b6:b5:02:b3:60:5e:3d:42:61:33:3d:1a:96:cc:73:b7:
         52:04:7c:9c:ce:58:8c:9f:12:f5:7c:13:0b:b7:74:16:f4:66:
         89:b7:15:97:6f:ce:e5:db:ad:3b:c6:85:18:2f:90:51:0b:1e:
         cf:38:79:ea:bf:1c:2d:28:f7:b0:61:2a:18:4e:6a:81:e5:66:
         db:87:62:f8:98:c4:61:a2:5a:5e:9a:9a:96:fa:59:1a:9a:67:
         f4:dd:fc:90:8c:99:cd:01:cc:4b:95:38:8b:35:78:6d:43:dc:
         03:1b:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org