Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/323430353a326334303a3a2f33322d3438203d3e203435373035.roa
File:                     323430353a326334303a3a2f33322d3438203d3e203435373035.roa (raw, json)
Hash identifier:          0rrD9rsrPw1to0KVnMm/oOy3FAO13tEMUxBSZzNqA1M=
Subject key identifier:   2F:4B:10:3A:92:89:AE:D1:63:59:1A:E5:D3:A4:A1:99:C2:C3:F2:2A
Certificate issuer:       /CN=348D53D52081AB75C21BE292C2A5077DF4B75308
Certificate serial:       531982F303919A79059523F0C4A291B07A269DF7
Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/323430353a326334303a3a2f33322d3438203d3e203435373035.roa
Signing time:             Mon 31 Jul 2023 00:12:16 +0000
ROA not before:           Mon 31 Jul 2023 00:07:16 +0000
ROA not after:            Mon 29 Jul 2024 00:12:16 +0000
asID:                     45705
IP address blocks:        2405:2c40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl
                          rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 21:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:19:82:f3:03:91:9a:79:05:95:23:f0:c4:a2:91:b0:7a:26:9d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308
        Validity
            Not Before: Jul 31 00:07:16 2023 GMT
            Not After : Jul 29 00:12:16 2024 GMT
        Subject: CN=2F4B103A9289AED163591AE5D3A4A199C2C3F22A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c8:66:2e:fe:fb:d6:af:3e:6c:a3:e8:a4:91:
                    0d:34:c2:91:4f:93:10:0a:42:cc:a7:9a:c2:55:87:
                    a8:c6:c0:44:a2:84:3a:b4:b6:1a:b1:53:fa:b0:1a:
                    05:97:ce:c8:9f:bb:2c:f1:96:ea:06:b0:74:42:1c:
                    0b:2b:71:3d:9f:33:21:03:d2:9e:22:90:4b:e6:75:
                    df:86:25:11:9a:5d:d6:af:3c:9b:c5:97:55:53:9c:
                    ff:ad:aa:58:a8:7a:5a:33:c1:9a:88:69:3f:0d:93:
                    ec:26:25:6f:aa:dd:c7:b0:9d:1b:0e:31:e1:e6:c9:
                    90:b8:a5:ef:fc:e7:9a:c8:4b:98:80:5c:af:3c:e9:
                    0f:4f:8e:68:11:e5:3f:98:47:17:15:5b:2c:21:bb:
                    28:1b:99:88:37:66:39:79:93:de:b8:bb:dd:ea:69:
                    0b:75:a8:8b:6b:35:c8:ea:8d:84:f4:35:86:45:46:
                    43:05:aa:cb:d7:d4:f0:5e:f9:49:29:86:c3:31:78:
                    8c:be:01:5a:c4:0e:70:18:8a:aa:fd:8a:4e:11:c1:
                    d4:4f:37:47:ad:1c:73:82:73:11:6f:45:19:45:4f:
                    57:59:c7:43:3c:b8:28:50:24:bb:e5:11:6b:22:09:
                    0d:62:fa:8c:fe:6f:68:8c:58:bb:91:a8:a7:09:ea:
                    0b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4B:10:3A:92:89:AE:D1:63:59:1A:E5:D3:A4:A1:99:C2:C3:F2:2A
            X509v3 Authority Key Identifier:
                keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/323430353a326334303a3a2f33322d3438203d3e203435373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:de:41:ae:13:f5:fe:b4:5e:41:b4:3e:e5:5a:0a:c1:b1:fd:
         aa:24:71:9c:0a:0a:b4:50:3a:01:34:0b:0c:67:f9:5b:0d:30:
         94:11:e8:2c:52:5c:8d:5a:b6:55:6d:20:e8:81:2a:01:f1:7d:
         50:12:25:6c:b5:32:93:f7:2b:e9:cf:77:bf:90:bd:94:aa:6f:
         ae:bb:a6:b4:ce:0c:4d:1e:bf:15:d7:67:84:5f:2c:d8:c6:33:
         62:6c:d9:47:57:7d:62:11:50:3c:6d:06:47:1e:bf:95:4a:33:
         54:5c:14:3a:1a:97:c3:6f:89:5a:c8:17:4e:fe:d8:c2:0b:df:
         2d:27:c6:e9:14:d6:7c:dd:20:4e:02:c6:6a:08:1f:9c:64:2a:
         70:2a:51:72:de:0a:2b:29:df:51:4e:83:33:b1:d3:f5:97:b6:
         cb:6c:31:1c:49:44:20:65:71:ce:dc:6f:a1:95:5f:f7:22:85:
         58:75:e7:df:66:c2:1a:21:88:32:d4:fb:3c:47:cf:63:cf:60:
         1a:93:40:30:fb:e3:45:27:50:24:f4:69:e3:ec:2e:e4:4f:db:
         2f:6d:aa:f7:ac:3c:ed:93:bd:f3:a3:e9:fa:0e:e5:20:4d:68:
         a1:a0:05:05:31:f5:94:6f:e3:cc:dc:11:45:02:6e:39:35:a6:
         26:67:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 06:38:27 2024 by rpki-client on console-fra.rpki-client.org