Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/323430333a653434303a3a2f33322d3332203d3e20313338303936.roa
File:                     323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (raw, json)
Hash identifier:          WK4RvSieJhm8URFqLTpQXOfSBRZIisKKzDpFKAwUZQY=
Subject key identifier:   0D:5C:5D:62:45:B9:63:0C:12:E9:09:08:0A:72:1D:DD:19:8A:25:D3
Certificate issuer:       /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86
Certificate serial:       4F2985CE42AD5E4613A2787460D1D7F28C169ACD
Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/323430333a653434303a3a2f33322d3332203d3e20313338303936.roa
Signing time:             Mon 17 Jul 2023 05:00:01 +0000
ROA not before:           Mon 17 Jul 2023 04:55:01 +0000
ROA not after:            Mon 15 Jul 2024 05:00:01 +0000
asID:                     138096
IP address blocks:        2403:e440::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl
                          rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 07:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:29:85:ce:42:ad:5e:46:13:a2:78:74:60:d1:d7:f2:8c:16:9a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86
        Validity
            Not Before: Jul 17 04:55:01 2023 GMT
            Not After : Jul 15 05:00:01 2024 GMT
        Subject: CN=0D5C5D6245B9630C12E909080A721DDD198A25D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:63:cd:e6:3d:e1:eb:f0:02:cd:1a:00:86:
                    26:0d:ac:f0:10:15:db:0d:11:aa:fa:5a:88:23:84:
                    37:ff:14:2c:a7:bd:6f:74:9b:f8:6b:2d:d6:7f:43:
                    1d:16:51:8f:34:a4:c7:56:d2:9b:81:12:7f:8f:e3:
                    bd:9f:13:8a:4e:4a:87:60:3c:d2:94:d0:5e:72:72:
                    c3:08:5a:f9:9b:57:e0:1b:9f:19:8e:78:f2:fe:6a:
                    fa:3b:82:9c:5c:f8:05:a1:39:e0:62:a3:60:30:24:
                    9b:c9:61:f1:53:ae:a2:a8:04:a8:84:7c:a9:48:ca:
                    01:9c:d9:c8:6e:47:08:8f:23:38:cf:20:a6:58:96:
                    df:b4:2a:7f:51:d1:ae:3e:bf:9f:ee:8b:48:e4:7c:
                    aa:87:12:e7:69:99:f9:ed:9b:a2:c9:73:fe:02:91:
                    2a:04:7c:dd:c4:e7:81:e5:2f:5c:de:86:78:29:8d:
                    67:70:11:83:73:6e:a8:e1:43:50:7a:54:ea:da:35:
                    40:c1:ae:8b:5f:d0:83:2a:bf:9a:e6:9b:f0:5e:90:
                    0b:69:ae:d1:c5:6f:1f:98:72:3d:67:2f:74:c1:db:
                    aa:a4:25:b9:56:66:2f:64:96:2b:4a:cd:37:e3:66:
                    8b:71:13:79:c9:ec:05:12:bd:00:b4:e8:fb:8f:84:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:5D:62:45:B9:63:0C:12:E9:09:08:0A:72:1D:DD:19:8A:25:D3
            X509v3 Authority Key Identifier:
                keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/323430333a653434303a3a2f33322d3332203d3e20313338303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:e440::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:63:16:7c:a0:13:3a:6f:04:bc:52:b2:f5:ae:6a:3d:31:23:
         c7:6e:bd:44:cb:b8:77:5d:e3:38:66:b3:7c:d3:99:c1:02:88:
         5f:25:89:54:c6:18:dc:14:22:18:ec:b5:b8:e4:ef:3a:a2:a3:
         60:d5:be:a9:6c:6a:5c:89:57:dd:77:8f:b8:49:7b:db:5e:b6:
         17:80:6c:82:8d:8f:50:93:64:66:43:3c:aa:1f:2d:b5:99:d8:
         b1:41:39:3a:f3:cc:0b:4d:65:bf:4c:16:fc:ce:4e:5e:16:a1:
         2f:86:26:a2:71:95:5c:ed:d1:56:f5:b2:6d:82:ae:6d:ef:a2:
         a3:56:de:2a:99:72:43:4e:3d:65:1e:83:08:9d:8d:39:35:79:
         9c:fc:2f:05:95:4d:b9:08:b4:82:d1:74:3e:4b:34:fa:06:f7:
         96:53:2c:ea:ac:ff:93:6b:37:35:33:b5:0f:53:76:04:64:9e:
         8d:74:78:15:8d:a2:82:88:ba:d3:10:eb:ba:19:97:ea:84:4b:
         82:99:0e:ea:23:05:5d:c7:4e:5f:b1:af:70:35:fa:07:f6:1c:
         f8:4f:a2:e7:dd:c0:f8:67:90:9c:de:75:6b:65:17:db:77:a3:
         aa:c0:51:50:2c:83:32:0f:bf:8e:6f:72:39:0d:a6:6d:bb:c4:
         c3:c8:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:40:11 2024 by rpki-client on console-ams.rpki-client.org