Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/323430353a316534303a3a2f34382d3438203d3e203538343735.roa
File:                     323430353a316534303a3a2f34382d3438203d3e203538343735.roa (raw, json)
Hash identifier:          BAGby26QuMGdhlsFVIJFaU/A0uhykz9x2Q/LGf52CB0=
Subject key identifier:   60:D0:5E:03:72:47:91:47:E9:58:0F:D9:23:A2:1A:E4:83:87:C9:F7
Certificate issuer:       /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
Certificate serial:       59508FF3E3D410CE7AF596EF6CB1D5361397EBA4
Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/323430353a316534303a3a2f34382d3438203d3e203538343735.roa
Signing time:             Mon 31 Jul 2023 00:13:41 +0000
ROA not before:           Mon 31 Jul 2023 00:08:41 +0000
ROA not after:            Mon 29 Jul 2024 00:13:41 +0000
asID:                     58475
IP address blocks:        2405:1e40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl
                          rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 19:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:50:8f:f3:e3:d4:10:ce:7a:f5:96:ef:6c:b1:d5:36:13:97:eb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
        Validity
            Not Before: Jul 31 00:08:41 2023 GMT
            Not After : Jul 29 00:13:41 2024 GMT
        Subject: CN=60D05E0372479147E9580FD923A21AE48387C9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:c9:d1:31:eb:24:f2:36:60:08:9d:c3:cf:
                    eb:e9:9e:c9:21:44:3d:64:22:c0:d8:45:11:06:4e:
                    33:c2:75:97:4e:71:cc:3d:7d:f4:ea:c9:c0:f1:40:
                    45:57:e1:4b:c7:b1:ea:29:70:01:b6:54:f9:69:c0:
                    2d:83:7c:e9:e6:c0:64:de:86:0c:b4:cb:e0:e3:ec:
                    f9:c5:6c:81:26:c2:8e:80:09:5e:32:d9:01:fe:ad:
                    d1:cd:a0:83:f3:78:8b:ba:d4:cf:73:b9:cd:24:2c:
                    8b:79:8a:8b:77:a7:ef:30:6e:49:bb:0b:80:5d:19:
                    79:2b:b1:5a:5e:5b:5e:65:59:f2:ab:f8:83:9b:a1:
                    42:54:ae:fb:88:0b:d8:65:8f:2d:34:55:0f:5a:e1:
                    93:11:82:16:71:80:6f:29:47:0f:f4:92:d2:01:b1:
                    81:26:e0:4a:12:28:d6:7b:1f:14:88:2a:3e:a8:96:
                    ae:54:a8:c6:9b:24:b7:c7:e8:94:08:ee:69:c5:30:
                    df:cb:d7:fc:19:2d:68:e5:88:00:3f:c9:38:0d:de:
                    41:34:98:63:6a:94:50:1a:61:18:f9:1b:0d:6d:ca:
                    07:0a:67:01:19:c0:c2:62:e5:66:e8:c8:0a:f7:2f:
                    d5:f0:cb:6b:98:b7:09:44:f7:b7:36:e0:ea:b6:4a:
                    20:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D0:5E:03:72:47:91:47:E9:58:0F:D9:23:A2:1A:E4:83:87:C9:F7
            X509v3 Authority Key Identifier:
                keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/323430353a316534303a3a2f34382d3438203d3e203538343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:1e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:6a:3d:fb:b1:f9:eb:d5:6a:8e:ee:9f:66:c2:64:4a:0a:d4:
         8c:21:dc:32:64:87:79:47:8a:28:b7:27:d6:68:06:39:1a:21:
         bb:8a:0f:20:5f:c2:06:79:02:f4:f7:14:57:b9:be:9c:49:b7:
         f8:a9:8e:3b:b3:19:0b:3b:f5:40:93:c8:6f:07:f9:f0:68:38:
         62:e8:f5:66:9c:7b:73:9a:d6:16:0d:6b:56:63:05:3c:a6:ed:
         28:06:0d:a5:a9:ac:c2:0e:7c:8d:66:0d:66:af:3d:94:72:97:
         a5:34:0c:3b:66:2a:fc:db:c3:5a:4a:de:70:08:7c:c0:f8:e3:
         ab:d5:c9:4e:95:ae:60:bf:0d:53:8b:3f:c4:05:c9:f8:6f:82:
         80:2d:ac:99:d6:c5:e2:dd:aa:0c:c1:8d:31:1e:8c:a1:fa:fa:
         62:f3:fc:e4:e7:bb:1c:ba:6d:c1:1f:e4:02:fd:2e:33:46:09:
         32:ad:bb:d7:d9:ca:11:37:6d:c2:ef:cb:0b:79:bb:92:56:93:
         9a:57:f9:54:42:d4:bd:64:23:55:a5:7b:e9:f0:9f:08:b3:9b:
         26:b5:77:3c:d8:be:38:23:36:1c:9f:85:01:16:e3:ad:3f:f0:
         6e:88:90:63:57:42:8e:58:2e:1e:d2:5e:b5:0a:df:20:b5:13:
         3a:03:62:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 16:11:06 2024 by rpki-client on console-ams.rpki-client.org