Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/323430343a366430303a3a2f33322d3438203d3e203435323934.roa
File:                     323430343a366430303a3a2f33322d3438203d3e203435323934.roa (raw, json)
Hash identifier:          GcMxg6xZkPR1IE7FNUxD1NSvXsbtKpnO0cHQMV5lHhk=
Subject key identifier:   94:9C:75:CE:12:07:DA:78:D2:D0:6C:C3:34:8D:C6:2B:4B:D1:9D:8D
Certificate issuer:       /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
Certificate serial:       2A67E5D01C3D2FDF45FA1C8422A9265575FB295D
Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/323430343a366430303a3a2f33322d3438203d3e203435323934.roa
Signing time:             Mon 31 Jul 2023 00:14:37 +0000
ROA not before:           Mon 31 Jul 2023 00:09:37 +0000
ROA not after:            Mon 29 Jul 2024 00:14:37 +0000
asID:                     45294
IP address blocks:        2404:6d00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl
                          rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:67:e5:d0:1c:3d:2f:df:45:fa:1c:84:22:a9:26:55:75:fb:29:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
        Validity
            Not Before: Jul 31 00:09:37 2023 GMT
            Not After : Jul 29 00:14:37 2024 GMT
        Subject: CN=949C75CE1207DA78D2D06CC3348DC62B4BD19D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:f5:51:5d:9d:72:7f:18:f0:bd:12:20:e4:
                    fd:47:fa:48:c6:94:aa:6d:ff:15:51:f6:b3:ec:de:
                    6c:cd:40:0c:2f:9c:6f:69:84:35:6f:4e:ad:a9:9d:
                    01:e0:6f:6b:77:d9:90:62:d5:bc:2b:61:76:f5:64:
                    db:7c:7b:a1:84:e8:63:d0:73:cb:51:13:27:48:39:
                    85:58:fc:e4:0f:d1:e8:c1:50:61:a3:19:78:7c:52:
                    36:fb:38:ab:d6:8b:c7:08:b2:0f:90:8f:ac:9f:f1:
                    34:ce:42:e3:79:96:3d:0f:53:7a:bd:84:cb:f0:79:
                    6a:71:1e:76:0c:e6:1b:03:a7:36:98:d9:f2:35:91:
                    0b:10:71:aa:a2:fa:fa:ca:52:c9:a2:e3:9c:d6:b8:
                    8d:29:8e:63:08:b4:43:53:44:1d:8f:5a:d5:70:34:
                    03:52:6f:97:c5:cf:93:6b:97:bb:d5:92:c8:83:70:
                    79:f3:a1:d8:ec:ec:80:5d:28:e8:e3:95:f8:2f:5f:
                    2f:41:54:77:9d:4a:cb:d2:f8:46:4a:4e:36:44:15:
                    68:b1:95:a7:64:de:81:68:8a:e3:83:8e:19:65:f2:
                    1c:86:86:18:3a:74:60:2b:19:de:ba:3a:e8:8a:91:
                    d8:5d:52:bd:6c:a3:49:ac:e3:c9:57:03:6e:39:8c:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:75:CE:12:07:DA:78:D2:D0:6C:C3:34:8D:C6:2B:4B:D1:9D:8D
            X509v3 Authority Key Identifier:
                keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/323430343a366430303a3a2f33322d3438203d3e203435323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:6d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:df:04:a1:d8:47:9b:79:7c:f8:f3:85:a4:bb:f4:28:e7:5a:
         2d:89:6b:8d:40:24:74:6c:a1:b1:3d:07:52:30:6f:ad:18:2f:
         cd:44:80:da:98:da:ce:db:e2:91:41:69:1e:df:b2:ff:98:3c:
         32:39:a7:3b:92:0f:d3:4d:dc:50:e9:da:82:c6:c5:10:ed:82:
         07:e4:6a:04:dd:0c:1d:3a:ef:b8:46:a1:ca:dc:c8:5f:8f:3b:
         49:55:6a:4a:f8:fb:23:c0:23:a6:f4:7d:bc:b4:15:e7:94:7c:
         c1:67:ce:96:e6:ac:19:7d:76:21:01:f4:1d:b5:67:f4:7b:48:
         c7:bb:71:f0:ce:1b:32:16:44:03:19:0c:f5:ad:c3:4e:c7:59:
         f2:5b:8f:77:a1:5b:ce:55:77:3b:3e:b0:cd:18:bb:51:e0:9b:
         bd:38:7a:77:8f:7c:61:62:3c:62:13:72:9a:a2:70:4f:e7:2a:
         ac:52:40:30:d0:7a:5a:b6:71:8b:d9:ed:73:f6:ca:37:69:2c:
         3e:a1:b8:5f:7d:8f:ee:03:82:f6:87:08:1e:44:9a:2e:46:89:
         9a:aa:96:95:13:1a:9c:bb:ed:71:9d:b1:5d:95:06:91:51:69:
         96:59:0c:b4:5e:63:b3:5b:fa:87:9c:4f:91:28:1e:47:ba:a3:
         d3:b0:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:30:06 2024 by rpki-client on console-fra.rpki-client.org