Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343a3a2f34382d3438203d3e203535363835.roa
File:                     323430343a653130303a343a3a2f34382d3438203d3e203535363835.roa (raw, json)
Hash identifier:          YIXhY3NTKauZbhznpcbVefi/KaO+bE9owj6LBsPlc0w=
Subject key identifier:   AD:3A:FD:E3:BA:19:6E:3A:04:50:23:72:2F:85:48:15:13:1C:19:4C
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       1BEB17008C29517D9A616E9BF5406C0D49D5F8D0
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343a3a2f34382d3438203d3e203535363835.roa
Signing time:             Fri 24 Nov 2023 12:31:56 +0000
ROA not before:           Fri 24 Nov 2023 12:26:56 +0000
ROA not after:            Fri 22 Nov 2024 12:31:56 +0000
asID:                     55685
IP address blocks:        2404:e100:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:eb:17:00:8c:29:51:7d:9a:61:6e:9b:f5:40:6c:0d:49:d5:f8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Nov 24 12:26:56 2023 GMT
            Not After : Nov 22 12:31:56 2024 GMT
        Subject: CN=AD3AFDE3BA196E3A045023722F854815131C194C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ae:25:c7:44:07:6c:14:f8:d9:19:d9:d6:2b:
                    03:60:ff:c9:74:7f:4c:af:af:5c:da:09:40:a2:49:
                    9a:8a:9d:0d:3d:06:f7:f9:50:fb:da:81:a7:ab:7d:
                    42:c4:be:e9:e7:78:0f:f2:c8:9c:ae:9d:82:2f:58:
                    f9:25:d2:cc:32:5a:76:32:0a:6e:5b:05:dc:64:81:
                    07:9d:04:cc:e6:2b:8d:34:d0:17:00:60:78:4a:fa:
                    11:a8:cd:5b:51:4e:6c:9c:8b:47:ec:da:bf:e5:ff:
                    6a:5c:72:2d:69:42:b0:20:f1:78:d8:ea:d4:8f:ba:
                    e6:bd:0e:aa:96:67:b5:8c:e6:58:33:12:67:63:ec:
                    35:9d:2e:78:18:18:56:26:74:19:bf:6d:fc:66:6d:
                    cf:f9:d8:e4:2a:b2:e5:40:32:90:cc:72:99:21:a8:
                    7f:61:b8:74:59:53:16:20:2d:49:53:3b:3a:8a:d8:
                    49:ba:bc:a3:34:ff:17:87:4f:9f:25:15:13:a3:c4:
                    ba:6c:17:c7:44:f7:58:cd:b5:23:c6:55:b1:80:fc:
                    db:15:e1:b1:27:f6:6e:a6:ba:6c:8a:e6:91:73:b7:
                    89:25:9c:cf:00:44:a1:ba:28:ee:5c:b2:c0:65:50:
                    a0:7c:ed:9c:a8:9e:c2:34:10:03:5b:f5:ba:3c:c3:
                    dd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3A:FD:E3:BA:19:6E:3A:04:50:23:72:2F:85:48:15:13:1C:19:4C
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343a3a2f34382d3438203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:e100:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:07:13:78:7c:59:88:16:25:a7:0a:6c:49:90:46:1b:3e:
         b2:e8:c4:ae:92:c7:e1:91:15:c4:a9:21:cc:88:1f:85:d2:a7:
         52:e6:a6:b2:c5:c2:67:f8:9e:0f:22:e8:b0:05:ee:8d:9f:48:
         31:1e:4d:9e:9f:49:7b:8b:1d:53:34:0b:77:bc:6f:b1:0d:6e:
         7b:aa:4b:36:78:c0:05:ac:38:56:d8:af:23:66:70:15:41:2c:
         b8:6c:9b:3c:10:82:06:bd:7c:9a:6f:7c:34:a1:ec:7f:c6:06:
         f4:0b:ff:c3:b8:b9:12:72:88:b4:52:85:a7:35:36:d9:4a:77:
         26:29:c3:8c:ff:c6:fe:98:23:2e:1e:d4:ad:a1:db:67:95:2d:
         ac:fe:c2:d1:1d:61:2c:e2:e9:9d:63:02:6b:6d:54:ac:37:40:
         e9:37:68:9e:60:a0:33:fc:40:3a:c5:61:14:d8:7d:cc:30:89:
         05:39:36:af:88:13:cc:8f:5a:19:a2:5f:85:11:db:95:3d:ae:
         ea:16:29:6d:2c:43:8b:69:3f:b2:ef:c0:01:57:14:95:6b:18:
         f8:dc:c6:34:22:d8:c9:08:3d:3c:1e:96:af:f6:84:77:ed:9c:
         54:80:f5:2d:9c:20:bf:4d:d0:54:59:00:71:cc:10:8c:08:96:
         ea:5b:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:07:40 2024 by rpki-client on console-fra.rpki-client.org