Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a353030303a3a2f34382d3438203d3e203535363835.roa
File:                     323430343a653130303a353030303a3a2f34382d3438203d3e203535363835.roa (raw, json)
Hash identifier:          7itJzED0sOKDNOZ3LzyLU4CPj7WKwgbK5CrCZJK9ozg=
Subject key identifier:   59:BD:B4:48:62:E6:22:C3:62:5F:CB:7B:80:70:B0:9E:6B:D0:16:4E
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       0F193BAB60BF860981D0A2EEBBC43A5BD98DAC46
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a353030303a3a2f34382d3438203d3e203535363835.roa
Signing time:             Tue 24 Oct 2023 06:30:27 +0000
ROA not before:           Tue 24 Oct 2023 06:25:27 +0000
ROA not after:            Tue 22 Oct 2024 06:30:27 +0000
asID:                     55685
IP address blocks:        2404:e100:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:19:3b:ab:60:bf:86:09:81:d0:a2:ee:bb:c4:3a:5b:d9:8d:ac:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Oct 24 06:25:27 2023 GMT
            Not After : Oct 22 06:30:27 2024 GMT
        Subject: CN=59BDB44862E622C3625FCB7B8070B09E6BD0164E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:ff:f8:84:a0:b8:c0:2b:17:f2:11:7c:27:
                    57:47:f3:5e:94:ff:24:80:e5:c9:ee:5f:e3:ff:24:
                    e6:2a:28:69:c2:fa:d4:04:9d:73:6c:ef:51:2a:ca:
                    c6:d2:cf:be:f8:77:6f:1b:2d:3e:b6:62:68:0d:07:
                    d3:fc:d5:82:ea:c2:e4:d6:e5:dc:ba:eb:2b:dc:c5:
                    4d:f4:e8:fc:05:ea:cc:83:67:52:a7:20:37:2a:89:
                    70:e7:77:9c:00:d5:ce:f0:dc:b5:6a:8f:88:02:db:
                    a6:1f:70:f6:10:93:a2:c2:98:5f:7e:0d:85:da:cd:
                    dd:82:fd:f9:66:a7:d4:62:da:eb:c6:33:33:25:74:
                    91:1a:06:ad:bf:2c:97:c1:9e:f2:aa:fc:d0:8f:5c:
                    a7:fa:98:b4:67:8e:62:60:f5:1d:32:ed:1f:8f:3c:
                    54:f0:8c:2a:5b:62:b0:d8:c1:ac:84:d0:96:64:c8:
                    11:e5:c3:de:7f:bd:ba:aa:0b:b6:0c:9e:39:a9:9a:
                    ce:3d:04:64:41:10:0c:d2:1c:5a:1c:52:f2:d0:b1:
                    ba:b5:31:5c:52:a5:f0:87:3e:20:47:85:05:da:8b:
                    63:b5:b0:d5:87:05:9a:5b:55:ea:50:af:6f:f9:c5:
                    61:b5:b7:f5:eb:2a:1b:d8:85:8e:ea:33:90:6a:21:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BD:B4:48:62:E6:22:C3:62:5F:CB:7B:80:70:B0:9E:6B:D0:16:4E
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a353030303a3a2f34382d3438203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:e100:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:d5:b7:6f:eb:f2:98:f7:cd:d0:96:9a:1c:22:ee:3e:46:b8:
         bc:5c:f7:e9:d2:ec:99:63:93:4c:da:e4:ff:f9:32:8b:0f:35:
         fd:ce:0c:9e:b4:50:81:4c:19:4b:78:8c:ec:80:88:d1:f8:90:
         44:27:c9:ae:f1:fa:71:f8:95:05:a2:0d:63:07:d4:b6:08:e4:
         e8:fc:b1:f2:06:b3:9c:bc:48:d2:86:f8:1e:b7:d7:66:0b:74:
         7c:5b:dd:30:dd:08:46:f0:da:6b:8b:60:26:3b:08:f8:5a:4a:
         61:7e:4e:b6:ec:e2:96:1f:87:eb:5b:df:65:e0:94:33:99:03:
         82:8c:4a:e8:83:bd:2f:fb:07:07:bf:61:db:a9:03:79:7a:9e:
         f9:b4:86:b2:fd:be:4a:b6:e1:7a:de:5d:ee:e4:f6:8b:0a:10:
         b2:11:8f:69:52:23:0f:06:6e:b4:c9:95:b4:85:1b:5f:73:e6:
         6c:4b:fa:28:38:ff:42:76:c8:99:96:97:db:91:48:59:db:ec:
         d1:42:dd:b5:1a:1d:86:70:25:7d:cc:d5:2f:0b:ab:8a:11:17:
         5d:9e:3f:3b:e7:07:a6:2d:01:62:88:d6:a8:4a:ec:d7:08:c7:
         5b:cb:8a:34:bf:9c:c7:22:0c:0f:92:39:a7:b7:fb:08:7b:f7:
         27:af:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:07:40 2024 by rpki-client on console-fra.rpki-client.org