Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/323430363a393330303a3a2f33322d3438203d3e203338353036.roa
File:                     323430363a393330303a3a2f33322d3438203d3e203338353036.roa (raw, json)
Hash identifier:          qQJ6jnEpqkagSZS3Czt8tnXV6YM0MQSY5KuiCGCC3w8=
Subject key identifier:   75:4E:24:93:9C:A4:E7:3F:8A:A3:4F:DB:DD:68:E8:BA:C8:72:92:FB
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       0CDDF0B56A4266DC8D0BF1D360C41985A618FB3A
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/323430363a393330303a3a2f33322d3438203d3e203338353036.roa
Signing time:             Sat 15 Jul 2023 09:00:00 +0000
ROA not before:           Sat 15 Jul 2023 08:55:00 +0000
ROA not after:            Sat 13 Jul 2024 09:00:00 +0000
asID:                     38506
IP address blocks:        2406:9300::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 07:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:dd:f0:b5:6a:42:66:dc:8d:0b:f1:d3:60:c4:19:85:a6:18:fb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Jul 15 08:55:00 2023 GMT
            Not After : Jul 13 09:00:00 2024 GMT
        Subject: CN=754E24939CA4E73F8AA34FDBDD68E8BAC87292FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:06:42:a8:bf:12:3f:f5:10:bb:b6:87:76:
                    19:6e:71:39:82:95:f6:4f:30:56:00:74:4e:22:b2:
                    43:39:4f:6f:81:ec:68:e3:a9:94:9c:82:4d:06:42:
                    8b:56:2b:71:c8:a7:94:06:dd:dd:6f:20:35:f7:0f:
                    fd:77:42:dc:70:07:71:3c:f6:7e:f9:4f:54:0e:9b:
                    a8:8e:7a:60:61:ca:69:fb:46:07:f3:c8:fa:2f:d4:
                    c5:c2:82:0a:7d:2f:ff:a1:43:d0:28:31:5a:7a:a9:
                    81:58:2b:c0:af:9a:6d:36:f9:65:ea:f0:27:c9:08:
                    f8:a4:90:e8:d0:66:80:ab:c1:bd:42:ac:80:40:13:
                    41:6a:4b:da:d6:66:46:81:c9:c2:8e:c2:6b:1d:2b:
                    93:71:ea:fa:ab:1d:83:28:49:73:30:3d:48:13:c9:
                    cc:08:51:08:fc:eb:cc:70:ab:da:34:63:8f:7f:60:
                    35:34:78:aa:8a:63:62:dd:4c:bc:e0:ae:27:d0:6d:
                    a1:6c:c5:c2:cc:34:8b:cc:45:2c:e7:f7:30:80:04:
                    e5:8e:71:25:ac:71:24:93:ba:a7:aa:78:e3:e9:13:
                    0d:da:73:12:bb:a6:cd:cc:c2:82:8f:73:c2:6b:c1:
                    5a:7b:c9:59:99:c9:ff:8c:36:1c:0d:3d:2a:3c:03:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4E:24:93:9C:A4:E7:3F:8A:A3:4F:DB:DD:68:E8:BA:C8:72:92:FB
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/323430363a393330303a3a2f33322d3438203d3e203338353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9300::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:fc:7e:7a:2d:37:ab:c3:b7:72:89:40:a7:46:92:ec:e9:
         50:5f:a9:cd:d8:b8:1d:e5:fd:ae:e6:fc:f0:d4:20:07:5b:1e:
         f1:60:5f:ae:a4:15:d7:14:75:6e:e0:67:bb:90:9d:8d:9e:54:
         90:ab:23:a8:4f:bb:ce:34:54:15:a6:dc:ca:c4:af:e8:39:41:
         be:69:7c:dc:88:57:c6:94:ad:48:dc:08:21:30:0c:ba:e5:78:
         18:02:8e:36:77:2e:b2:3d:f0:6b:26:2f:40:d5:4b:15:89:47:
         2d:de:1a:45:1f:5e:74:49:c1:b2:ca:0e:1f:77:f7:ca:65:0c:
         f6:d9:e8:dd:eb:6a:c0:80:5c:e1:dc:16:71:f7:e9:10:93:e1:
         78:ce:c8:db:f2:96:ad:84:ee:f3:b0:16:61:f8:82:36:c9:8a:
         d9:07:93:6e:96:50:1f:48:84:04:3d:f6:6f:d5:35:4d:27:6c:
         66:88:43:48:ee:1f:ea:58:92:e1:78:dd:7d:38:74:b0:2a:0b:
         63:43:44:82:37:67:66:46:61:96:7e:83:1f:dd:9f:29:16:17:
         e9:2d:c0:b7:54:1e:3f:a9:c4:72:a4:2f:6c:5d:df:5e:e3:ea:
         33:80:2d:0f:27:67:5b:fa:4a:72:0f:26:bc:26:23:85:f5:60:
         6e:ce:55:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:38:48 2024 by rpki-client on console-ams.rpki-client.org