Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a363031303a3a2f34382d3438203d3e20313336303739.roa
File:                     323430353a326363303a363031303a3a2f34382d3438203d3e20313336303739.roa (raw, json)
Hash identifier:          CfUDLFP70RC1JvYazy8kuiSZSEGbJNUm2ZaJXjPg40E=
Subject key identifier:   AB:3B:3C:64:63:A8:10:D2:78:3A:5E:28:05:B9:51:2D:8C:A7:B9:7D
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       2497012E6A425EA51C1CF0E7AAD8294F64FDAD70
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a363031303a3a2f34382d3438203d3e20313336303739.roa
Signing time:             Mon 31 Jul 2023 00:04:00 +0000
ROA not before:           Sun 30 Jul 2023 23:59:00 +0000
ROA not after:            Mon 29 Jul 2024 00:04:00 +0000
asID:                     136079
IP address blocks:        2405:2cc0:6010::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
                          rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 18:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:97:01:2e:6a:42:5e:a5:1c:1c:f0:e7:aa:d8:29:4f:64:fd:ad:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: Jul 30 23:59:00 2023 GMT
            Not After : Jul 29 00:04:00 2024 GMT
        Subject: CN=AB3B3C6463A810D2783A5E2805B9512D8CA7B97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:84:c4:97:f2:cd:a4:b6:75:aa:c1:17:af:
                    21:51:05:1b:66:36:0b:b3:ff:b3:72:a9:bd:df:a3:
                    1b:f6:e8:84:8a:b8:6f:e7:77:66:ce:9e:50:dc:23:
                    d0:cd:ba:ad:39:5a:ad:77:f6:2e:e7:40:94:4e:b9:
                    1f:62:c2:39:c5:ac:f8:32:08:73:3a:69:69:44:b9:
                    f6:df:c7:43:5e:a6:28:2e:39:c2:6f:39:2f:ea:dc:
                    e5:a4:de:91:c9:80:ca:41:14:39:d6:3d:08:ae:fa:
                    81:2d:cd:ae:93:0c:f0:17:f8:48:97:16:08:01:a0:
                    86:e8:63:62:ed:00:c9:e9:e9:47:d9:6a:91:05:0b:
                    d5:16:d5:ef:79:bd:aa:0a:85:26:fe:18:96:31:36:
                    cc:4d:a1:90:f4:ff:ff:e2:f7:74:44:45:09:09:00:
                    66:16:e1:95:d0:e0:1a:6b:a3:c6:a7:f7:c9:b0:67:
                    7a:4a:1e:cb:d9:b1:96:9f:fa:4f:cc:15:44:19:18:
                    cb:f3:45:b1:0e:d8:d0:2f:2b:25:db:31:7a:3e:54:
                    84:a5:55:4d:a7:9c:04:1b:3b:2e:a3:6a:3e:56:ac:
                    61:67:3f:7a:ac:4e:2c:70:35:c0:3e:e7:8e:6a:6d:
                    ea:ca:c2:a8:82:3c:7f:56:78:93:b5:d2:99:c3:fa:
                    03:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3B:3C:64:63:A8:10:D2:78:3A:5E:28:05:B9:51:2D:8C:A7:B9:7D
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a363031303a3a2f34382d3438203d3e20313336303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2cc0:6010::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:95:6c:2d:91:8a:1f:f4:d3:87:35:a1:c2:c9:c2:8a:87:f9:
         c0:49:aa:75:55:f2:9c:29:59:49:e2:7f:49:88:66:ac:87:13:
         f7:d5:63:43:e2:6b:2d:4f:58:bc:12:8e:5c:8a:ec:59:bb:f9:
         29:03:b0:d0:37:2c:a8:b4:3c:47:2c:72:d2:6b:04:eb:8f:b3:
         13:15:fc:d2:17:3e:4c:1a:8d:be:86:4e:61:58:57:7e:52:bf:
         3e:44:fa:7d:68:98:89:73:5d:4c:89:d3:29:18:74:df:3c:03:
         f6:dd:80:70:24:25:6b:78:4b:6e:49:47:9a:72:3a:5f:43:ba:
         ed:86:b4:83:07:c2:79:f1:cc:3d:fd:a2:53:9c:cb:02:1c:2a:
         bc:f9:ad:04:0d:dd:a2:de:d2:a1:5c:eb:9d:d7:6b:5b:47:69:
         a9:59:7b:ae:8a:5a:64:65:c9:82:f7:34:9d:40:f1:64:e7:12:
         a7:1c:6d:3e:22:3e:83:74:f5:96:fb:46:3d:6e:09:7f:c6:af:
         d5:03:48:82:1c:a0:db:90:7b:6f:95:31:55:ac:19:c4:ee:24:
         8d:3c:45:22:1e:11:d3:f2:06:87:90:c0:df:dc:8b:ee:6d:20:
         50:85:4c:76:0e:1b:e2:15:4d:7e:0b:6d:63:61:6c:79:02:d5:
         3d:40:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:27:46 2024 by rpki-client on console-fra.rpki-client.org