Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/323430363a386563303a3a2f33322d3332203d3e203435373031.roa
File:                     323430363a386563303a3a2f33322d3332203d3e203435373031.roa (raw, json)
Hash identifier:          3Lh8nn9gUsRm1Sb2SKLJv/AhuPARqznnxlFbW2bHpVk=
Subject key identifier:   54:9C:79:7F:5E:28:28:DA:23:BB:B4:4A:67:51:14:BF:07:50:CB:10
Certificate issuer:       /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7
Certificate serial:       6B03BCFB2CFCAFCB2F5906EFA85181CDE4AB3B59
Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/323430363a386563303a3a2f33322d3332203d3e203435373031.roa
Signing time:             Thu 02 Nov 2023 01:00:04 +0000
ROA not before:           Thu 02 Nov 2023 00:55:04 +0000
ROA not after:            Thu 31 Oct 2024 01:00:04 +0000
asID:                     45701
IP address blocks:        2406:8ec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl
                          rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:03:bc:fb:2c:fc:af:cb:2f:59:06:ef:a8:51:81:cd:e4:ab:3b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7
        Validity
            Not Before: Nov  2 00:55:04 2023 GMT
            Not After : Oct 31 01:00:04 2024 GMT
        Subject: CN=549C797F5E2828DA23BBB44A675114BF0750CB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:57:ab:98:ac:6a:6f:47:11:37:62:98:48:
                    39:55:4a:01:80:a5:38:7f:88:5b:91:e5:13:30:bf:
                    e5:e5:85:32:51:db:92:5f:15:26:c0:72:1e:a2:b0:
                    94:dd:86:b9:04:9f:9e:13:0f:50:f6:2a:07:a1:90:
                    f8:9d:15:22:5d:5d:87:61:db:ac:0c:b1:7b:68:23:
                    11:5c:8c:e8:0a:d6:17:c9:11:fc:14:93:cf:4e:f9:
                    fd:62:84:e3:4e:4a:a5:ba:9d:90:e2:fd:06:40:5e:
                    42:d5:f8:6f:7a:2a:f1:b2:d5:14:b3:b1:47:90:b6:
                    81:09:8b:22:2e:36:f4:5e:52:2c:d5:57:e4:6a:08:
                    f3:6a:f1:a3:b0:8c:f8:69:c6:ad:8f:0a:fe:03:07:
                    74:3f:4f:3b:db:d0:65:90:26:a8:69:c4:7c:64:60:
                    75:5a:46:38:88:80:ab:7c:41:a7:f9:16:fd:77:8c:
                    32:b3:7d:ff:63:f3:ea:c1:76:e4:ec:09:55:d9:75:
                    ab:55:d2:2f:ad:3e:6f:55:68:36:32:92:54:a0:4f:
                    b8:cc:70:da:8f:0d:c0:ac:a4:bf:d2:59:fa:31:e8:
                    4b:eb:2b:c5:27:60:26:7c:64:59:38:cb:a7:3a:4e:
                    9a:29:e9:00:d2:a4:e9:4d:6e:be:59:1a:ea:3f:4e:
                    74:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9C:79:7F:5E:28:28:DA:23:BB:B4:4A:67:51:14:BF:07:50:CB:10
            X509v3 Authority Key Identifier:
                keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/323430363a386563303a3a2f33322d3332203d3e203435373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:7a:42:c1:72:a6:7a:89:da:62:12:e4:9d:90:8a:53:24:11:
         2f:8d:07:03:a4:77:5c:d7:4e:a0:ee:62:9a:9c:3e:6c:20:4b:
         36:42:27:5a:63:a5:84:6a:ba:36:ab:60:7e:d0:04:3d:25:ca:
         f0:5b:31:d9:03:89:80:f1:a0:af:c2:7d:eb:ab:fe:5d:1a:6c:
         d5:ee:26:17:27:8f:e5:e3:94:b1:ca:85:63:4c:93:ef:60:d8:
         86:e1:29:27:85:ca:0f:20:53:59:f7:50:ed:18:a6:fe:5f:ca:
         96:e9:1a:f3:48:43:6b:3a:8b:e6:35:7b:a0:9e:4d:84:54:1f:
         13:40:68:70:43:10:75:d6:3c:92:04:ff:d6:6e:d5:ec:ff:71:
         c1:ae:ad:fd:5c:20:e3:50:31:ba:ff:2e:b4:9c:6e:00:fd:4b:
         2f:73:95:b1:d4:69:16:dc:66:06:ae:70:82:79:c7:cd:fb:e9:
         dc:52:0b:43:d8:1b:55:ce:a9:31:96:cc:b4:60:11:6a:75:36:
         bf:a1:96:f9:b0:3f:fd:d4:be:b7:6d:56:6f:b8:3c:b5:6a:c7:
         75:d6:7f:6e:be:5a:2f:33:60:34:bd:b4:3d:53:ba:bc:d3:c7:
         a0:d2:d1:a4:4f:a1:2b:6b:3b:87:43:31:f9:5f:53:bd:bb:9d:
         f7:9c:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:20:10 2024 by rpki-client on console-ams.rpki-client.org