Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa
File:                     323430313a333234303a3a2f33322d3438203d3e203633343930.roa (raw, json)
Hash identifier:          1u/tfi9RemA9CkTWtiFOjEFnlTY5/5z6r2XK0wGFq2w=
Subject key identifier:   A3:5D:73:5A:A3:B8:F7:42:D1:AD:56:68:6F:9D:EC:5B:04:A5:E0:52
Certificate issuer:       /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
Certificate serial:       54E2479F0484B0621E7D16676C8C0A7CBE768751
Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa
Signing time:             Tue 06 Jun 2023 03:00:01 +0000
ROA not before:           Tue 06 Jun 2023 02:55:01 +0000
ROA not after:            Tue 04 Jun 2024 03:00:01 +0000
asID:                     63490
IP address blocks:        2401:3240::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl
                          rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e2:47:9f:04:84:b0:62:1e:7d:16:67:6c:8c:0a:7c:be:76:87:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
        Validity
            Not Before: Jun  6 02:55:01 2023 GMT
            Not After : Jun  4 03:00:01 2024 GMT
        Subject: CN=A35D735AA3B8F742D1AD56686F9DEC5B04A5E052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e0:54:d4:c4:7b:8a:8d:0c:46:eb:84:f0:49:
                    fc:2e:49:82:cc:bb:fb:e6:15:0e:ce:15:92:5e:6c:
                    de:c4:72:0e:d5:c4:bf:d9:4e:47:eb:3c:c3:3c:c3:
                    f3:9c:83:26:5c:38:a2:a4:88:84:66:35:5c:e1:08:
                    52:ef:ac:62:d2:c6:5f:96:2f:87:a5:d0:28:9f:47:
                    63:6a:66:9c:ba:ed:b3:25:40:98:30:44:14:56:77:
                    13:09:32:83:7a:ad:cc:be:93:ff:bf:3b:f2:74:24:
                    d5:bd:8b:ba:8b:72:30:c1:ad:53:d3:72:8d:de:e3:
                    c6:3a:4b:39:c5:aa:c0:d9:7d:02:04:c6:4d:df:7d:
                    94:09:66:e7:da:aa:58:4a:13:9e:d1:29:5e:21:41:
                    2c:5e:3d:82:8a:ba:60:79:e8:9f:2a:51:ac:fb:b0:
                    1d:24:12:ee:02:66:da:60:df:1d:2d:eb:0d:16:cc:
                    d1:a9:bf:93:82:4b:9f:12:9e:35:85:7d:61:fc:39:
                    f2:8e:13:0f:d3:ca:95:f7:7c:1c:23:0a:c2:cb:57:
                    a4:e9:8d:0c:3a:5f:27:fc:26:0a:f0:ca:dc:c5:ac:
                    ad:38:7a:d7:bd:2e:c1:16:71:be:7c:d1:f3:02:d0:
                    44:39:20:b3:8a:d1:86:13:75:5f:a7:8e:6b:d0:66:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5D:73:5A:A3:B8:F7:42:D1:AD:56:68:6F:9D:EC:5B:04:A5:E0:52
            X509v3 Authority Key Identifier:
                keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3240::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:33:83:e7:89:e5:ac:02:1f:f4:a6:b7:68:4d:01:e4:5e:61:
         4d:77:68:9b:45:96:ba:de:2f:71:95:a3:d2:5d:e2:a7:39:ef:
         75:f0:df:d4:7c:b6:76:6c:8c:73:3b:04:5e:61:94:be:ba:d6:
         49:30:f0:ea:5a:85:f5:88:00:ed:20:4e:1a:bc:fe:b4:34:79:
         1c:8a:a1:0f:39:1c:17:bb:6b:27:3d:cd:e2:98:98:78:67:aa:
         32:43:a5:67:12:ad:6e:f2:36:c6:c1:00:29:a8:5f:57:62:a8:
         e7:34:41:95:43:2b:f0:50:8d:79:e4:1c:4a:b8:6b:96:3e:00:
         57:20:a1:65:17:b4:ab:23:f1:54:b8:16:71:cb:2f:a9:ab:02:
         a6:d5:6c:a2:b2:db:1c:bc:d0:cb:2e:49:68:67:59:5c:b5:ff:
         a2:5e:8b:11:b9:66:6d:b0:ca:f2:fd:9c:51:41:ce:de:23:cf:
         98:04:df:1c:77:c9:20:fe:b7:87:99:8a:dc:35:4c:05:08:d8:
         1a:76:5a:d7:2b:8b:21:ee:b4:d3:98:f9:af:1b:94:88:16:ba:
         e5:a6:69:4b:da:48:d1:18:61:3c:76:74:8c:14:e5:c0:2d:9e:
         37:9f:89:a5:f7:ea:1e:ed:1c:91:24:18:12:fe:b7:3b:42:90:
         b3:ee:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:43:20 2024 by rpki-client on console-ams.rpki-client.org