Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa
File:                     323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (raw, json)
Hash identifier:          eozWiQDWKHdzutgZom++sfJOvu3x/442/fdb9ypL8V0=
Subject key identifier:   15:27:98:10:0B:6D:50:39:B5:96:10:BB:67:8D:89:60:50:0D:43:86
Certificate issuer:       /CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
Certificate serial:       6519F32824A640F95A9DD7FDD273D04E47767882
Authority key identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa
Signing time:             Mon 31 Jul 2023 00:08:16 +0000
ROA not before:           Mon 31 Jul 2023 00:03:16 +0000
ROA not after:            Mon 29 Jul 2024 00:08:16 +0000
asID:                     64300
IP address blocks:        2406:45c0:8000::/33 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl
                          rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:19:f3:28:24:a6:40:f9:5a:9d:d7:fd:d2:73:d0:4e:47:76:78:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
        Validity
            Not Before: Jul 31 00:03:16 2023 GMT
            Not After : Jul 29 00:08:16 2024 GMT
        Subject: CN=152798100B6D5039B59610BB678D8960500D4386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:1b:11:6a:d6:0f:86:83:71:0e:dd:06:a6:
                    d4:d7:79:17:ef:b6:63:8b:8c:cc:03:71:40:85:21:
                    85:ff:af:2c:59:e1:a5:3d:55:a7:1b:ff:69:88:31:
                    2f:b3:e9:d8:ca:28:31:d9:5b:75:cf:88:c3:f7:b0:
                    77:f4:6f:cd:06:9f:7c:a5:7f:90:0b:a8:56:c8:57:
                    7c:cd:ee:36:c7:33:eb:32:87:ed:d3:0a:e7:c6:e6:
                    79:8b:29:01:b8:24:77:12:80:c8:af:10:2c:9d:0d:
                    20:ed:e2:6a:11:ca:a8:aa:63:80:3c:ec:f1:db:b4:
                    b8:5f:93:53:5f:67:84:07:50:bf:08:5b:8f:4c:47:
                    a2:73:54:af:0c:ad:7a:fe:b6:ac:62:a5:b5:6e:8a:
                    b3:29:8d:c8:f9:65:cf:e6:ce:7c:39:ab:a8:9a:56:
                    71:c2:9c:26:08:34:27:65:ea:92:a7:a0:33:c9:f3:
                    82:e3:a1:d3:9a:74:32:b0:10:da:79:b7:85:0a:92:
                    a8:1c:6b:ae:9d:ec:15:99:9a:99:c9:41:fd:bf:df:
                    fd:2a:69:b3:79:5e:43:65:c7:f1:b3:0f:83:37:d6:
                    57:b1:7a:9e:3f:45:cf:dd:d7:51:9b:84:0e:9b:34:
                    a1:38:09:9b:98:7f:0c:d0:55:ac:6f:fc:bb:47:70:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:27:98:10:0B:6D:50:39:B5:96:10:BB:67:8D:89:60:50:0D:43:86
            X509v3 Authority Key Identifier:
                keyid:92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:45c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:61:4a:ab:c2:9d:e6:58:7a:aa:08:bb:cb:80:48:12:05:9f:
         01:fd:31:e7:32:0e:64:93:42:96:c5:02:05:e5:eb:c0:30:5a:
         60:b8:b8:07:a1:f6:de:9d:99:45:7f:bb:f6:1c:5f:7f:c6:75:
         ae:a1:b6:55:14:f6:04:00:26:dd:35:fd:45:5a:bb:18:75:23:
         74:19:47:c9:f2:7c:97:9d:5b:32:de:47:a2:c5:9b:92:de:c7:
         42:ed:3c:14:53:bb:a1:fa:9a:d9:11:66:56:8f:52:f7:75:92:
         6d:19:b6:3a:94:e0:bb:99:e5:43:db:3f:13:76:63:b4:14:70:
         33:ee:99:ed:09:29:e9:2d:fd:8e:d7:4d:d3:13:bc:2e:49:10:
         96:79:06:3e:49:09:e6:0a:48:1e:ba:34:51:9c:87:b7:0e:67:
         89:eb:a7:57:d2:d1:78:29:4d:88:53:7f:23:17:66:67:cd:27:
         0d:56:c6:24:e6:61:84:cf:0e:94:78:45:86:8f:78:db:b2:38:
         ec:0f:26:0a:6c:4c:40:3a:2b:72:4a:c8:88:d3:88:0c:0f:0f:
         8f:21:cb:e6:78:94:a8:64:d9:95:d8:4f:47:c4:70:71:9e:d8:
         43:9d:66:dd:55:02:08:54:c6:93:ea:a7:02:1e:f1:88:93:8c:
         b4:b6:45:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:05 2024 by rpki-client on console-fra.rpki-client.org