Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a3a2f33332d3438203d3e203634333030.roa
File:                     323430363a343563303a3a2f33332d3438203d3e203634333030.roa (raw, json)
Hash identifier:          Gksq4bFxwejHRvPU83weT05ieYZjKKCGWL7Notb/BZU=
Subject key identifier:   E9:A6:3C:27:0E:3E:B0:9B:D9:3E:10:6B:BA:C0:01:AC:F8:6C:5D:D6
Certificate issuer:       /CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
Certificate serial:       3AE9A59519615FA4B7D65B06739443B781270F2B
Authority key identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a3a2f33332d3438203d3e203634333030.roa
Signing time:             Mon 31 Jul 2023 00:08:16 +0000
ROA not before:           Mon 31 Jul 2023 00:03:16 +0000
ROA not after:            Mon 29 Jul 2024 00:08:16 +0000
asID:                     64300
IP address blocks:        2406:45c0::/33 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl
                          rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e9:a5:95:19:61:5f:a4:b7:d6:5b:06:73:94:43:b7:81:27:0f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
        Validity
            Not Before: Jul 31 00:03:16 2023 GMT
            Not After : Jul 29 00:08:16 2024 GMT
        Subject: CN=E9A63C270E3EB09BD93E106BBAC001ACF86C5DD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:9a:2b:2f:07:da:98:a4:27:c4:47:87:35:
                    8c:ae:58:b7:ee:8d:27:d3:f8:df:88:fe:de:5e:a5:
                    ef:ab:78:f3:3a:95:1f:00:97:ce:d4:16:48:0d:57:
                    11:5a:d1:d1:db:2c:53:6d:dd:4f:32:05:4c:95:60:
                    ed:3f:60:4c:c5:4d:0b:c6:f8:0a:a1:b3:e5:89:f5:
                    36:91:39:b0:01:be:25:df:14:07:e8:55:45:6e:ed:
                    75:fe:bf:56:f1:f3:ca:a2:25:e3:3f:87:e4:3f:ff:
                    2a:9b:f4:0d:b1:db:58:d0:5b:ae:3c:a7:f9:30:cb:
                    34:72:1e:99:27:c5:95:a4:06:9b:02:8b:c1:16:48:
                    9d:0c:c6:90:15:ce:50:34:98:f2:f0:c2:93:08:97:
                    4e:4f:aa:e4:ff:89:59:ba:6d:be:82:19:5a:fa:62:
                    9a:be:5a:38:ad:95:2b:72:ce:8c:0e:f7:25:49:30:
                    f1:c4:32:b2:17:a1:5f:70:ee:0a:6c:99:62:b7:06:
                    2b:f8:68:d6:0a:12:4a:0a:c9:96:ff:b4:c0:b0:31:
                    27:38:1e:f9:3d:11:c7:ea:1e:a8:c4:56:cb:21:4a:
                    20:52:5e:5d:9b:d9:da:cc:19:56:71:6e:91:47:24:
                    c5:88:1f:55:7e:41:e5:e3:8a:11:42:f6:3c:f5:c3:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A6:3C:27:0E:3E:B0:9B:D9:3E:10:6B:BA:C0:01:AC:F8:6C:5D:D6
            X509v3 Authority Key Identifier:
                keyid:92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a3a2f33332d3438203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:45c0::/33

    Signature Algorithm: sha256WithRSAEncryption
         90:73:f2:4c:bf:5e:61:f5:a5:5d:11:47:40:5d:8b:28:eb:05:
         3c:6f:17:ad:5b:d6:8e:74:ae:df:5a:ac:d7:84:cb:40:a5:48:
         51:5a:42:f6:aa:e8:83:b9:19:4c:36:c6:43:73:53:18:5d:f3:
         43:de:16:78:05:e3:a3:ff:84:bb:00:5a:ca:1a:5e:d1:49:6e:
         2a:56:64:b4:02:b5:d6:7c:76:6d:00:0c:15:01:23:60:08:5b:
         7e:8f:8a:a9:79:87:91:c1:7c:65:8c:ed:ba:f2:b1:83:6e:c4:
         9a:f5:e0:58:c1:12:d4:55:af:00:0b:20:02:df:24:d8:96:76:
         23:1f:05:59:1c:7f:24:00:c8:f6:3e:16:2c:41:25:3b:bd:a8:
         c2:33:bc:57:93:ee:1c:59:05:3a:09:f9:79:c5:97:25:b7:6f:
         7d:6a:36:86:dd:77:9c:df:c2:0c:13:93:a9:e1:1f:fd:2b:3d:
         79:15:76:6e:2d:31:94:13:80:8a:7d:c9:44:51:75:b7:ba:7f:
         79:78:b4:10:d9:d5:0d:31:27:16:7f:83:9b:b9:65:ae:48:9d:
         75:91:f2:f9:de:0b:18:29:31:27:4c:2f:ee:8f:52:63:ae:e7:
         34:6f:0f:5f:64:14:2e:4d:b8:28:30:2f:97:c8:e8:55:2a:a0:
         60:b5:cd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:55:15 2024 by rpki-client on console-ams.rpki-client.org