Route Origin Authorization

$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa
File:                     323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (raw, json)
Hash identifier:          09OKDOpfTbvkB18/I/ox/rKVyvN+rlunlfjUL43zZ7s=
Subject key identifier:   68:D8:99:2A:99:8D:21:A4:7C:99:3A:60:6B:15:BF:90:A1:E2:61:3D
Certificate issuer:       /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Certificate serial:       6021864BFE1475C1E12153EA8939C4B21A71B75D
Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject info access:      rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa
Signing time:             Wed 14 Jun 2023 15:18:58 +0000
ROA not before:           Wed 14 Jun 2023 15:13:58 +0000
ROA not after:            Wed 12 Jun 2024 15:18:58 +0000
asID:                     140938
IP address blocks:        2406:4440:e000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl
                          rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:21:86:4b:fe:14:75:c1:e1:21:53:ea:89:39:c4:b2:1a:71:b7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
        Validity
            Not Before: Jun 14 15:13:58 2023 GMT
            Not After : Jun 12 15:18:58 2024 GMT
        Subject: CN=68D8992A998D21A47C993A606B15BF90A1E2613D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:94:bd:f7:38:0d:d8:8e:64:b9:1a:54:e1:
                    ff:c7:f7:9f:4c:0e:5f:ef:6a:4a:ab:5a:e5:e1:aa:
                    f9:63:96:55:ba:20:4e:c0:c4:6a:2c:8d:35:98:be:
                    da:69:46:3b:9e:f5:09:43:a4:86:75:4d:5c:ef:42:
                    4c:1c:5f:01:cd:58:08:ab:af:4b:5f:ab:48:01:a3:
                    70:18:f9:8e:12:2c:70:91:30:59:48:16:bd:2b:cc:
                    24:fc:09:2e:c9:84:17:13:2e:18:8b:4b:69:57:c0:
                    d7:fa:a4:42:41:9c:ff:83:ba:8a:17:3d:56:13:3c:
                    cb:71:0c:c1:06:80:29:cd:cf:61:04:0d:3d:d1:ee:
                    62:76:88:ec:43:35:e2:12:f5:1f:bc:cf:f5:60:ae:
                    ca:0d:02:c0:36:b4:df:ef:4f:ff:ae:e5:b7:0f:ac:
                    40:bb:e1:e7:a6:94:ad:0c:25:d3:cc:bf:d0:3f:35:
                    29:9e:c2:f5:1a:57:d9:cb:43:8f:23:0a:4e:ae:01:
                    4a:03:95:e3:a2:f6:af:22:54:d9:3f:46:03:71:34:
                    6b:c9:6b:38:d1:87:d6:7b:65:ab:1c:ee:a2:77:48:
                    46:4c:e3:fa:01:15:2f:01:8f:73:c5:2b:06:e5:b0:
                    bd:37:17:21:10:8d:76:96:ca:64:13:77:39:1d:76:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D8:99:2A:99:8D:21:A4:7C:99:3A:60:6B:15:BF:90:A1:E2:61:3D
            X509v3 Authority Key Identifier:
                keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:4440:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:4e:f1:65:b4:5f:ad:ed:1b:2b:63:ec:ad:93:17:66:d8:1c:
         9c:21:f1:5a:c2:59:d5:89:53:c7:49:75:d7:05:0e:14:ac:62:
         c3:e0:0e:08:4e:25:4b:6b:35:ef:e1:ba:f0:54:cf:ec:20:ff:
         fb:85:a7:17:e5:dd:88:68:b8:2f:a9:87:22:ce:14:42:47:84:
         46:95:96:5a:bd:7d:c2:54:d8:b4:28:3d:b7:2e:a0:64:ab:b6:
         c2:89:45:2f:f6:a0:af:75:17:61:2f:3a:ff:05:44:37:60:47:
         1c:93:bb:d5:87:1e:91:2c:7c:73:3d:40:91:57:07:b4:b6:27:
         75:f1:0b:37:b7:69:6a:89:0e:25:93:65:14:f4:bc:32:80:6d:
         59:35:a5:12:04:13:43:bc:ad:2b:38:38:5c:41:48:ee:d0:e2:
         42:43:8e:a3:f5:53:88:23:07:9c:5f:8d:da:b1:bd:4b:83:8b:
         53:86:30:cd:c8:04:ed:47:eb:50:ca:7a:b8:e5:84:af:1a:b4:
         95:bf:be:5a:90:24:51:b8:f8:19:02:06:35:80:90:00:f9:4d:
         04:b7:b0:0b:29:b2:38:c1:38:6a:6c:22:52:64:05:2d:b8:fb:
         1d:f9:bf:ea:c4:0d:f2:08:36:14:0a:0b:33:37:ad:2a:d1:cf:
         13:55:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:57:45 2024 by rpki-client on console-fra.rpki-client.org