Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa
File:                     323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier:          slIkEiUrfVdQTgy47FMOYVOHqTBQNDj2VJ9fRiD7UhE=
Subject key identifier:   F8:AD:A2:82:A4:47:87:B3:88:8E:17:07:6C:4B:12:61:9D:AF:C7:83
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       55BB06C135F082E6E86B7598E4CDC0EB7FCEFAD4
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa
Signing time:             Fri 05 Jan 2024 11:02:41 +0000
ROA not before:           Fri 05 Jan 2024 10:57:41 +0000
ROA not after:            Fri 03 Jan 2025 11:02:41 +0000
asID:                     58369
IP address blocks:        2403:fd80:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bb:06:c1:35:f0:82:e6:e8:6b:75:98:e4:cd:c0:eb:7f:ce:fa:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jan  5 10:57:41 2024 GMT
            Not After : Jan  3 11:02:41 2025 GMT
        Subject: CN=F8ADA282A44787B3888E17076C4B12619DAFC783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:7d:2a:dd:70:e7:c2:ec:97:cb:5a:25:84:
                    d0:7f:29:23:47:c4:40:d4:74:f0:a8:e7:2e:ef:11:
                    ea:b7:2b:98:91:43:95:47:26:34:a1:4e:6c:40:95:
                    97:5e:38:bf:aa:9c:6e:65:6f:49:02:37:cd:76:66:
                    a5:cd:2b:37:49:b9:ad:cb:17:15:59:cb:e1:4a:3d:
                    dd:32:6b:5c:af:8c:bf:21:9d:17:74:e5:5a:be:cd:
                    3d:c2:05:55:9e:0b:9f:ac:d4:1c:c6:cb:9a:e4:7e:
                    27:be:98:38:e5:90:a0:d0:4e:9d:61:e4:80:d6:7c:
                    00:af:b0:23:38:04:8f:96:4f:d6:e0:10:50:7b:58:
                    02:8b:69:bb:bb:05:b9:7a:78:25:85:50:3f:9b:2a:
                    51:c2:19:71:83:16:80:d8:b9:01:3d:3a:18:65:18:
                    d4:e1:45:f5:15:cd:f4:d9:bc:06:48:97:91:d1:57:
                    e1:ce:0f:f4:39:80:87:7e:06:61:88:7d:aa:47:08:
                    be:fe:06:06:d7:00:cd:61:6f:4d:47:7f:d1:64:85:
                    93:8f:d7:47:dd:6a:a4:61:8e:b5:80:45:eb:fb:82:
                    a2:f2:04:d6:8a:24:9e:87:15:88:ab:21:e2:de:e2:
                    b5:ad:5d:36:e8:84:3c:2f:8f:42:0b:ce:9f:37:8c:
                    11:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AD:A2:82:A4:47:87:B3:88:8E:17:07:6C:4B:12:61:9D:AF:C7:83
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fd80:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         54:27:2c:fe:47:c0:84:4b:1e:0b:a2:74:a4:c4:01:25:73:84:
         7e:dc:86:1f:97:06:5f:d8:91:07:db:3d:db:ba:c1:d0:be:14:
         91:a6:ac:59:cb:95:e1:40:7e:5b:de:5d:78:b0:e8:61:de:13:
         35:5b:89:35:ea:a0:09:3b:56:46:9b:cc:6d:bb:ba:4f:50:03:
         d3:40:36:c0:3a:dd:79:8f:56:9f:82:79:37:06:f7:b0:b8:73:
         78:c5:07:1c:59:af:93:c8:3c:fb:1e:07:23:72:30:99:15:8f:
         88:f2:79:84:ec:6a:c5:d3:2d:b8:35:36:95:55:8b:33:bf:01:
         75:5b:4b:4a:60:91:99:5b:3b:2e:7d:7b:e1:98:0a:06:f8:1c:
         14:94:3e:1b:c0:66:0d:47:88:c2:07:86:7e:35:94:3e:7b:cb:
         04:8b:9f:d6:10:6c:3e:07:ed:09:fa:bb:4e:0a:63:44:07:9d:
         7b:48:38:4e:de:21:60:c3:3e:2e:fe:81:db:e5:2a:11:90:42:
         33:e8:41:32:aa:12:f2:a9:56:e9:7e:ba:f0:07:ac:0c:19:52:
         03:c1:87:ca:e3:74:2d:d7:b3:89:95:89:5c:ff:2a:3a:7e:b6:
         bd:8b:40:9c:db:6a:69:1d:20:69:4a:4e:77:2e:08:a7:70:da:
         a9:d7:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org