Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33352d3438203d3e20313430343233.roa
File:                     323430363a323063303a323030303a3a2f33352d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          UHwzHM8VieuSn/z3WasMW9vxDo/GMROgtQSGMA3dKok=
Subject key identifier:   79:E0:90:62:1C:CA:25:FE:1C:9B:AF:7B:41:83:FF:C1:A6:21:60:6D
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       0DCA0835262CEC7AC5335AD33CA86C61294BCE93
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33352d3438203d3e20313430343233.roa
Signing time:             Sun 01 Oct 2023 06:00:01 +0000
ROA not before:           Sun 01 Oct 2023 05:55:01 +0000
ROA not after:            Sun 29 Sep 2024 06:00:01 +0000
asID:                     140423
IP address blocks:        2406:20c0:2000::/35 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
                          rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 06:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ca:08:35:26:2c:ec:7a:c5:33:5a:d3:3c:a8:6c:61:29:4b:ce:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Oct  1 05:55:01 2023 GMT
            Not After : Sep 29 06:00:01 2024 GMT
        Subject: CN=79E090621CCA25FE1C9BAF7B4183FFC1A621606D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d5:fd:80:d7:31:46:8d:26:dc:f1:6f:43:da:
                    23:51:e9:99:af:9f:f4:aa:93:b3:d2:82:2a:49:0c:
                    7b:8e:06:36:07:62:ec:0c:d8:0c:76:d6:ec:b4:9c:
                    9d:45:25:7b:d5:fb:59:e8:5d:d4:61:e6:da:bb:68:
                    9d:45:3a:ff:81:ae:a9:1e:e9:12:8c:25:70:c9:04:
                    f9:07:45:8b:78:d2:d4:98:f1:00:4c:71:17:44:62:
                    21:4b:eb:d7:87:48:95:f8:43:38:45:f2:d2:64:7f:
                    23:d2:8c:68:ba:e3:ca:1c:54:97:73:7c:4e:b7:e6:
                    e4:6a:c0:4f:50:0c:64:11:69:9c:14:27:db:7b:1c:
                    f1:46:c1:9b:d9:a1:55:29:c5:f1:91:a5:28:3f:0e:
                    e1:8e:e3:61:94:fe:99:ad:f5:19:c4:ed:ee:80:d8:
                    4d:c3:d0:90:67:da:14:f2:ab:c6:bf:79:c0:3b:8b:
                    88:3a:c1:67:18:5d:bf:6f:5c:93:b6:9d:d6:63:33:
                    1d:3f:bb:d3:7f:5a:68:1f:6a:cf:83:69:0a:ed:24:
                    60:07:7f:7c:1f:02:0b:08:37:21:18:d9:cf:47:61:
                    92:05:08:dd:13:fc:bc:1f:29:db:bd:2c:d6:29:66:
                    d6:b3:37:2e:75:7b:63:e9:7e:7c:26:16:ae:50:0e:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E0:90:62:1C:CA:25:FE:1C:9B:AF:7B:41:83:FF:C1:A6:21:60:6D
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33352d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1c:da:1c:15:00:78:5f:05:01:a3:c6:b5:ec:a4:02:cb:6b:ea:
         e5:8e:cd:9c:1f:2e:e6:38:39:6f:a2:af:0f:1c:ad:f1:16:90:
         96:c6:59:c9:5e:25:42:d2:a4:d1:c1:43:ca:09:37:c5:a7:19:
         67:d7:f7:66:62:19:57:7c:eb:3e:ad:de:78:58:55:22:8e:e7:
         4c:ad:89:f7:7e:3b:f1:90:71:72:8b:12:4c:fb:3d:6d:49:2b:
         c6:8e:64:7d:87:04:d4:84:9c:d0:e7:ea:78:29:e6:69:ff:7b:
         ae:9e:f3:33:a5:92:03:e0:fa:cd:fa:9e:84:24:d0:bd:73:7d:
         e0:b7:87:11:d7:33:52:b3:79:c7:0e:69:80:1d:0e:2c:e1:25:
         fc:22:c6:03:52:64:d5:0c:69:14:c9:9c:12:33:23:39:cf:fd:
         fd:46:d3:5a:80:8c:32:66:64:f9:b1:b3:9d:d7:89:0a:65:8e:
         a1:5c:33:d2:a2:25:94:6e:7a:b4:63:71:db:17:c3:f5:75:f8:
         dd:8f:61:e1:e4:5f:87:90:bf:75:f4:ec:3d:25:e2:e4:de:2b:
         3a:11:f6:ec:ff:18:49:f1:9f:87:2c:66:e1:9d:3f:9c:66:90:
         29:c1:a2:3e:52:27:72:8a:71:14:dd:e2:30:43:7d:fc:5e:51:
         12:92:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:48:04 2024 by rpki-client on console-ams.rpki-client.org