Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33342d3438203d3e20313430343233.roa
File:                     323430363a323063303a343030303a3a2f33342d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          ThdV34dN2CAdL+XoPDSMdT/z3saNqrg7l0VQckLAvmU=
Subject key identifier:   E4:85:85:61:4B:4A:46:45:78:FE:AD:4F:87:AB:B8:5E:D4:4D:CB:E6
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       4DDCB95AD9C70B3C6866A4ABD760022A1C161AD9
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33342d3438203d3e20313430343233.roa
Signing time:             Sun 01 Oct 2023 06:00:01 +0000
ROA not before:           Sun 01 Oct 2023 05:55:01 +0000
ROA not after:            Sun 29 Sep 2024 06:00:01 +0000
asID:                     140423
IP address blocks:        2406:20c0:4000::/34 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
                          rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:dc:b9:5a:d9:c7:0b:3c:68:66:a4:ab:d7:60:02:2a:1c:16:1a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Oct  1 05:55:01 2023 GMT
            Not After : Sep 29 06:00:01 2024 GMT
        Subject: CN=E48585614B4A464578FEAD4F87ABB85ED44DCBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:0c:76:32:28:7e:5b:14:39:d7:b2:63:64:
                    ce:f9:d9:a1:d6:7b:b8:78:0e:bc:74:94:bc:1d:78:
                    6e:7d:be:fc:88:71:a3:28:87:8e:55:d9:23:3b:59:
                    d0:85:51:7b:4b:31:ce:74:46:6a:36:77:62:15:7c:
                    21:ac:fe:1d:ad:2e:84:19:04:c4:50:b4:46:2b:96:
                    ef:5c:66:5d:6e:60:a1:fc:0b:cd:43:38:e2:ff:28:
                    da:48:56:32:87:4c:a6:61:72:67:a3:1f:8f:3c:7a:
                    6a:51:c3:09:ae:9c:fd:a1:c9:c2:df:fc:4e:ae:8b:
                    e5:04:61:77:34:13:10:15:8e:c0:64:29:9e:de:89:
                    61:dd:ed:17:e3:29:6d:2d:d7:6d:af:6a:e2:67:f1:
                    1d:34:0b:7d:1f:bd:8d:24:09:ca:04:e1:24:52:a0:
                    d6:79:e6:e9:ea:88:be:42:2c:62:cc:95:73:6d:2e:
                    c0:b3:74:7d:d8:e5:b4:12:53:66:3c:a4:ec:32:c7:
                    f0:35:53:48:1e:5e:1a:a9:9f:9c:a8:2a:2b:27:1b:
                    34:10:ee:68:18:72:a6:92:7f:8c:47:cf:b9:f9:11:
                    89:7c:2a:11:97:30:a5:72:c5:89:56:cc:61:0a:29:
                    90:22:27:84:00:0b:74:0c:e6:03:f8:6d:7a:d6:18:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:85:85:61:4B:4A:46:45:78:FE:AD:4F:87:AB:B8:5E:D4:4D:CB:E6
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33342d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c3:df:40:e7:e1:2a:38:a6:87:af:e6:fa:3d:e7:46:bc:58:b0:
         9c:e8:ca:2f:77:01:d3:d7:39:ab:77:05:70:89:a8:f4:f8:eb:
         76:43:93:46:6f:58:80:88:d9:dd:1c:54:7c:a8:63:3e:67:3e:
         5b:87:85:c0:85:31:fd:ed:1d:32:91:0e:a8:97:1a:87:76:92:
         6b:aa:9b:33:11:23:63:38:44:c6:48:91:37:78:a1:fd:93:d4:
         e5:e1:0d:ec:39:b8:10:70:25:28:c4:c0:ab:01:7a:13:ae:ae:
         ad:6a:88:6d:72:dc:2c:08:66:2b:0d:53:bb:70:f5:f3:6a:22:
         85:3b:ec:97:df:40:d6:8a:20:a1:17:1b:cd:79:cf:f9:01:6c:
         1f:fd:2e:a4:dd:7b:46:fb:8e:fe:73:cc:ed:37:d2:af:b0:0d:
         1c:11:b8:87:11:ce:92:a7:ee:ae:53:17:51:e5:9d:8f:6b:80:
         b5:29:21:3c:6d:be:f8:cc:40:76:0c:58:ac:13:0f:b8:d7:49:
         4d:ea:cc:3c:a6:a3:26:4a:dd:38:d7:84:51:de:a9:d8:65:35:
         e1:a8:09:5b:4a:3a:5d:28:84:0a:7c:98:c0:b5:ad:13:ef:81:
         05:a8:7c:ec:9a:aa:a4:e6:00:4d:d2:eb:2c:5a:36:ae:29:52:
         16:b4:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:20:24 2024 by rpki-client on console-ams.rpki-client.org