Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa
File:                     323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          rMM6y9NBLcit/FuOeBpeKKZ1lhpFd6zVrMNNAoJeBUg=
Subject key identifier:   46:57:35:C6:1F:1E:95:5A:8C:DD:A9:4E:C2:96:E6:CE:87:41:48:4B
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       0EBD5180E9EE04AF3DFB3669AFB7BE415A01CF0C
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa
Signing time:             Fri 09 Feb 2024 11:07:37 +0000
ROA not before:           Fri 09 Feb 2024 11:02:37 +0000
ROA not after:            Fri 07 Feb 2025 11:07:37 +0000
asID:                     140423
IP address blocks:        2406:20c0:7000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
                          rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 04:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bd:51:80:e9:ee:04:af:3d:fb:36:69:af:b7:be:41:5a:01:cf:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Feb  9 11:02:37 2024 GMT
            Not After : Feb  7 11:07:37 2025 GMT
        Subject: CN=465735C61F1E955A8CDDA94EC296E6CE8741484B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:08:3a:ef:7a:1e:a5:42:21:2a:9e:90:84:
                    af:c3:82:5e:ae:6b:57:f5:8e:98:2b:99:d8:1f:b0:
                    fd:69:3f:8e:56:7a:76:86:ad:89:c2:61:0b:49:6c:
                    8c:3c:29:92:62:d3:de:9b:ea:0f:97:3e:e2:aa:1e:
                    de:2f:b2:52:f7:52:31:68:61:af:60:3e:35:cd:72:
                    cb:8e:4d:77:b5:71:7a:d2:00:cf:6a:74:d7:71:e9:
                    b1:3e:8d:44:85:03:b4:3c:c8:93:dd:3f:aa:a0:5c:
                    ce:83:57:97:fb:cb:56:eb:f3:18:58:fa:fa:ec:2d:
                    7e:d9:f2:71:eb:8d:32:2f:3a:42:40:bf:3a:3c:7d:
                    0e:10:3a:53:3f:2c:66:33:e3:cf:e4:f9:65:ec:52:
                    8a:0e:9a:d6:76:75:73:84:2e:24:47:ab:d3:63:db:
                    bd:ec:8d:b1:07:ea:c4:aa:3a:2c:16:59:0a:c1:e2:
                    90:37:0f:a0:c0:db:6d:18:26:67:d7:aa:41:f6:b4:
                    76:07:7d:73:c9:5a:3e:52:91:58:53:33:5c:08:0c:
                    54:6a:66:65:d7:88:3c:de:85:1f:fb:03:91:a6:4e:
                    ad:1b:a9:f0:9b:00:cf:3b:e5:4c:7c:98:78:66:03:
                    3d:97:bd:41:a7:67:2c:22:87:b6:97:68:74:82:d3:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:57:35:C6:1F:1E:95:5A:8C:DD:A9:4E:C2:96:E6:CE:87:41:48:4B
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         cd:ce:62:fc:68:7c:f6:ea:3a:37:2e:1c:d5:e4:81:39:c4:f9:
         4c:e2:bb:6f:42:0c:17:fd:5f:6b:79:15:77:d1:d0:b3:a6:f1:
         9f:7b:3c:1d:95:22:1c:05:2e:70:9f:40:5b:b8:89:35:76:ff:
         c5:4e:e2:8c:6b:11:25:a1:de:1a:f1:4b:bb:c3:b4:8f:4e:50:
         93:e9:04:22:3e:6f:cd:d9:be:da:de:61:01:ae:7e:fd:c6:7a:
         9a:e3:51:23:3b:21:c7:a3:3e:93:98:e7:c4:c7:9d:e7:b0:c5:
         24:34:67:3a:82:8e:e2:74:cd:5d:a2:2e:b2:81:3c:b3:4f:ad:
         64:cb:8d:52:86:65:ae:77:61:2f:77:2b:ea:7f:01:73:b0:c8:
         2c:dd:69:cb:b9:70:0c:15:cf:4a:20:ae:4c:3d:b1:c6:72:39:
         b7:37:29:d4:58:36:e9:b2:c9:a3:01:b9:aa:32:98:af:29:7d:
         fe:65:4e:77:2f:14:85:75:90:3a:eb:b8:d3:1a:09:59:73:27:
         a2:6c:0a:f5:03:c5:38:8b:b8:13:ff:7e:7b:78:7c:0c:e0:1d:
         93:0f:8d:34:0d:a7:22:f8:74:af:42:38:ae:fe:39:7e:2a:0c:
         ff:cc:b9:6c:35:8b:c5:fd:67:b3:57:eb:3d:65:24:94:3b:54:
         62:55:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:01 2024 by rpki-client on console-ams.rpki-client.org