Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33352d3438203d3e20313430343233.roa
File:                     323430363a323063303a383030303a3a2f33352d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          MwtcSh7Ju6Ccq2Ng/mvtq7xpunXPXSG/i8eSzF0noY0=
Subject key identifier:   F6:7B:D2:E3:50:7B:FC:79:B1:C5:9D:0E:A6:7F:77:78:12:87:61:E6
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       02FFF89356FC034219A0AA097CD72EA44C2C4902
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33352d3438203d3e20313430343233.roa
Signing time:             Sun 01 Sep 2024 07:00:00 +0000
ROA not before:           Sun 01 Sep 2024 06:55:00 +0000
ROA not after:            Sun 31 Aug 2025 07:00:00 +0000
asID:                     140423
IP address blocks:        2406:20c0:8000::/35 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
                          rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ff:f8:93:56:fc:03:42:19:a0:aa:09:7c:d7:2e:a4:4c:2c:49:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  1 06:55:00 2024 GMT
            Not After : Aug 31 07:00:00 2025 GMT
        Subject: CN=F67BD2E3507BFC79B1C59D0EA67F7778128761E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c9:73:c0:98:4e:7f:9e:8b:4b:7b:29:b7:4b:
                    ee:3b:e1:1a:49:1d:ea:13:46:da:fb:c5:ef:15:4e:
                    87:b9:ee:15:e1:e9:0b:4c:24:1e:e6:57:9d:07:73:
                    57:c2:00:89:38:8a:3c:a9:1b:cf:b2:ad:d3:4b:42:
                    8a:37:0b:14:d2:a1:56:cf:1e:44:f8:0f:d6:74:ca:
                    b0:53:28:2c:c6:08:78:00:19:84:0e:01:22:15:66:
                    cf:e8:fc:ef:0f:23:c3:72:8d:e2:4b:36:11:65:5a:
                    b3:36:d8:45:30:08:45:b0:cb:f3:a5:f7:2d:6d:ba:
                    c8:2a:ca:ab:77:30:d8:f5:22:2d:42:99:18:65:f4:
                    46:4a:70:f4:c8:ae:ea:76:0e:b9:5b:73:6c:0f:cb:
                    6e:be:54:0d:2d:a1:26:93:f5:9b:b1:71:ff:6d:01:
                    7f:7b:d5:37:41:eb:a0:b5:64:1f:15:5c:f5:24:1e:
                    fd:6f:8e:39:fb:71:f0:f3:ba:23:61:98:a5:53:07:
                    b4:c3:63:66:4f:74:a1:a8:1c:08:fd:af:26:f5:44:
                    1c:96:5c:91:ba:de:a0:78:31:7d:12:c4:e9:e1:44:
                    ce:66:fb:a3:50:1d:d7:b4:2e:24:19:b7:64:14:48:
                    f9:8d:5f:69:53:63:bc:89:b5:28:3b:f8:0b:80:80:
                    bd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7B:D2:E3:50:7B:FC:79:B1:C5:9D:0E:A6:7F:77:78:12:87:61:E6
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33352d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         ca:8c:f2:40:f0:fd:2b:06:0d:6c:17:08:5d:48:99:93:0b:bd:
         41:02:6e:f7:e8:e0:dd:69:1c:77:1d:34:9b:ed:15:8c:c6:f7:
         9a:8a:26:bf:9d:29:67:01:8f:ff:8c:02:85:6c:c8:32:d6:f2:
         51:8f:b9:b7:df:c7:29:8b:45:00:1a:4c:c4:b8:45:17:e9:e9:
         53:d4:bf:8b:f6:8a:6b:18:2d:a9:3f:39:83:f5:98:e2:fb:80:
         f3:94:82:c1:40:c6:84:89:f2:42:8f:a8:07:9f:2a:04:27:a9:
         6c:7e:1e:26:87:ff:2c:4b:18:ff:f6:e6:ab:7c:9d:3d:2b:36:
         9d:98:bd:9a:1d:78:f7:2b:0f:24:dd:c4:81:1e:2f:d3:2d:be:
         ce:6b:f6:d8:d6:5d:18:65:45:fc:b8:2f:dc:7d:a6:43:25:fc:
         74:68:6e:ea:f8:39:44:8a:08:75:ae:17:d7:90:ef:fb:b3:35:
         ac:7d:1a:94:c3:6c:fd:77:f2:be:66:7b:c1:b2:5e:95:ee:3c:
         91:93:3b:30:b7:10:7c:f7:a2:90:6d:bb:04:b7:6e:d7:c8:d8:
         d0:91:26:d8:e8:38:22:7f:33:dc:01:6c:65:d4:55:e8:ee:6a:
         5e:72:32:13:79:76:0a:bb:bd:98:76:39:5c:c8:6a:f1:26:0b:
         10:6a:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:20:40 2024 by rpki-client on console-fra.rpki-client.org