Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/323430333a613163303a3a2f33322d3332203d3e20313338303732.roa
File:                     323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (raw, json)
Hash identifier:          ySmHccwgVUo/Xec9y8NyZzFaqBKw2yi8gAIwJ6BUXGE=
Subject key identifier:   B0:4D:13:63:BE:07:B5:68:25:97:39:78:15:CC:71:41:6D:1D:B6:E5
Certificate issuer:       /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Certificate serial:       35F801E8C3667469A0C9AD03B2121386107DDC9D
Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/323430333a613163303a3a2f33322d3332203d3e20313338303732.roa
Signing time:             Wed 07 Aug 2024 05:00:00 +0000
ROA not before:           Wed 07 Aug 2024 04:55:00 +0000
ROA not after:            Wed 06 Aug 2025 05:00:00 +0000
asID:                     138072
IP address blocks:        2403:a1c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl
                          rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f8:01:e8:c3:66:74:69:a0:c9:ad:03:b2:12:13:86:10:7d:dc:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
        Validity
            Not Before: Aug  7 04:55:00 2024 GMT
            Not After : Aug  6 05:00:00 2025 GMT
        Subject: CN=B04D1363BE07B5682597397815CC71416D1DB6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:27:ab:4b:02:72:97:fa:64:91:c0:e6:b1:
                    d3:58:84:a9:41:25:1d:5b:7c:34:7a:01:9f:2d:3d:
                    88:83:24:49:d0:b3:d8:ed:07:36:d7:24:7a:1f:5e:
                    0a:16:83:1b:10:64:fd:6d:ff:10:00:ca:cb:85:58:
                    97:6f:01:a4:1e:4b:de:2f:a3:12:d4:cf:54:8e:d8:
                    fd:ef:c3:91:a0:e1:79:91:78:a6:a9:ab:70:13:0e:
                    9f:ee:77:55:bf:a1:6a:7c:6e:9c:6b:1d:ce:cb:a4:
                    e7:90:aa:f6:27:00:55:18:ee:c6:07:13:ad:e6:c4:
                    b6:e3:c5:0e:db:c6:4a:77:72:3c:2e:a4:76:23:ec:
                    7e:9a:af:e1:2e:b5:be:fa:7e:5a:c6:93:38:e9:fc:
                    c4:7d:f7:64:59:82:5b:78:fc:f2:29:72:1c:61:3b:
                    d0:19:da:99:70:ef:2c:06:71:e2:dd:dc:0b:ef:75:
                    a6:84:6c:6b:3e:e9:fd:59:ea:74:72:90:c3:f3:17:
                    31:99:04:6b:4a:ce:54:be:59:32:e0:b4:1b:30:4a:
                    c6:b4:2f:8a:87:cf:9f:3a:ae:66:05:d0:4c:70:59:
                    38:27:6d:fe:a7:bf:91:27:f7:17:f1:52:b3:7e:46:
                    31:ff:96:ca:37:ec:06:36:48:70:a9:d4:f5:2f:cb:
                    09:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4D:13:63:BE:07:B5:68:25:97:39:78:15:CC:71:41:6D:1D:B6:E5
            X509v3 Authority Key Identifier:
                keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/323430333a613163303a3a2f33322d3332203d3e20313338303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:2c:ef:b8:c4:31:3e:0a:ed:e8:0d:b8:0e:8c:a4:f6:68:85:
         d2:c0:b2:8d:17:04:0b:cf:53:5d:b4:df:0f:42:5c:f9:5a:fa:
         e2:05:7f:d3:b5:e2:bf:44:1e:8a:c4:82:99:90:e9:81:3a:53:
         2d:dd:e9:e3:67:33:ab:06:44:1f:57:ea:c5:6a:ca:e8:4d:d3:
         30:f8:9f:c6:94:97:c7:65:62:5d:24:74:48:cf:e9:29:7a:f0:
         78:00:fa:9a:77:6d:ca:5f:7b:1a:7d:ca:dc:76:fd:bd:d3:62:
         89:c6:ef:91:85:ab:36:20:41:16:76:03:c0:67:8a:f3:53:89:
         16:98:10:14:33:eb:96:51:82:50:32:ae:ad:3f:0c:4c:41:fe:
         55:88:97:f4:c2:d9:9d:aa:0c:93:af:b7:f3:c7:88:61:90:3d:
         8a:fc:91:89:ae:9a:89:10:ee:21:8b:cb:f0:8b:58:9c:e3:81:
         96:99:cc:66:a2:46:ea:fd:a2:fd:dc:fe:31:73:2b:52:55:46:
         9d:f2:7f:a7:3a:63:8a:43:8a:a4:7d:93:91:10:17:8f:9d:ab:
         43:c0:bb:d0:bf:e8:5d:ba:4b:42:31:14:83:7f:58:c4:10:32:
         4e:e6:43:1a:2a:f0:d3:bf:63:a9:a0:4d:34:08:1f:9a:51:c9:
         38:89:4f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:52:54 2024 by rpki-client on console-ams.rpki-client.org