Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          ZnOfX0/JLe1pHK2c2TCV4230IxGsVuFxTOHSEh0ZsFQ=
Subject key identifier:   40:21:9E:25:CD:B9:30:A4:A0:C3:06:2C:BD:16:2B:6B:DC:E5:B4:18
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       49B8A24E7D4D586D28E8D06D15E8548A9BC6AF8C
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 02 Jun 2024 14:00:02 +0000
ROA not before:           Sun 02 Jun 2024 13:55:02 +0000
ROA not after:            Sun 01 Jun 2025 14:00:02 +0000
asID:                     140413
IP address blocks:        2406:13c0:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b8:a2:4e:7d:4d:58:6d:28:e8:d0:6d:15:e8:54:8a:9b:c6:af:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Jun  2 13:55:02 2024 GMT
            Not After : Jun  1 14:00:02 2025 GMT
        Subject: CN=40219E25CDB930A4A0C3062CBD162B6BDCE5B418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:4e:60:d6:14:ee:35:41:7b:d2:8d:23:73:
                    c7:23:b1:52:ac:dd:ce:e6:f2:9d:98:cb:56:c1:42:
                    58:86:96:65:38:66:0e:c3:e1:e5:d1:f0:bc:f0:09:
                    12:bb:20:56:9a:86:44:be:6b:2e:03:68:64:39:97:
                    5e:a8:05:c2:3d:4e:43:22:10:c3:87:09:c4:54:61:
                    a8:e2:f9:be:4e:1f:a9:81:07:d6:41:ae:9a:5c:af:
                    56:63:db:94:06:94:c8:45:3b:aa:e1:a8:04:6f:bb:
                    95:29:35:5c:14:e8:c4:f2:f5:3a:30:2b:da:6e:14:
                    b9:2c:5b:46:dc:b0:1e:b6:e6:d9:b5:64:da:5e:6f:
                    02:55:0c:23:47:f5:5e:0d:2d:53:14:05:31:f1:ac:
                    b9:2f:e3:e8:fe:e4:e1:7d:eb:72:c5:88:53:12:7a:
                    ff:3e:42:1d:f5:fa:2b:bb:19:54:c5:c7:87:53:1a:
                    07:9f:ba:de:bf:23:3e:f6:16:90:a4:a2:c5:76:79:
                    38:86:66:ff:87:3f:c9:34:6e:29:13:d4:5c:75:be:
                    94:4a:64:86:84:e7:3a:0f:79:46:b4:3b:af:d8:c8:
                    dd:b5:20:2f:19:83:a1:9d:19:13:1b:a0:7b:44:3d:
                    79:27:53:63:84:a0:b0:26:43:d3:bd:ad:5b:06:2d:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:21:9E:25:CD:B9:30:A4:A0:C3:06:2C:BD:16:2B:6B:DC:E5:B4:18
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:02:d3:db:8a:d9:36:cb:0f:4e:eb:a5:0e:8e:6f:72:45:ef:
         09:e8:4f:95:4a:1e:bd:35:27:58:99:65:d6:07:b4:a3:8b:45:
         f4:9d:fb:5b:af:cf:40:65:c0:1f:9e:97:95:19:57:38:69:dd:
         d7:a9:ee:b5:f3:6b:3d:ec:ee:15:a8:59:e6:6d:2c:45:aa:14:
         14:bb:74:52:5b:90:c5:da:98:51:19:b7:e8:57:4a:e7:b4:9b:
         31:7a:6e:27:54:76:1f:82:6c:73:97:28:b6:39:4f:a1:60:6d:
         14:f5:06:4f:80:f7:91:74:dd:63:df:35:05:19:f0:01:27:c1:
         a4:ab:40:66:c2:b5:8e:bf:cd:5c:ab:54:98:56:58:ef:fb:e8:
         01:6f:d2:88:23:d7:16:8b:42:3e:47:b4:7f:2a:34:b8:88:00:
         5e:14:26:37:85:4f:f4:49:04:10:bb:86:f8:60:3c:d3:6b:fa:
         73:b7:a1:5d:a3:ed:40:ab:9f:2d:da:67:59:b0:a1:ef:d0:a8:
         4f:be:39:3e:c1:26:85:8d:24:24:23:5c:b8:35:98:f1:d9:6f:
         bc:8d:fb:3e:f3:6a:f8:bd:e9:83:23:b1:02:37:0b:b8:1c:c6:
         eb:a1:58:fd:c7:e3:59:35:52:54:24:29:71:a3:28:e5:a8:ac:
         0b:74:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:28 2024 by rpki-client on console-fra.rpki-client.org