Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          aRQHSyGAj3CNCLLgmO+K+8j8019e/JVCLdhOf+ZEaB4=
Subject key identifier:   0E:25:28:A6:EA:68:4A:13:89:15:71:1A:B2:A0:11:DA:CD:24:CF:89
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       7D753FDD11EB723F6B3F7955F59D5C53EFB866A1
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 02 Jun 2024 14:00:01 +0000
ROA not before:           Sun 02 Jun 2024 13:55:01 +0000
ROA not after:            Sun 01 Jun 2025 14:00:01 +0000
asID:                     140413
IP address blocks:        2406:13c0:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:75:3f:dd:11:eb:72:3f:6b:3f:79:55:f5:9d:5c:53:ef:b8:66:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Jun  2 13:55:01 2024 GMT
            Not After : Jun  1 14:00:01 2025 GMT
        Subject: CN=0E2528A6EA684A138915711AB2A011DACD24CF89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:e1:1f:a7:09:3c:ad:48:82:d2:51:02:2b:
                    35:21:43:b7:5e:e1:a3:2c:e6:b1:bd:10:87:af:76:
                    d1:34:f7:b5:76:b1:ba:0f:d0:6f:97:84:72:dc:99:
                    84:e0:e2:72:c8:7f:87:71:d0:ec:56:e0:51:8a:69:
                    a6:67:a8:fe:e5:d4:cb:21:dd:6a:65:8b:b0:95:5a:
                    fc:04:d5:cb:a9:7b:3f:f4:2e:9a:91:3f:18:0a:e0:
                    ad:c9:fd:0d:3c:4f:17:18:77:0f:9a:91:07:6f:0e:
                    19:2f:44:42:77:e1:d0:f4:6f:ba:46:f6:ae:cb:82:
                    ad:4f:df:e2:d1:00:9e:6c:27:bd:e1:64:f5:1f:14:
                    12:8f:bd:03:e1:c3:aa:12:05:9c:a2:9a:57:9d:45:
                    4f:30:25:64:ab:c5:c0:3f:6c:ab:ac:ef:cc:db:04:
                    f3:f7:a2:1b:73:aa:63:17:2d:33:b3:18:bb:e9:97:
                    07:e0:d7:42:10:e9:13:2d:6e:78:44:4b:69:ed:48:
                    f8:6b:c7:b2:32:c7:90:fb:46:ed:67:9e:0e:f9:d3:
                    ff:58:ed:14:1d:6b:75:5c:81:71:16:fb:17:86:85:
                    fb:af:49:88:c5:7e:d9:b6:1c:64:c3:46:5c:07:68:
                    3f:4c:60:e0:9f:9c:c9:7c:e9:31:2b:92:55:94:d1:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:25:28:A6:EA:68:4A:13:89:15:71:1A:B2:A0:11:DA:CD:24:CF:89
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:6f:c3:42:d5:c4:3b:db:16:02:18:1d:b1:7e:b9:00:b3:a4:
         86:08:0c:a9:26:4e:94:58:07:cc:ff:0a:f1:69:27:0f:fb:fc:
         fc:75:99:6f:19:ff:25:76:a0:62:a5:8e:05:b3:50:76:e0:bc:
         ed:cb:3a:91:74:ba:52:b6:95:50:5d:69:af:1f:32:c6:b9:fd:
         9b:99:77:4e:14:a1:77:2f:e8:86:58:ab:34:41:79:06:2f:6a:
         78:9b:0f:f4:94:b6:d1:9c:6d:2a:d8:1b:bc:37:16:f1:b1:04:
         0b:64:14:5f:05:26:89:71:54:af:32:51:b1:a4:67:f2:51:e9:
         b3:a4:44:0f:a2:22:d6:19:a2:8b:f4:75:60:84:66:2e:ab:36:
         a3:a2:71:6c:92:ee:64:bb:20:a9:2c:26:dc:3d:1a:3b:80:c6:
         a5:12:af:3d:9b:18:21:e7:92:1e:ca:03:47:6c:c4:77:ed:17:
         11:38:e0:a1:a4:87:ac:9d:9f:f0:cc:41:3f:b4:96:42:27:49:
         2d:bc:42:69:1e:b9:ca:07:e5:31:cf:9b:fd:98:d8:67:a9:4c:
         3d:db:ef:82:7d:01:cf:54:b0:b0:15:bd:41:e4:de:90:cd:89:
         05:36:53:96:e8:cc:5e:a2:96:43:19:78:d0:9d:b4:c0:cd:75:
         22:e1:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org