Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          hALiMk/NpC8SZtYgUN9Ak/MUbnTLPqoDF3/3BwiN714=
Subject key identifier:   60:03:46:61:8B:9F:77:1A:CE:52:42:2C:AA:62:00:F7:F6:18:EF:6A
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       04DCEE452B8E783FD644FB592C60D615BB8179F5
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 02 Jul 2023 13:53:47 +0000
ROA not before:           Sun 02 Jul 2023 13:48:47 +0000
ROA not after:            Sun 30 Jun 2024 13:53:47 +0000
asID:                     140413
IP address blocks:        2406:13c0:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 22:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:dc:ee:45:2b:8e:78:3f:d6:44:fb:59:2c:60:d6:15:bb:81:79:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Jul  2 13:48:47 2023 GMT
            Not After : Jun 30 13:53:47 2024 GMT
        Subject: CN=600346618B9F771ACE52422CAA6200F7F618EF6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:d8:2c:29:2a:62:e7:ee:3b:5f:6d:07:cf:
                    37:25:49:fa:de:f6:90:91:98:6a:e1:1b:26:04:44:
                    64:f9:c1:2c:04:0a:0c:39:c4:69:45:6e:d6:1d:fc:
                    dd:06:69:4f:e7:a8:ed:53:07:74:22:2a:fc:03:27:
                    02:2a:a9:2d:d3:f7:e6:b7:6a:af:ab:12:88:ca:04:
                    cb:ab:76:59:1f:d3:a4:00:fe:7b:c1:e9:a6:80:7f:
                    16:bb:d0:cc:75:21:a5:1b:aa:83:3b:a5:9d:47:d2:
                    9b:3c:00:e0:47:8a:47:2f:12:7e:2c:65:34:45:09:
                    99:c0:09:46:96:7d:6b:3a:26:85:b0:2b:92:55:0d:
                    df:00:6b:c6:2a:79:7f:d7:89:11:8b:94:db:09:f5:
                    95:18:0f:88:7d:79:ed:66:55:71:0c:2e:2f:53:9d:
                    b2:3c:ad:54:32:76:60:53:a7:c7:74:40:e4:4e:e2:
                    83:2e:77:a5:78:5f:b5:11:e5:ca:80:ef:f6:e3:f4:
                    65:d3:a0:4c:79:09:a3:ee:7f:50:9f:ce:59:0f:96:
                    1b:fd:32:bd:9b:b8:d5:b7:e6:fe:15:91:e1:8f:34:
                    94:ce:21:22:38:15:36:c2:61:ca:cc:6e:37:08:04:
                    f7:d2:39:a0:ec:38:51:b9:8e:4e:4c:f1:74:56:d7:
                    fb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:03:46:61:8B:9F:77:1A:CE:52:42:2C:AA:62:00:F7:F6:18:EF:6A
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:4c:ea:2b:70:84:0d:93:61:ca:ec:2f:1d:93:18:19:18:4e:
         31:e1:0e:78:9e:fc:44:22:2f:69:7e:0a:fb:15:39:2c:e5:f7:
         bf:11:d8:a6:4f:d3:71:1e:30:30:6a:7a:10:40:f9:92:4b:21:
         0d:49:86:b4:8e:50:ee:e0:06:50:e0:a4:37:6a:c0:9c:44:3e:
         3e:5e:82:e7:89:82:4c:30:c0:35:cc:85:f2:25:9b:11:c2:cd:
         46:4f:3f:21:d1:c5:cf:d4:41:c0:46:28:94:16:0e:e9:cc:04:
         92:6a:7e:d3:51:e9:60:4c:ae:3d:98:f6:78:15:d3:bb:2b:75:
         c3:8c:68:70:6e:94:0f:c3:e7:57:11:fa:2e:9d:61:db:32:f1:
         e8:19:ba:11:a2:1b:95:95:66:72:bc:26:bf:af:28:8c:f8:5f:
         34:16:bd:50:5a:1d:85:8e:6e:dd:de:d8:35:17:ab:bf:db:67:
         ff:71:f7:3e:f0:3e:f9:01:16:b6:9f:c3:a1:58:f5:fd:2d:f0:
         9a:49:db:94:27:c3:83:a1:30:5d:a7:8c:70:3b:c8:4e:2f:23:
         4e:a5:f6:e4:0d:ef:41:38:24:cf:41:82:01:be:e7:78:b6:3b:
         c4:02:0d:a8:d1:d0:cd:00:c2:28:b9:74:ec:5d:ff:45:ae:cc:
         0e:77:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:45 2024 by rpki-client on console-fra.rpki-client.org