Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          x0KJf6xqNm2gS/YtHKVWhk0qyshExnJc5Q6L4tu1Qoc=
Subject key identifier:   06:C6:80:71:25:DA:F6:96:C0:6A:8F:9C:96:F4:B3:2F:CB:94:1E:5E
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       664A2E9AB595AEF5CBF946DA9B5B2313A033D763
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 02 Jun 2024 14:00:03 +0000
ROA not before:           Sun 02 Jun 2024 13:55:03 +0000
ROA not after:            Sun 01 Jun 2025 14:00:03 +0000
asID:                     140413
IP address blocks:        2406:13c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4a:2e:9a:b5:95:ae:f5:cb:f9:46:da:9b:5b:23:13:a0:33:d7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Jun  2 13:55:03 2024 GMT
            Not After : Jun  1 14:00:03 2025 GMT
        Subject: CN=06C6807125DAF696C06A8F9C96F4B32FCB941E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:54:cd:cc:bc:e1:1c:c5:bd:f6:bf:87:4d:59:
                    36:a4:ac:fc:96:b3:85:5d:8d:76:af:ab:21:33:e9:
                    66:46:cf:1d:14:6a:cd:74:ef:6e:cc:aa:5b:21:4d:
                    c2:0a:6c:56:b2:63:e2:ca:b2:90:b7:35:a3:50:9b:
                    f7:70:8c:dd:97:37:43:7c:36:2d:cb:80:1a:28:9f:
                    c5:cf:cc:41:6a:7c:3e:04:49:34:a1:c4:3a:9b:13:
                    40:3e:c5:c5:e0:b0:55:f2:ba:3a:ad:dc:a5:8a:b7:
                    14:88:80:0d:2a:fd:da:36:da:66:c7:46:e8:2b:a0:
                    de:33:4a:9a:9e:d2:7c:fd:ae:ff:08:f8:66:4b:5c:
                    a2:d6:4e:bd:77:e9:82:a1:94:13:8a:5a:5d:cd:d6:
                    e5:9b:de:ab:2c:ca:fc:17:b5:62:14:97:96:a2:88:
                    f0:26:d5:1f:f2:79:73:0d:6c:95:b5:8c:ad:6d:b5:
                    e6:d5:53:8c:29:59:ae:35:a5:46:d9:a0:96:d5:72:
                    9e:8a:3b:fb:34:06:ae:14:5e:28:37:09:41:b7:dc:
                    99:fd:66:87:49:e0:bd:0f:fe:96:22:26:bc:ee:5f:
                    77:fa:cb:4b:60:40:7a:0d:6d:56:c5:d5:4c:cf:59:
                    60:fe:dc:d4:8b:12:d2:a3:cc:bf:f1:82:a4:06:e5:
                    3f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C6:80:71:25:DA:F6:96:C0:6A:8F:9C:96:F4:B3:2F:CB:94:1E:5E
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:38:dc:29:20:81:fe:41:fc:66:8d:f0:59:31:f9:65:35:21:
         ba:08:35:f1:26:db:ef:ec:fa:6f:91:ef:00:50:59:b7:09:f4:
         b8:78:9a:e6:a2:d4:3e:44:63:c3:05:0b:f2:3f:46:bf:13:6f:
         30:96:fd:3a:9c:74:b3:b7:51:a3:a9:c7:9e:ab:ec:5e:19:6a:
         c5:37:34:a0:56:91:7a:8e:94:c6:3f:dc:4c:43:d5:cb:da:42:
         54:a1:27:24:29:56:04:e1:d2:f8:17:02:62:26:14:ac:31:89:
         81:bc:65:0b:5b:50:3d:d9:5a:bf:3e:3d:d8:4a:44:77:7f:76:
         c4:6c:c9:36:6d:e3:10:18:b4:75:13:c3:72:dd:68:42:ff:fc:
         83:28:dd:df:75:d7:61:24:94:73:d6:af:d7:b3:5b:9e:ee:98:
         bf:68:74:a9:f3:57:78:89:67:57:3e:88:b4:4a:9a:03:63:8d:
         3a:8e:36:5a:85:72:be:4c:0f:03:2c:95:f8:88:9a:22:0a:55:
         e8:6e:ca:db:b6:ac:6b:d4:1d:e5:26:6b:43:11:80:7f:23:a3:
         db:51:4e:f3:81:dc:42:37:fa:27:d0:82:f9:7a:eb:b8:36:68:
         ab:7b:84:ea:b2:02:ad:7e:cb:b2:ab:76:33:1f:92:ac:ce:b2:
         3a:53:a3:34
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUZkoumrWVrvXL+Ubam1sjE6Az12MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB
ODFBOTNCRTAeFw0yNDA2MDIxMzU1MDNaFw0yNTA2MDExNDAwMDNaMDMxMTAvBgNV
BAMTKDA2QzY4MDcxMjVEQUY2OTZDMDZBOEY5Qzk2RjRCMzJGQ0I5NDFFNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaVM3MvOEcxb32v4dNWTakrPyW
s4VdjXavqyEz6WZGzx0Uas10727MqlshTcIKbFayY+LKspC3NaNQm/dwjN2XN0N8
Ni3LgBoon8XPzEFqfD4ESTShxDqbE0A+xcXgsFXyujqt3KWKtxSIgA0q/do22mbH
RugroN4zSpqe0nz9rv8I+GZLXKLWTr136YKhlBOKWl3N1uWb3qssyvwXtWIUl5ai
iPAm1R/yeXMNbJW1jK1ttebVU4wpWa41pUbZoJbVcp6KO/s0Bq4UXig3CUG33Jn9
ZodJ4L0P/pYiJrzuX3f6y0tgQHoNbVbF1UzPWWD+3NSLEtKjzL/xgqQG5T/nAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUBsaAcSXa9pbAao+clvSzL8uUHl4wHwYDVR0j
BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD
RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB
OTNCRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i
ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzQzMDM0MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQGE8AAADANBgkq
hkiG9w0BAQsFAAOCAQEAdzjcKSCB/kH8Zo3wWTH5ZTUhugg18Sbb7+z6b5HvAFBZ
twn0uHia5qLUPkRjwwUL8j9GvxNvMJb9Opx0s7dRo6nHnqvsXhlqxTc0oFaReo6U
xj/cTEPVy9pCVKEnJClWBOHS+BcCYiYUrDGJgbxlC1tQPdlavz492EpEd392xGzJ
Nm3jEBi0dRPDct1oQv/8gyjd33XXYSSUc9av17Nbnu6Yv2h0qfNXeIlnVz6ItEqa
A2ONOo42WoVyvkwPAyyV+IiaIgpV6G7K27asa9Qd5SZrQxGAfyOj21FO84HcQjf6
J9CC+XrruDZoq3uE6rICrX7Lsqt2Mx+SrM6yOlOjNA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:28 2024 by rpki-client on console-fra.rpki-client.org