Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          cOEsTnKRPWpWcX2Gz4mv42kbxhJNsRqFd/w2AVhkI5E=
Subject key identifier:   17:97:51:78:14:37:FA:64:5D:84:60:A1:F4:29:92:A5:98:03:84:1D
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       75A226DFF6498E3D3C602B385E92BEAC057D191F
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 02 Jun 2024 14:00:02 +0000
ROA not before:           Sun 02 Jun 2024 13:55:02 +0000
ROA not after:            Sun 01 Jun 2025 14:00:02 +0000
asID:                     140413
IP address blocks:        2406:13c0:c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a2:26:df:f6:49:8e:3d:3c:60:2b:38:5e:92:be:ac:05:7d:19:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Jun  2 13:55:02 2024 GMT
            Not After : Jun  1 14:00:02 2025 GMT
        Subject: CN=179751781437FA645D8460A1F42992A59803841D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:9f:e0:0d:1b:24:e7:5a:2d:58:d9:c2:ae:
                    09:75:dc:17:cc:c2:29:f8:4b:ab:b6:4f:1f:ae:aa:
                    bd:eb:af:7a:88:f0:f3:06:46:fd:2e:bb:76:bc:0f:
                    0a:f9:92:54:96:2e:7a:1a:52:04:dd:bd:78:15:81:
                    e0:72:7e:20:f8:a1:9c:a5:6e:43:62:9c:07:d1:d1:
                    2c:ab:9c:7e:bc:8b:1a:9d:37:66:84:77:b9:52:4e:
                    63:cb:f8:ac:2e:6d:97:13:12:4c:f9:37:d2:b4:de:
                    09:ee:36:e4:9d:2b:fb:3d:a4:4d:5c:6f:f2:82:b2:
                    da:c3:0d:d3:35:18:5e:0d:c5:16:7d:80:58:d9:e5:
                    64:9a:7c:a3:a4:a9:68:93:16:42:dd:a5:6d:3d:71:
                    86:17:21:af:89:f9:3d:3a:9d:4b:74:e8:e7:3e:41:
                    ca:2d:3f:3a:53:84:dd:f1:38:0c:39:69:86:ab:af:
                    86:45:b1:5e:49:6f:d3:29:47:12:2f:df:29:ec:79:
                    8c:1b:80:43:c8:e6:28:a6:33:9f:73:aa:72:90:15:
                    ac:b6:c1:be:10:8b:0c:d0:47:26:56:0a:8a:3b:23:
                    1d:8e:ba:72:ef:e1:44:15:4c:18:8c:b9:af:57:7e:
                    60:17:0e:92:f3:2a:3b:8d:6b:83:56:de:fb:e0:75:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:97:51:78:14:37:FA:64:5D:84:60:A1:F4:29:92:A5:98:03:84:1D
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:83:5f:82:82:19:f1:83:6b:bc:79:a4:b4:6a:1c:d3:3d:bf:
         4c:7a:f0:f6:7b:8b:04:8f:90:ff:7a:6c:3d:b2:cf:ba:ce:31:
         db:4d:c7:45:99:ff:11:51:d5:ac:49:77:0d:4e:7c:71:d8:0d:
         70:5e:cc:aa:94:f7:13:e2:3c:79:f3:f2:79:e9:86:32:06:09:
         f0:bf:aa:d6:db:bf:c2:0e:a8:52:ba:e9:c6:8a:2f:04:93:bc:
         ca:40:36:2b:8c:bd:bb:91:48:12:3d:70:2f:06:1e:d7:4c:53:
         c2:3b:6f:e2:d3:8e:e3:89:03:ba:50:42:e7:85:92:55:9b:3c:
         2b:bc:dc:09:fd:9e:57:5e:cf:b4:94:8c:d1:00:29:f5:c3:fc:
         04:44:02:a0:dd:e1:d9:2a:bc:ea:a1:52:92:26:ab:ec:84:02:
         a9:c5:cc:ef:3f:91:5b:1c:77:1c:86:2b:37:9f:15:16:a0:29:
         af:97:5f:cd:e0:e2:8c:25:2a:0c:d9:dd:1a:f3:2e:28:27:91:
         8f:62:24:2c:55:ac:62:d2:83:96:db:ca:8d:32:46:25:1f:17:
         4e:c8:e2:a3:b6:94:8c:fa:2b:ab:6b:15:88:92:89:82:65:77:
         25:98:bb:e7:78:68:d0:80:e9:7f:6b:3e:86:b2:79:ec:b8:ef:
         2b:82:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:28 2024 by rpki-client on console-fra.rpki-client.org