Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa
File:                     323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier:          CygJZ1V6knwIdO18R3K6MaFSc0aEsyFaTdyINwgmuqo=
Subject key identifier:   14:98:B3:00:CB:93:C5:17:14:45:A0:0C:FF:42:C2:7F:28:57:60:F7
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       64F9616C5BBC97910B4582B269C517C6468A5008
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa
Signing time:             Sun 02 Jul 2023 13:56:04 +0000
ROA not before:           Sun 02 Jul 2023 13:51:04 +0000
ROA not after:            Sun 30 Jun 2024 13:56:04 +0000
asID:                     140413
IP address blocks:        2406:13c0:e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 22:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f9:61:6c:5b:bc:97:91:0b:45:82:b2:69:c5:17:c6:46:8a:50:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Jul  2 13:51:04 2023 GMT
            Not After : Jun 30 13:56:04 2024 GMT
        Subject: CN=1498B300CB93C5171445A00CFF42C27F285760F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:67:5e:f1:52:7a:59:a1:87:15:73:8a:c7:
                    eb:25:df:df:f4:a1:e2:d8:91:e0:12:7c:68:60:90:
                    d4:cb:39:d3:eb:da:ba:81:cc:35:7c:7f:da:78:c7:
                    68:8a:85:d3:45:39:3e:e8:95:cf:a7:4c:cb:94:18:
                    fb:84:a1:73:79:14:69:aa:ca:f4:80:fb:db:27:47:
                    ae:9d:a0:5f:f6:a1:a1:2b:8d:f8:aa:01:78:98:50:
                    69:28:c8:73:37:42:d6:22:d6:01:bb:16:f3:24:ab:
                    ec:2d:8d:ab:0b:b0:74:71:9a:a9:84:6c:c6:eb:90:
                    d9:eb:a3:17:d5:a1:e7:38:bf:1d:4d:65:ad:02:bc:
                    c3:59:05:ee:6a:fd:6e:87:25:a0:2b:7e:9e:97:be:
                    18:25:77:78:cd:1f:d6:75:cd:9c:df:71:82:7d:50:
                    05:2d:1b:3b:46:45:66:7e:20:bb:46:ef:79:6c:0c:
                    14:81:1b:f8:fa:c5:6a:e7:8a:14:68:08:f0:b3:5b:
                    c7:11:2d:08:17:77:87:b5:e4:62:d5:5e:b7:39:12:
                    8e:a1:0c:f6:1f:00:77:35:5d:bb:0a:8c:9e:0f:4a:
                    2d:46:4d:e0:3a:0c:fa:4b:c8:40:11:a0:81:1f:e6:
                    4e:5e:38:dd:e1:72:bc:c1:81:d5:f1:a7:48:a9:74:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:98:B3:00:CB:93:C5:17:14:45:A0:0C:FF:42:C2:7F:28:57:60:F7
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:13c0:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:2e:d2:3f:17:44:83:67:0c:ef:c6:ca:08:e8:2f:72:e6:ab:
         c1:45:b9:51:69:99:e5:7d:11:77:30:a4:33:4f:d0:ed:2f:7d:
         d1:9f:b1:72:66:da:da:f2:c3:f2:af:e4:08:d3:7a:90:e0:5e:
         cf:b7:57:b7:1e:99:cb:4a:b3:58:72:60:e5:d1:cf:bf:53:ea:
         b0:90:ea:03:a8:7a:3d:42:86:da:a9:95:80:06:95:97:dc:bb:
         9b:03:dc:da:1b:82:d5:07:64:b9:eb:0e:fc:6c:65:b2:21:dd:
         5f:20:ce:cc:6c:c2:df:8d:c3:69:5b:0a:b4:30:90:01:0d:35:
         13:aa:98:3e:28:a7:23:71:73:5b:20:36:c3:97:d2:44:7b:46:
         fa:0f:c3:e7:c8:28:7c:95:32:40:3a:25:f0:22:95:ab:9b:ca:
         fa:3a:70:86:ff:a7:2c:44:5f:82:3f:3d:4b:d4:9e:1f:c7:35:
         74:b4:a0:c6:97:1c:30:7f:68:a4:26:80:72:aa:4d:f9:e6:bd:
         3b:a7:4d:c2:d6:d6:10:2e:d4:f6:66:ea:5a:4b:57:7d:7f:bc:
         f5:8f:ca:e5:01:ce:5f:d2:14:70:12:e8:b6:2e:ff:24:aa:80:
         cb:6c:45:31:88:ec:36:a6:81:2d:d4:4e:e6:c0:52:35:3b:74:
         ff:a4:74:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:50:25 2024 by rpki-client on console-ams.rpki-client.org