Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31303a3a2f34382d3438203d3e203535373031.roa
File:                     323430353a623930303a31303a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier:          2AlzryzaamiWqayMpS/8PIprtgHuF1Iq55L+ChHK5y4=
Subject key identifier:   B6:7F:AD:F4:52:72:B9:98:A6:97:9A:E7:40:2C:14:09:60:EA:78:E5
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       72D6A0B479445B8E738F9E76583C0E707937C470
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31303a3a2f34382d3438203d3e203535373031.roa
Signing time:             Thu 09 May 2024 04:00:57 +0000
ROA not before:           Thu 09 May 2024 03:55:57 +0000
ROA not after:            Thu 08 May 2025 04:00:57 +0000
asID:                     55701
IP address blocks:        2405:b900:10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d6:a0:b4:79:44:5b:8e:73:8f:9e:76:58:3c:0e:70:79:37:c4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: May  9 03:55:57 2024 GMT
            Not After : May  8 04:00:57 2025 GMT
        Subject: CN=B67FADF45272B998A6979AE7402C140960EA78E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:c4:b1:3b:96:26:3d:10:19:61:0f:9a:d1:
                    57:5f:0f:96:8c:05:da:ad:9b:2e:67:05:50:1a:5e:
                    50:5d:a8:20:4b:a9:00:06:f6:f6:7a:cf:1d:4f:78:
                    53:d8:7e:a9:b1:59:34:f8:b5:00:49:85:71:46:b0:
                    ce:5f:64:72:81:8f:ca:be:b9:53:61:66:c3:d4:9c:
                    02:0e:92:32:b1:c0:ce:14:d9:6d:90:1d:ad:07:8e:
                    85:72:68:fa:f9:6e:02:d2:fa:de:74:9a:35:63:71:
                    87:ed:03:1b:ad:73:c9:fe:84:4e:61:37:66:15:99:
                    9a:98:73:72:06:c0:c7:2e:42:f6:01:a9:3a:d3:a1:
                    6f:1e:62:3a:2c:3f:cc:a0:64:e9:74:3f:8e:07:5a:
                    1f:54:d7:40:ba:0b:60:e9:bf:a8:2a:fb:57:5d:e9:
                    75:8e:73:97:6a:cf:a8:8e:a3:11:1c:c0:a4:9b:41:
                    6a:44:1c:a7:fe:1c:ad:9c:3d:f3:2a:58:03:76:37:
                    54:97:d8:da:df:b5:11:43:44:e1:4b:a3:b8:3d:7a:
                    a4:7c:03:01:14:c9:62:2a:97:cc:ee:82:f2:59:fb:
                    e2:fb:93:0e:38:dc:a4:d7:48:40:3f:fd:ea:89:3b:
                    93:88:4f:d4:d8:b4:be:29:e0:9f:c7:ef:60:6c:e0:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7F:AD:F4:52:72:B9:98:A6:97:9A:E7:40:2C:14:09:60:EA:78:E5
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a31303a3a2f34382d3438203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:b900:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:18:0f:88:bf:5c:d2:9b:2c:00:3c:5b:a2:d4:2c:37:a0:08:
         37:02:ca:d8:fa:62:2d:a1:ac:42:84:ad:f5:cf:ab:31:cf:eb:
         84:28:79:d0:e5:da:6d:b7:d5:39:99:eb:c4:7f:90:87:ab:58:
         dd:b5:c2:38:2a:5c:69:18:fd:7d:05:4d:57:d8:c9:cd:e4:43:
         20:ab:91:30:ba:31:11:b1:99:80:59:d0:35:a5:07:c8:5d:01:
         81:fb:bb:8c:0d:5e:b6:13:ac:22:03:6e:19:9c:d2:93:ef:78:
         80:bd:8b:d0:d4:00:22:d5:ac:0b:e8:53:8f:94:09:00:61:a7:
         df:f3:93:9b:36:55:d7:49:05:5e:25:ee:fb:65:9a:49:af:d8:
         1c:40:2e:5c:30:90:1e:0f:90:c5:e4:33:c1:3b:02:b3:da:7b:
         af:55:80:e5:4c:57:c7:1d:a4:f5:49:75:ae:b5:4d:9d:5a:dc:
         0d:54:40:10:06:43:52:a0:e4:b9:a3:81:2f:13:0f:02:4c:76:
         bf:5a:72:a9:fc:30:a3:99:93:40:9c:b3:53:26:33:e4:77:1f:
         6e:a8:e0:ec:3f:c0:cc:34:93:08:7f:ed:4d:63:09:7b:81:ff:
         c5:c6:70:33:11:60:11:6d:bd:e1:1e:b5:9f:62:16:2f:3b:55:
         ef:90:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org