Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a343030303a3a2f34382d3438203d3e203535373031.roa
File:                     323430353a623930303a343030303a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier:          vP66ak/BRI70r7AtK41eSxwH/n1D9S4Teb3+zGy9KU0=
Subject key identifier:   83:BD:3B:14:A8:39:78:2A:21:79:34:72:AE:4D:D9:1B:31:F6:83:ED
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       6B98060613E9992D4F18AC84900DEF445E50AD87
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a343030303a3a2f34382d3438203d3e203535373031.roa
Signing time:             Thu 09 May 2024 04:01:07 +0000
ROA not before:           Thu 09 May 2024 03:56:07 +0000
ROA not after:            Thu 08 May 2025 04:01:07 +0000
asID:                     55701
IP address blocks:        2405:b900:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:98:06:06:13:e9:99:2d:4f:18:ac:84:90:0d:ef:44:5e:50:ad:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: May  9 03:56:07 2024 GMT
            Not After : May  8 04:01:07 2025 GMT
        Subject: CN=83BD3B14A839782A21793472AE4DD91B31F683ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:1f:1e:62:50:fd:67:e0:2a:16:97:a2:4a:
                    8c:5f:16:1b:c9:37:53:47:5b:28:be:67:6a:74:d5:
                    d4:5b:dd:db:d6:c1:39:0e:dc:9e:13:46:7f:c5:bc:
                    a9:18:5a:f9:84:20:21:cc:04:d5:8b:99:6c:98:d1:
                    e7:e4:a8:d5:23:2e:ec:39:da:ed:cd:6f:ee:b0:7b:
                    79:27:8c:9d:37:1a:ba:e8:07:93:67:77:f9:b9:d3:
                    ab:3e:a7:42:e9:b5:98:63:0f:2e:12:91:5a:5e:10:
                    b7:72:6c:3b:b6:5f:46:3b:80:d0:e5:6c:ba:1a:57:
                    0d:a8:0c:41:4b:be:96:76:a7:4e:d7:76:80:64:48:
                    c5:b2:20:48:54:78:54:2a:01:e6:23:8a:a5:75:bd:
                    81:d6:35:dc:8a:06:26:84:18:a1:d9:f0:cd:39:8a:
                    a4:62:70:50:b6:41:02:04:8a:8a:0d:ed:92:ad:ca:
                    bf:a2:a4:78:2b:05:d3:9d:6c:a7:28:3d:19:67:b1:
                    2e:21:04:68:ca:71:d4:14:90:59:35:a8:12:44:1c:
                    b0:8a:2d:8c:8c:b5:5c:83:58:f1:e6:c1:de:a7:42:
                    30:c4:da:cf:a8:3a:1d:ed:1f:44:b1:39:a2:58:50:
                    32:c7:0f:87:32:f9:a4:38:d7:b0:86:c9:36:c7:0c:
                    d1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BD:3B:14:A8:39:78:2A:21:79:34:72:AE:4D:D9:1B:31:F6:83:ED
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a343030303a3a2f34382d3438203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:b900:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:f4:ed:37:68:b0:b7:f7:13:c8:6b:e1:10:b9:b7:4f:01:af:
         ac:aa:20:68:b5:2b:f8:bd:96:94:45:38:66:ed:9c:c5:12:75:
         87:2d:c6:f3:07:4e:97:87:f0:7a:43:0a:5b:a2:fc:57:66:fa:
         7a:82:4c:5f:4c:50:bf:7e:df:a9:00:68:4f:ad:40:02:78:e8:
         8e:82:05:22:f9:68:a5:b1:8b:44:41:c8:33:16:34:84:be:50:
         15:ce:1a:15:f6:c0:76:b9:6e:7d:bf:e0:79:65:bc:4a:09:fa:
         82:2c:ff:79:32:5d:c4:35:76:1c:03:e1:6a:30:a5:07:8b:52:
         44:1a:9c:c2:48:50:23:d8:85:d0:4f:56:31:c9:e9:66:62:5f:
         79:07:17:be:2e:c8:6e:45:ec:29:1a:a7:db:90:f4:e5:0d:db:
         ad:59:c4:15:98:81:9f:9e:fe:39:07:1b:ec:6a:65:f0:c2:69:
         c9:ec:86:85:9a:1e:c9:74:fe:f4:f3:96:86:86:98:7a:a6:67:
         4b:62:5c:fa:93:e3:40:72:87:be:e7:ab:60:8f:5e:61:95:73:
         b8:1f:be:2b:68:c4:21:8b:b0:cc:b2:4b:7d:72:0f:ba:6d:bd:
         57:95:a5:c2:1e:19:07:6a:56:98:08:1a:c4:ad:6e:67:0b:88:
         be:ea:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org