Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36323a3a2f34382d3438203d3e20313431383932.roa
File:                     323430353a623930303a36323a3a2f34382d3438203d3e20313431383932.roa (raw, json)
Hash identifier:          TOLadaRQ0ioy0UeoL/GkzDgm3D84B/SJ3cbHIVNFvss=
Subject key identifier:   B7:88:4B:94:69:CA:4F:3C:7F:19:98:BE:2F:03:EA:44:1B:F6:1F:0C
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       52F6B3980C64084383FBD8D634DCC4CD0034467C
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36323a3a2f34382d3438203d3e20313431383932.roa
Signing time:             Thu 09 May 2024 04:00:59 +0000
ROA not before:           Thu 09 May 2024 03:55:59 +0000
ROA not after:            Thu 08 May 2025 04:00:59 +0000
asID:                     141892
IP address blocks:        2405:b900:62::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f6:b3:98:0c:64:08:43:83:fb:d8:d6:34:dc:c4:cd:00:34:46:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: May  9 03:55:59 2024 GMT
            Not After : May  8 04:00:59 2025 GMT
        Subject: CN=B7884B9469CA4F3C7F1998BE2F03EA441BF61F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:d9:fd:15:94:31:88:30:f6:fc:6a:7d:9a:
                    17:b8:a4:f0:53:f7:bc:6c:f6:ba:c5:be:4a:05:8c:
                    72:88:1a:7a:ea:b5:b2:d4:13:9c:e2:f3:4c:d2:4d:
                    06:01:1b:0d:0f:32:61:e2:0d:40:39:39:29:22:69:
                    82:f4:75:de:4c:a7:5b:21:6e:9b:4d:ac:88:4b:2e:
                    1c:8d:2b:8f:f0:cd:e3:cb:5f:18:9b:b5:1e:68:b4:
                    fb:84:95:ed:ca:df:35:ec:49:38:cb:43:f5:04:76:
                    fb:c9:5e:74:16:7e:a1:01:6d:ce:79:8e:3c:52:5a:
                    17:a0:d8:6a:75:57:d0:15:5b:47:d7:44:a9:b1:43:
                    be:56:5d:36:01:28:86:43:2b:39:4a:45:16:57:a7:
                    ad:cc:ea:b1:d0:93:08:f6:9b:4b:81:0f:9a:d1:da:
                    f8:44:ce:b3:85:47:e7:b7:a9:38:f8:16:3c:2d:d6:
                    d3:53:89:9f:c8:0c:33:bc:32:2b:1d:38:4b:8c:9a:
                    2c:d3:1c:5c:b7:64:e2:d1:dd:88:e4:0d:21:43:15:
                    51:c8:ad:9f:93:d6:0c:2c:e9:6b:82:b3:b0:39:9d:
                    45:0b:60:cf:e1:03:d1:fb:78:f1:ac:05:6f:a6:e0:
                    83:4e:ba:40:30:0e:66:6e:3e:02:e1:f3:e2:4d:e0:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:88:4B:94:69:CA:4F:3C:7F:19:98:BE:2F:03:EA:44:1B:F6:1F:0C
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36323a3a2f34382d3438203d3e20313431383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:b900:62::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:66:ac:e0:7d:f6:8f:45:89:80:73:23:10:58:f3:17:64:
         8d:ce:68:3f:4e:37:18:04:f9:85:be:01:65:a9:80:f9:d6:1a:
         47:b6:ef:95:25:79:44:f5:92:30:58:b2:4d:fb:7d:16:79:4e:
         ba:4b:76:80:00:25:12:c5:c6:32:ec:25:ca:a1:01:58:a8:0e:
         95:5f:61:62:4c:50:64:4b:ec:4b:e8:a4:b9:95:ec:56:f9:d7:
         ce:10:b6:a6:c5:2d:29:5d:cf:78:59:85:2c:af:e1:2f:d4:39:
         cc:85:1c:09:77:34:d7:c1:67:25:24:66:66:56:9d:89:8c:fa:
         e2:f5:bb:31:f3:18:16:1a:ec:fb:64:22:55:ba:21:73:10:2a:
         2d:98:38:09:5d:64:21:54:ef:1c:63:3f:13:b5:13:34:2b:a8:
         0d:92:aa:b5:bd:50:f7:14:6c:25:b5:ca:7e:c0:0e:f6:f1:c7:
         5f:5a:df:11:5f:d5:d6:1b:a7:41:e5:c6:35:bf:00:f5:6d:03:
         f0:05:ba:d5:8a:d9:29:e9:d0:3b:06:10:14:9b:a9:f1:a2:ca:
         90:b3:e5:f1:14:9b:32:84:bd:46:57:4e:d7:0b:3d:70:07:4b:
         cb:b8:40:e4:da:69:65:eb:62:a5:b3:71:55:a4:32:73:e5:8c:
         97:65:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org