Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36343a3a2f34382d3438203d3e20313431383932.roa
File:                     323430353a623930303a36343a3a2f34382d3438203d3e20313431383932.roa (raw, json)
Hash identifier:          C9FasjtNUfzvXam5PpgGtOW+EiCWgSUw3xAnQ7ej/VE=
Subject key identifier:   FC:7C:DD:F9:A7:81:0A:AD:FB:74:3C:59:F4:6E:3D:77:B8:B2:28:14
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       52AEFD08CD26311D856F85A2A909DA63D760A39E
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36343a3a2f34382d3438203d3e20313431383932.roa
Signing time:             Thu 09 May 2024 04:00:59 +0000
ROA not before:           Thu 09 May 2024 03:55:59 +0000
ROA not after:            Thu 08 May 2025 04:00:59 +0000
asID:                     141892
IP address blocks:        2405:b900:64::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ae:fd:08:cd:26:31:1d:85:6f:85:a2:a9:09:da:63:d7:60:a3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: May  9 03:55:59 2024 GMT
            Not After : May  8 04:00:59 2025 GMT
        Subject: CN=FC7CDDF9A7810AADFB743C59F46E3D77B8B22814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:26:df:00:a2:d0:f9:44:b0:4a:71:47:3f:
                    d7:28:30:63:5a:1d:c8:0a:33:ca:62:ea:fe:c0:21:
                    7b:ea:42:ec:0f:31:8f:c7:4f:ab:c9:d4:c7:d4:81:
                    4d:d8:0f:bb:3a:36:91:61:68:ea:26:1f:cc:65:64:
                    f1:c1:94:3b:5a:56:fd:7e:d4:22:7f:8d:9c:70:77:
                    9e:f8:3d:4a:fb:bf:f3:42:fe:77:86:76:2a:0d:5e:
                    d5:10:c7:b6:ed:55:62:1b:dd:61:aa:17:12:50:7b:
                    c9:c9:3c:1f:c3:1f:51:81:7b:07:12:56:60:14:3b:
                    a0:2e:b4:0b:44:97:f8:14:be:65:50:85:b6:3b:1b:
                    85:46:5b:ba:e6:58:7f:1f:14:63:bd:46:a1:49:ca:
                    e9:a2:b0:10:97:ad:fd:75:a4:ca:f3:e9:0d:7f:7c:
                    72:03:0e:5b:ba:20:9f:08:3b:28:12:9e:b3:7e:ef:
                    07:5a:18:09:b1:d1:d2:9d:be:95:45:03:c5:2a:00:
                    3c:4f:df:e4:ef:76:e2:4a:66:f9:c4:f9:fa:e9:a2:
                    f5:ed:51:b5:b5:df:72:38:ce:8f:85:9b:98:fa:d4:
                    31:fe:23:2c:d8:20:68:c6:28:ba:a2:81:9a:dd:6f:
                    a4:85:84:7e:2c:75:45:c2:29:55:5b:e6:0a:f4:8e:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7C:DD:F9:A7:81:0A:AD:FB:74:3C:59:F4:6E:3D:77:B8:B2:28:14
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/323430353a623930303a36343a3a2f34382d3438203d3e20313431383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:b900:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:5b:da:8f:8e:18:63:65:09:a0:c0:16:60:46:30:36:e1:55:
         a2:71:82:ea:7b:8f:89:6c:a1:05:e9:30:d6:ab:dc:d7:fc:55:
         86:d3:50:94:c0:88:df:2b:b7:b1:86:4c:49:f3:49:21:8d:d6:
         49:db:f7:65:5f:20:63:c6:60:01:41:7f:82:7f:25:31:53:57:
         c6:fa:ae:24:b2:40:1f:36:48:bf:45:e8:4b:38:6a:9b:29:8c:
         1d:cc:23:1f:04:57:d7:0d:e8:85:09:c4:28:f2:89:81:98:51:
         41:bc:57:86:87:49:da:1b:04:b3:01:7f:5d:8a:29:52:78:49:
         46:d6:29:f8:04:25:df:f7:a2:d8:40:c8:49:f2:02:91:69:e6:
         5b:ee:0c:52:77:66:2d:e6:7e:dc:29:67:5a:86:3e:96:a2:d8:
         95:73:74:9f:a3:c9:c7:4b:00:8b:d8:73:f6:14:0c:11:68:fe:
         03:30:c6:96:09:cd:80:e9:1b:4b:bf:87:6c:c0:63:a7:89:1a:
         89:86:05:86:85:1b:7f:b4:47:c5:7f:07:f2:32:27:9c:9c:3c:
         05:db:be:39:36:c3:29:ad:57:9a:2c:39:ef:38:57:e5:43:00:
         df:d2:3d:63:d6:40:05:56:3c:bd:0f:f0:76:75:19:3c:36:db:
         66:a7:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org