Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/323430303a656134303a3a2f33322d3332203d3e203436303631.roa
File:                     323430303a656134303a3a2f33322d3332203d3e203436303631.roa (raw, json)
Hash identifier:          bS2CT24hCpLr9qjC4dzZS3ZKwd2VO4fnEZ0KuxJYAlg=
Subject key identifier:   B0:E5:BD:50:5C:03:06:0D:31:BB:AF:59:A2:BF:ED:8C:75:79:82:73
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       043345DCDB74168E5719643A86C000FAEB6ADE0F
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/323430303a656134303a3a2f33322d3332203d3e203436303631.roa
Signing time:             Wed 01 Nov 2023 14:01:16 +0000
ROA not before:           Wed 01 Nov 2023 13:56:16 +0000
ROA not after:            Wed 30 Oct 2024 14:01:16 +0000
asID:                     46061
IP address blocks:        2400:ea40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 09:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:33:45:dc:db:74:16:8e:57:19:64:3a:86:c0:00:fa:eb:6a:de:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Nov  1 13:56:16 2023 GMT
            Not After : Oct 30 14:01:16 2024 GMT
        Subject: CN=B0E5BD505C03060D31BBAF59A2BFED8C75798273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2c:13:c4:21:41:b5:96:86:30:19:09:fa:a9:
                    bd:23:a2:74:9a:70:fa:df:74:66:2e:e6:03:e4:c1:
                    a8:a9:1c:da:f0:ef:0c:c8:25:af:cb:1f:03:d4:be:
                    16:3b:9a:c6:96:19:2d:7b:02:2b:58:07:63:56:43:
                    a1:b3:61:80:9e:0d:da:99:a7:0d:f7:6e:64:53:be:
                    45:8d:46:f2:ca:e0:ec:ec:60:6e:01:91:fc:55:4e:
                    46:2d:80:ea:0e:9e:73:eb:a2:e5:c1:96:77:c3:88:
                    63:40:86:46:e0:45:24:d9:64:7e:2e:f2:e2:86:e9:
                    d4:d2:1b:db:44:85:7a:77:e2:8a:8d:49:8f:a1:3e:
                    6c:ab:24:de:a9:1d:7d:8f:09:1d:00:c8:e6:6c:2b:
                    23:c4:e9:1b:a2:25:40:c5:3e:96:bc:29:ee:45:38:
                    d5:78:9a:df:53:f2:64:be:db:0a:ff:52:8b:74:95:
                    76:0d:1e:f6:76:b9:a5:ae:ec:b7:e4:20:4b:85:80:
                    82:9f:7f:c4:50:a8:55:e8:ba:55:eb:15:74:d8:0c:
                    21:83:f5:8f:a8:21:7f:43:14:51:68:f6:65:2f:ac:
                    33:0d:c4:43:1d:ac:92:9f:f2:0d:27:b1:84:fc:f4:
                    b3:29:23:b7:c8:d9:d7:59:f7:1a:9b:6a:74:0d:d7:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E5:BD:50:5C:03:06:0D:31:BB:AF:59:A2:BF:ED:8C:75:79:82:73
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/323430303a656134303a3a2f33322d3332203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:ea40::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:02:1a:b6:80:45:ce:93:5f:54:e1:7a:8d:6f:32:32:f1:f4:
         d0:af:02:73:fc:e4:10:4a:8d:18:fa:3b:3e:1e:87:e7:b8:66:
         a6:c8:3b:a0:12:61:d3:9e:87:38:7c:82:04:04:4e:7c:10:a9:
         c8:01:e7:e7:36:c8:b9:a2:87:68:d6:45:6f:7c:90:ce:c9:99:
         3d:1d:ed:f4:17:15:f9:a7:6d:3b:2f:b7:6e:8c:17:58:4e:ae:
         8f:cf:7c:5e:b5:65:3b:f2:19:99:74:b5:03:18:33:e4:91:e5:
         77:a7:c1:fc:9c:c8:a7:42:4c:20:15:eb:56:76:44:a2:d7:d2:
         9d:71:3d:3d:ce:8a:92:cf:ae:86:46:a1:7f:0e:0d:dd:71:14:
         4a:94:e4:6e:bc:ab:88:70:a6:6c:60:be:8c:d3:71:c2:c4:aa:
         a6:89:f5:e4:fc:a6:b1:66:f0:1c:b6:f1:c0:b7:92:27:7a:5f:
         1d:7c:ff:94:19:43:2a:ac:bd:a4:80:44:90:ef:3d:4d:11:86:
         a9:21:27:4e:34:7c:5f:9a:5a:f3:00:dc:30:3e:c2:87:57:52:
         fd:bb:f2:eb:eb:0e:bb:66:e9:29:a5:43:0d:a2:de:63:e6:c7:
         5b:2e:ed:c8:eb:42:35:f2:78:4e:8a:cb:b7:51:c3:c7:c6:79:
         35:b7:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:40:04 2024 by rpki-client on console-fra.rpki-client.org