Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa
File:                     323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (raw, json)
Hash identifier:          lGaCHoR1Jvjo/a1sb4ZgW3ziv1aSQlPU5NtVxtpLBn4=
Subject key identifier:   AD:92:D4:0A:F2:02:20:08:3B:8D:76:3A:78:7B:F8:96:12:66:03:6A
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       0560C1992402F56AD1E3EB4FDB8625BAD1C2655C
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa
Signing time:             Mon 01 Jul 2024 01:02:32 +0000
ROA not before:           Mon 01 Jul 2024 00:57:32 +0000
ROA not after:            Mon 30 Jun 2025 01:02:32 +0000
asID:                     131749
IP address blocks:        2402:be80:2000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:60:c1:99:24:02:f5:6a:d1:e3:eb:4f:db:86:25:ba:d1:c2:65:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul  1 00:57:32 2024 GMT
            Not After : Jun 30 01:02:32 2025 GMT
        Subject: CN=AD92D40AF20220083B8D763A787BF8961266036A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:12:fb:de:b7:8a:75:2c:7a:e8:71:46:f4:00:
                    a0:4c:27:78:59:24:22:03:b4:8a:ca:2d:0a:8f:6d:
                    24:a0:c4:b7:1f:df:03:9f:cf:48:37:76:fb:3a:5f:
                    d6:bb:48:44:1b:e1:d6:91:c4:a3:9d:e4:eb:f2:01:
                    a2:0e:53:c8:c8:7b:da:f2:19:68:f9:74:b9:ed:ee:
                    e3:50:4f:a6:02:7b:16:25:46:0a:bb:cc:94:95:fc:
                    59:61:31:42:43:e9:67:08:2e:34:f7:12:ea:86:67:
                    0f:cd:cb:73:64:1d:bc:a9:5d:68:9c:09:14:34:9f:
                    4a:2c:29:ef:c3:49:d8:f3:e9:96:84:6e:0a:20:b4:
                    19:3c:9d:c3:dd:a5:0b:a5:16:b7:2b:95:07:b6:f3:
                    21:7b:d0:5a:7b:99:19:a0:26:f9:c0:70:ea:c3:d4:
                    f4:7b:49:b3:0d:c5:b7:e9:aa:7b:3b:fb:6f:17:41:
                    ca:96:4a:ce:5b:e9:c8:70:87:c3:74:22:33:55:b2:
                    b0:28:a8:fe:c6:86:bc:06:78:9c:8c:65:e0:db:2f:
                    6b:5d:39:db:17:bb:ec:96:45:a7:1c:65:7e:6f:ad:
                    c0:7d:84:b6:39:ee:fc:87:8a:44:df:9c:75:1c:3a:
                    94:b5:90:44:3e:b7:1d:36:10:9c:97:fc:33:82:43:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:92:D4:0A:F2:02:20:08:3B:8D:76:3A:78:7B:F8:96:12:66:03:6A
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be80:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         47:18:c0:f2:2e:44:3b:22:1b:54:26:96:de:81:6b:b4:25:43:
         61:f8:dc:cd:c7:20:ca:21:1d:a1:51:16:23:49:b2:47:c9:3b:
         67:7a:95:7f:5d:2c:a2:18:44:36:72:b9:08:cf:83:4b:e8:6e:
         71:8e:0a:d4:b8:9f:45:47:fe:17:1b:03:5f:da:f5:82:4f:26:
         be:5d:af:7f:60:42:23:e8:5c:e3:76:2d:2b:1a:ea:79:e5:aa:
         b4:d1:15:83:87:f5:dc:06:b7:60:8f:c1:7f:60:a0:3c:16:1c:
         8c:60:84:03:bc:f5:cd:c9:9f:9d:01:1a:62:28:87:5c:f0:a6:
         48:03:f8:a6:8d:f2:cc:18:1a:c9:2c:b8:27:6a:1d:cf:e5:0d:
         78:74:e5:7f:39:d7:5b:8f:ad:02:0e:0d:42:18:b7:f2:da:03:
         29:a1:4f:be:cf:be:3d:5d:4e:6b:5e:a2:09:ec:81:bf:26:aa:
         c4:76:a1:1f:98:e7:bf:9e:0d:38:2f:23:ae:a2:30:aa:3d:0b:
         ca:3a:64:72:98:08:e0:04:28:00:3a:94:a2:71:b1:7b:6d:81:
         40:cf:ad:a0:09:2d:d9:69:8e:4f:f0:d8:04:51:cf:6e:03:57:
         82:d2:f7:79:ea:11:ba:90:2f:17:3b:60:94:8b:80:16:c1:d8:
         f6:8c:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org