Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa
File:                     323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (raw, json)
Hash identifier:          +yvyeF1Eot4HYMVmlpHdLW9PkKkaiWArut4ApdSjAJ0=
Subject key identifier:   F0:A9:7E:AB:30:3C:A1:28:9C:92:E4:F2:9B:EA:90:74:06:73:EE:82
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       58205E3C761BC10B4AE970BB20D8671527886DF6
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa
Signing time:             Mon 01 Jul 2024 01:02:35 +0000
ROA not before:           Mon 01 Jul 2024 00:57:35 +0000
ROA not after:            Mon 30 Jun 2025 01:02:35 +0000
asID:                     131749
IP address blocks:        2402:be80:6000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:20:5e:3c:76:1b:c1:0b:4a:e9:70:bb:20:d8:67:15:27:88:6d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul  1 00:57:35 2024 GMT
            Not After : Jun 30 01:02:35 2025 GMT
        Subject: CN=F0A97EAB303CA1289C92E4F29BEA90740673EE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f0:5f:82:8f:3a:20:9b:5b:f0:a9:c6:8d:ff:
                    5c:1c:a9:4e:80:43:5f:0e:83:0a:f6:8c:80:41:1c:
                    7c:b5:01:2f:84:b0:cb:da:dd:2d:2b:8d:95:bc:71:
                    1c:8e:e9:8a:a7:9b:58:ee:b8:5f:6e:ab:db:b2:62:
                    33:3f:c7:fe:38:85:92:43:9f:93:71:99:9e:46:ac:
                    b9:63:12:2c:89:ac:41:71:39:09:6b:cc:e5:e2:3e:
                    fd:c8:12:d6:e6:62:77:c5:d8:86:d0:fe:a5:cc:fa:
                    ab:57:51:07:d1:50:56:d2:8e:0f:28:95:f3:11:7e:
                    b9:ed:9f:1e:b7:f6:c4:5e:d2:d2:66:55:e3:64:08:
                    d7:e4:5f:3f:4b:c4:d5:7e:fa:fa:70:56:40:06:61:
                    19:eb:58:15:af:d3:8b:37:27:87:2f:82:a7:09:04:
                    f4:6e:2a:2b:49:81:3b:13:17:ff:46:28:d0:0d:29:
                    7b:fb:7e:1f:ee:2e:21:28:b7:d6:b6:63:d1:f3:7b:
                    e0:9b:e4:ff:19:73:81:19:43:93:3e:2f:1c:38:cd:
                    5a:eb:db:2c:00:af:8d:23:cd:77:6d:a4:3d:6b:ec:
                    61:f5:e9:07:82:16:e0:2d:92:0b:f2:55:4d:88:b9:
                    81:b3:91:e5:e1:0a:e0:27:19:73:24:33:b4:45:c7:
                    03:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A9:7E:AB:30:3C:A1:28:9C:92:E4:F2:9B:EA:90:74:06:73:EE:82
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be80:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:be:8a:84:46:40:bf:b3:cd:de:7c:35:1e:23:e5:88:9d:
         4e:b2:1e:1a:7a:bb:9a:c5:ce:29:cc:48:67:9b:9a:c5:dd:d2:
         2f:0a:7d:fe:cd:3b:b5:d5:fb:67:ea:bf:b2:8a:ab:c8:f6:43:
         90:9b:b2:0b:90:8f:b9:d6:7a:6d:09:6c:59:93:ea:14:fd:75:
         23:84:5f:18:90:7f:ec:ba:9a:11:91:de:c8:aa:fd:97:52:92:
         f3:af:51:30:6d:6f:2b:41:f0:a6:88:4a:15:17:87:67:f9:87:
         5d:2a:f1:2f:f7:c8:33:8a:c1:fb:72:b5:c6:a8:3c:b9:9b:23:
         f3:21:52:bf:fe:30:ed:43:7a:91:b5:9f:c1:a9:2e:c0:04:38:
         c2:0d:72:2e:8a:3c:49:52:61:05:9a:0c:7e:64:36:64:80:f0:
         43:67:03:11:56:65:b4:f4:9c:50:89:3f:29:2f:cb:82:b0:56:
         10:71:e0:9c:f9:73:c0:07:68:4b:78:38:3c:b9:d4:61:f9:f9:
         6d:fd:f5:28:3a:e3:33:ed:82:a2:f4:11:9f:75:4a:97:c1:f8:
         e4:0b:0e:47:f7:54:7a:d2:e1:0f:1e:ec:25:cc:82:a5:d4:31:
         94:7c:4e:dd:26:6b:49:b1:4b:5b:8d:c7:d0:00:cb:7b:fe:bb:
         12:6a:0f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org