Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa
File:                     323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (raw, json)
Hash identifier:          lU4krARzF94xW6yIUtLYTvIXCuXd5JN3d9Mt84DDor8=
Subject key identifier:   2B:39:A2:72:B1:D2:30:B3:8F:0A:34:B5:DF:78:15:9B:31:A0:74:9D
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       2CDF4B98AB379AB4E7D39397A322382381246467
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa
Signing time:             Thu 08 Aug 2024 19:07:18 +0000
ROA not before:           Thu 08 Aug 2024 19:02:18 +0000
ROA not after:            Thu 07 Aug 2025 19:07:18 +0000
asID:                     147137
IP address blocks:        2400:46a0:18::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
                          rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Oct 2024 06:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:df:4b:98:ab:37:9a:b4:e7:d3:93:97:a3:22:38:23:81:24:64:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: Aug  8 19:02:18 2024 GMT
            Not After : Aug  7 19:07:18 2025 GMT
        Subject: CN=2B39A272B1D230B38F0A34B5DF78159B31A0749D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:28:82:e0:9b:fb:30:01:39:b0:c1:b8:23:22:
                    8e:09:7e:e9:2e:0d:52:f5:31:ca:c0:a4:16:17:69:
                    70:08:03:6e:00:39:65:e7:67:15:09:55:b0:8c:6d:
                    3f:24:1d:c1:c0:1c:9c:b0:1c:6a:9a:20:d4:7f:75:
                    f2:f4:61:2f:3a:58:ae:40:82:bf:d1:d3:01:35:30:
                    1e:a7:58:3e:76:1b:ee:6d:f5:77:de:fc:21:bc:e7:
                    23:67:60:a7:7e:6f:fe:ed:12:8d:1f:c6:25:01:a4:
                    2b:27:0d:4d:2f:0b:c3:c9:12:2d:6f:32:83:a1:6a:
                    df:6b:a2:79:5e:e8:fe:98:6f:96:9a:42:07:7e:e4:
                    a7:58:12:03:50:9d:42:f3:8d:28:b3:e9:18:6b:c2:
                    dd:7f:4b:51:21:7f:28:b5:60:6c:eb:9d:47:b3:28:
                    14:f2:c9:dd:ac:c9:28:7a:1e:37:b8:1e:47:d0:51:
                    71:bf:42:b4:28:6c:06:c9:1e:c2:5e:29:10:2f:94:
                    49:f5:51:a3:6d:78:3c:e5:ca:b8:d6:fd:bc:ad:31:
                    94:45:34:05:5a:ec:c6:21:ff:49:23:d7:7a:2c:72:
                    60:a3:76:81:a9:65:e6:3f:67:ff:78:db:a8:d8:cd:
                    45:16:ab:c4:f6:c3:f5:3b:04:43:09:71:26:ea:f5:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:39:A2:72:B1:D2:30:B3:8F:0A:34:B5:DF:78:15:9B:31:A0:74:9D
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:46a0:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:df:fd:4d:87:1c:cb:a8:31:2e:9a:a7:7b:13:a8:3b:9f:df:
         13:60:87:07:97:08:d6:7f:f0:ba:da:c1:fe:e5:c1:a4:0a:59:
         99:de:52:a3:ec:ab:45:79:8a:f5:6f:db:7c:14:5a:35:86:5c:
         62:c4:d9:dc:92:44:c5:db:89:ec:56:1f:fb:79:2d:73:d6:cf:
         c6:d6:ec:f8:65:41:57:d2:e0:ba:c6:a1:65:a2:07:72:1c:f4:
         d1:ae:af:c9:ad:9d:11:36:b8:ef:66:c3:f5:07:a6:70:ba:41:
         4c:8a:83:b1:50:28:17:8a:25:5e:75:66:19:19:ec:03:5f:4c:
         ea:9f:6c:ce:f9:82:a9:bb:5f:2d:4e:d2:25:46:c1:2a:b9:a1:
         2f:3e:2f:9a:46:ac:1f:94:a8:3e:e7:a5:f0:d0:5d:11:71:b8:
         6c:0b:eb:ef:a4:3f:58:dd:3f:13:da:1a:a0:69:7e:25:c0:42:
         77:2f:c0:87:37:fd:4c:fa:53:1f:75:1f:e7:ca:de:ca:ae:81:
         9d:14:07:7d:0a:a7:76:60:bd:a8:ac:f0:2b:84:ea:64:e1:ff:
         d9:1d:0c:73:95:a7:89:3b:85:58:d6:32:0a:38:e3:b8:2d:c4:
         68:71:27:de:d2:43:d2:1a:ff:45:de:d4:89:11:c2:5e:78:fd:
         17:6a:c3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:37:39 2024 by rpki-client on console-ams.rpki-client.org