Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa
File:                     323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (raw, json)
Hash identifier:          PGM+RPYqD/0SwITZqydXWuhrSCRidz2ikSS8bdFxGqs=
Subject key identifier:   B5:85:95:F4:EF:1A:E0:ED:3A:0F:E4:4D:B8:3D:61:88:1F:B3:AC:DE
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       67EE80B25EDFB32981C906AD68BAD8260B3F86F6
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa
Signing time:             Thu 08 Aug 2024 19:07:31 +0000
ROA not before:           Thu 08 Aug 2024 19:02:31 +0000
ROA not after:            Thu 07 Aug 2025 19:07:31 +0000
asID:                     147137
IP address blocks:        2400:46a0:19::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
                          rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Oct 2024 06:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ee:80:b2:5e:df:b3:29:81:c9:06:ad:68:ba:d8:26:0b:3f:86:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: Aug  8 19:02:31 2024 GMT
            Not After : Aug  7 19:07:31 2025 GMT
        Subject: CN=B58595F4EF1AE0ED3A0FE44DB83D61881FB3ACDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9b:2a:7a:c4:14:8b:47:86:cc:f7:3b:55:29:
                    2f:ea:6d:48:8c:c4:b5:66:0f:8b:96:ec:15:c3:57:
                    19:00:b0:18:a6:ed:a7:9f:ca:48:ca:90:52:3d:75:
                    b2:2c:ba:0a:45:87:c3:9e:6e:07:dc:32:dd:d4:ff:
                    98:da:2b:9a:39:6f:f4:a9:39:6c:01:c1:87:f4:b6:
                    e6:82:26:95:2b:d5:fc:29:72:93:39:03:b4:ed:59:
                    8b:17:75:e1:06:b6:83:b3:3f:e3:26:98:25:74:13:
                    b9:bd:71:e8:be:ab:7d:86:bc:ae:27:eb:f8:67:93:
                    1c:ee:f1:b0:6a:39:e5:d5:bc:13:53:09:bc:6d:e4:
                    e6:bf:e7:7f:84:28:b1:79:bd:10:2c:79:01:47:be:
                    71:d5:ca:6e:53:06:05:8f:6a:f0:3e:b4:a1:12:01:
                    d9:1f:ec:a5:c4:ce:20:03:05:b2:89:af:d8:b2:29:
                    0c:60:28:59:c7:50:b1:55:eb:5b:af:b0:46:c6:ca:
                    1d:2f:da:6b:b5:e2:0f:4c:10:f4:26:89:29:ba:e6:
                    f3:2e:11:cc:ce:0c:06:c2:f8:46:f3:b7:7b:db:39:
                    a6:5a:c5:c2:5f:93:72:a9:86:f3:9a:04:ff:40:21:
                    d5:92:ca:b7:01:84:23:38:b5:bd:87:fc:8f:e6:24:
                    54:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:85:95:F4:EF:1A:E0:ED:3A:0F:E4:4D:B8:3D:61:88:1F:B3:AC:DE
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:46a0:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:9a:d8:3b:e5:ea:47:5d:69:9c:c0:80:5a:00:ef:f8:ec:28:
         c6:c2:89:6d:b9:80:7e:81:54:e2:d2:d5:bd:63:0e:78:40:52:
         e9:0f:ab:d4:25:f4:95:77:24:6d:dc:45:3e:13:4a:50:62:95:
         a3:6a:4c:ce:d9:3f:6b:fa:df:45:9a:dd:49:ad:65:0f:d4:4a:
         75:3d:8e:2d:29:1c:eb:93:04:6e:dc:56:2f:00:cb:f7:d0:1a:
         ca:73:6a:16:0a:3a:3e:99:45:69:2a:5d:01:fc:ac:93:c5:1c:
         eb:6b:48:15:51:0e:b8:ce:37:70:fe:fd:d8:c3:c6:94:e1:4a:
         ee:c5:2c:3e:6c:8d:86:ad:14:7b:81:51:16:7b:10:79:79:e5:
         9f:86:78:52:1b:95:0e:fd:78:05:3d:05:3a:b6:60:96:af:65:
         d5:4c:96:3d:db:a4:8d:37:8b:85:14:ec:d1:ad:c2:48:2d:a8:
         9d:e6:89:d8:ba:cd:2a:c5:8f:11:14:e2:07:06:44:8e:5b:2f:
         9b:59:70:45:01:36:3d:6a:7b:bd:4d:42:e2:fe:6f:23:92:29:
         92:3e:bf:1e:ab:d8:9b:a0:8c:c0:19:17:c7:f2:50:6d:a3:ea:
         11:1e:1e:83:6d:03:c5:f6:48:80:58:1d:93:fc:92:49:ed:48:
         c7:af:ac:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:37:39 2024 by rpki-client on console-ams.rpki-client.org