Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa
File:                     323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (raw, json)
Hash identifier:          UmJXjjnGUW98bKuzrgmGypxlZo4J64Wat531ZfjB3Ms=
Subject key identifier:   17:96:F1:05:94:98:B3:05:C9:85:08:46:A9:BC:C6:0B:FF:71:51:0E
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       2425329E266C9BF90054FCACCD96347A99AFF112
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa
Signing time:             Thu 08 Aug 2024 19:08:06 +0000
ROA not before:           Thu 08 Aug 2024 19:03:06 +0000
ROA not after:            Thu 07 Aug 2025 19:08:06 +0000
asID:                     147137
IP address blocks:        2400:46a0:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
                          rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 15:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:25:32:9e:26:6c:9b:f9:00:54:fc:ac:cd:96:34:7a:99:af:f1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: Aug  8 19:03:06 2024 GMT
            Not After : Aug  7 19:08:06 2025 GMT
        Subject: CN=1796F1059498B305C9850846A9BCC60BFF71510E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:f8:04:65:2d:e5:53:e1:10:8a:42:49:26:
                    7d:f8:98:bc:5b:73:08:30:a0:89:aa:ab:62:6b:4a:
                    bc:ff:a9:ae:2f:b8:9d:80:a4:ba:f9:2f:84:ab:ab:
                    0b:16:fd:d7:c4:7b:bc:14:54:5e:6d:cf:79:bb:46:
                    f0:e5:ec:47:c3:c0:c3:68:cc:66:6e:a2:73:b5:f0:
                    1e:e3:e0:a5:55:08:60:6b:2e:9a:01:33:e7:57:0f:
                    f4:cf:5e:11:40:b2:11:a6:0c:96:a0:99:ad:e8:6a:
                    23:3e:66:07:b9:c2:24:53:d5:d0:f1:3a:52:41:bf:
                    3d:44:72:a6:78:3c:0a:35:b3:75:11:8b:e6:1f:5c:
                    76:f6:30:88:02:ef:6e:57:ea:93:a2:d4:dc:2e:b2:
                    48:91:c5:20:eb:75:e5:f5:c2:8d:eb:22:58:47:1d:
                    12:32:03:46:b1:b5:96:ad:74:87:48:17:14:14:62:
                    db:55:80:20:f2:7e:55:2b:0f:26:4f:42:8c:e1:33:
                    1e:59:8f:b6:9a:2f:5d:88:6c:af:ec:ec:4b:87:ef:
                    68:ef:2d:1e:12:49:b3:23:e4:a7:ca:86:02:35:7c:
                    1f:ad:0e:c2:f2:c9:93:c3:08:8a:42:ef:50:35:49:
                    59:82:f7:3b:14:58:4b:51:b0:d8:30:36:9c:7b:37:
                    6d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:96:F1:05:94:98:B3:05:C9:85:08:46:A9:BC:C6:0B:FF:71:51:0E
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:46a0:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:d2:27:cb:89:ce:26:46:4d:c2:a7:1c:3d:61:8d:53:89:8d:
         58:ba:f5:5a:f6:9c:0c:48:35:12:13:95:f9:2a:d7:a5:73:57:
         50:5d:7a:70:4f:40:72:dc:a9:76:c6:f5:00:99:c7:5c:71:2b:
         6b:15:4a:44:62:c1:ca:49:dc:a3:ee:f4:c2:57:1e:44:c3:87:
         c9:49:5d:49:11:04:33:f2:36:dc:33:5e:0b:16:18:eb:c0:5b:
         7a:d6:7f:c5:9f:ff:28:d6:b7:cb:c4:5d:51:45:47:bc:80:b5:
         27:b9:f0:26:8f:26:44:af:4b:52:73:5e:ba:78:3c:42:27:6d:
         6e:f6:13:bc:df:87:ba:b3:e2:d6:d1:3d:60:1a:8d:d4:30:6a:
         b6:45:0b:3c:97:b7:2f:21:78:27:1c:a2:57:37:d7:14:26:eb:
         16:d6:9c:62:e0:a3:fb:6b:45:cc:01:41:7d:0a:fe:f8:48:aa:
         15:02:05:e0:f3:60:1f:de:19:f3:ac:6d:eb:92:0e:a3:8f:38:
         d6:3e:67:08:e9:c8:2b:e2:21:e9:29:47:3e:76:e0:c5:50:b1:
         a0:d7:4e:11:06:3b:bb:a0:fe:5c:74:84:0f:9e:9e:b7:d4:81:
         58:e7:e1:55:20:71:c5:1c:96:21:25:de:79:ce:70:05:94:17:
         8a:9e:bd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:01:43 2024 by rpki-client on console-fra.rpki-client.org