Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          56KeQqs6JmBcvs5dV3CwEL100SrFXhFc+JTeePZn1vg=
Subject key identifier:   A6:7F:09:6E:F9:8D:E3:17:39:14:79:BF:57:73:31:D0:85:ED:76:35
Certificate issuer:       /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial:       07119150804079F089A287EAFC9399AF85C256D6
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Mon 19 Jun 2023 18:00:00 +0000
ROA not before:           Mon 19 Jun 2023 17:55:00 +0000
ROA not after:            Mon 17 Jun 2024 18:00:00 +0000
asID:                     139949
IP address blocks:        2405:aac0:13::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
                          rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 10:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:11:91:50:80:40:79:f0:89:a2:87:ea:fc:93:99:af:85:c2:56:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
        Validity
            Not Before: Jun 19 17:55:00 2023 GMT
            Not After : Jun 17 18:00:00 2024 GMT
        Subject: CN=A67F096EF98DE317391479BF577331D085ED7635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:87:b9:52:e7:9d:6e:66:80:65:0f:5f:62:
                    08:03:8a:c1:33:e2:38:18:b9:88:03:d9:84:26:51:
                    7c:50:58:7e:99:f6:21:06:71:69:06:86:c9:22:d3:
                    b5:b8:70:94:18:0d:f5:44:05:06:ed:29:97:34:db:
                    13:4c:52:13:b0:b3:93:66:5b:02:8e:3a:e3:38:58:
                    c8:04:a2:a0:3a:0c:93:92:ed:8b:88:3d:69:8b:51:
                    eb:68:00:94:6c:80:37:58:e4:81:83:31:95:02:07:
                    17:8b:48:0d:e4:f8:37:6e:e8:2b:20:83:49:91:71:
                    6f:ee:75:f9:45:7e:eb:1e:f6:e0:42:6b:71:9e:53:
                    45:13:ad:ce:6b:23:14:fe:d6:61:51:f3:c7:94:84:
                    22:b4:34:53:94:45:50:35:74:0d:91:c2:90:d1:99:
                    d5:d2:2c:46:00:6b:b7:1f:3b:ce:0b:ad:13:77:39:
                    b4:56:f1:f4:63:06:89:48:2d:f4:e1:ac:f7:87:e0:
                    3d:a5:d2:90:86:0a:66:34:e7:44:09:32:7f:87:b6:
                    81:ac:39:8f:e4:b1:1e:10:aa:c4:09:c0:f0:0c:f5:
                    5d:91:9b:6e:52:1b:52:e3:9d:8b:90:2a:52:20:e1:
                    13:09:b6:f5:fa:9e:61:c2:c2:a0:f6:4b:96:cd:82:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7F:09:6E:F9:8D:E3:17:39:14:79:BF:57:73:31:D0:85:ED:76:35
            X509v3 Authority Key Identifier:
                keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         ea:a4:c8:3d:5a:fc:d9:c7:35:a3:5e:60:60:59:34:f5:7c:ab:
         c2:16:0d:ef:41:8c:1d:c8:49:50:af:9a:fa:eb:6a:ef:48:c8:
         f7:23:3b:f9:e3:c5:ab:e5:c8:c7:66:ea:85:01:74:a9:c9:e7:
         42:92:4b:01:02:38:89:99:a2:ff:79:4e:31:9a:b5:47:09:4e:
         1b:da:a5:3f:fa:b7:ad:f8:d1:b0:87:f3:f8:92:bf:99:91:14:
         b0:dd:f3:5c:88:63:ab:a6:13:c2:cb:78:61:92:83:15:10:e5:
         87:f3:ec:74:63:3d:32:a1:0b:ff:b9:dd:1a:88:f2:0d:4f:7c:
         24:80:20:af:28:98:6a:1a:45:b4:0b:ae:4f:3e:a2:15:94:af:
         f3:94:66:54:09:11:c4:5f:6b:22:f0:77:6a:75:f1:9e:3e:97:
         b8:01:ed:f2:8e:df:f0:f5:72:ad:2b:ac:64:c3:1f:b4:55:84:
         d0:48:e2:b1:77:97:a7:6e:a1:4c:15:28:22:9f:f0:83:8c:a9:
         0d:cc:f1:10:b5:22:12:9c:56:75:7d:02:62:05:7f:af:49:89:
         e9:cc:44:05:7b:28:91:c7:36:0c:1b:8c:66:b4:d2:08:1b:8e:
         9b:a5:e7:f1:ef:c6:06:5f:86:58:23:a3:66:d3:76:1d:84:fc:
         be:5c:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:37:12 2024 by rpki-client on console-fra.rpki-client.org