Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          O9133om7NZyf516vJmhBqe0GTNpePpXSB4u9RMPfgzg=
Subject key identifier:   06:EA:C4:47:A8:ED:43:B7:6A:BF:BE:6D:59:B4:57:C2:1E:97:B1:9C
Certificate issuer:       /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial:       6B722AE247C4C3C67BFDE72CDB6B37FF87B5730E
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Mon 20 May 2024 18:00:00 +0000
ROA not before:           Mon 20 May 2024 17:55:00 +0000
ROA not after:            Mon 19 May 2025 18:00:00 +0000
asID:                     139949
IP address blocks:        2405:aac0:13::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
                          rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:72:2a:e2:47:c4:c3:c6:7b:fd:e7:2c:db:6b:37:ff:87:b5:73:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
        Validity
            Not Before: May 20 17:55:00 2024 GMT
            Not After : May 19 18:00:00 2025 GMT
        Subject: CN=06EAC447A8ED43B76ABFBE6D59B457C21E97B19C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7e:76:2d:9b:ab:46:1a:8a:40:39:1e:ca:ec:
                    50:2f:72:6b:24:45:f8:9d:17:b1:d6:c5:38:81:d2:
                    d5:21:79:5e:48:fa:6a:0c:1d:ca:00:64:c5:ce:eb:
                    15:66:19:ff:a8:63:d8:86:06:e9:a8:20:51:72:20:
                    b3:b8:13:12:89:90:e8:22:a1:26:c1:0a:2b:44:63:
                    ea:84:5b:f3:87:38:90:c9:20:ef:0d:6e:e2:da:a2:
                    01:4d:02:24:14:55:a5:dc:94:b0:4d:b6:45:22:ca:
                    ef:25:6d:89:7a:3d:93:12:b2:32:f5:9e:6d:8c:bd:
                    e1:0c:37:71:1d:a3:9d:c9:41:13:1f:41:a9:3c:8b:
                    4b:34:dc:08:76:80:88:53:e7:5c:d6:1c:37:b6:1d:
                    38:1f:46:f6:b5:31:a7:84:7a:8d:3e:c4:6e:31:58:
                    3e:e9:be:cc:ba:35:ff:79:06:28:54:23:f6:ad:a7:
                    08:19:0e:82:83:13:b9:96:df:43:65:16:f5:d2:3e:
                    48:93:f4:04:1f:37:a5:03:a3:75:e9:18:14:67:29:
                    b1:77:d0:9a:85:1f:a6:2c:5c:4c:ce:b9:69:ec:fb:
                    26:7c:a7:b6:20:fe:f5:7c:8d:0d:b7:14:95:83:54:
                    6a:fa:32:89:86:6a:11:8a:b5:e4:2c:7c:70:a2:b7:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EA:C4:47:A8:ED:43:B7:6A:BF:BE:6D:59:B4:57:C2:1E:97:B1:9C
            X509v3 Authority Key Identifier:
                keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:d1:cd:8f:3d:9f:c0:c0:ef:6c:f7:cb:66:60:29:05:54:0c:
         ce:84:be:3a:b8:12:5c:1e:cc:9b:0d:b8:9d:07:9f:21:48:85:
         41:97:69:21:39:c4:51:31:22:e0:56:43:0b:ec:57:68:90:7e:
         72:ea:3e:63:b2:5b:5e:17:6a:8f:81:b2:34:56:8b:5d:76:f0:
         0a:ec:86:53:3f:1c:80:7a:62:b1:a2:4d:d5:5f:5f:f0:34:0f:
         44:62:61:90:95:ff:96:3e:67:a0:e8:10:fe:b8:8b:53:85:70:
         74:0e:2e:aa:34:2d:77:7f:86:ac:03:05:73:5b:c5:b4:9f:c3:
         a4:63:a9:42:00:c0:6c:8a:1b:43:5f:cc:e3:4c:f4:d8:d7:cb:
         32:8c:93:5a:73:70:a2:c9:a5:ce:88:04:e6:8b:5c:a4:50:3f:
         ff:4d:7c:f9:6f:35:ba:29:52:7e:9f:03:b3:f5:b1:e2:e5:0f:
         f1:3e:0d:7f:0a:cf:7d:4b:c9:dc:3c:12:d7:1c:1f:e6:7d:86:
         b3:20:a5:c9:ac:47:81:33:13:68:2a:f2:a3:5c:c7:15:49:4d:
         c7:6c:0f:b3:6e:44:40:ed:c4:96:ce:6b:8f:8b:97:98:57:7d:
         58:28:74:8a:b2:92:a0:c7:4d:4d:0b:6d:e2:b7:4e:37:c6:d2:
         60:67:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:32 2024 by rpki-client on console-fra.rpki-client.org