Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          WceCY2QgYoFwa9oX5I+IJs584bk2xLnwvDjbK8kVQ4s=
Subject key identifier:   0E:A3:BB:D8:1A:A1:9A:73:21:A8:77:15:45:8E:98:BA:9D:A3:D2:31
Certificate issuer:       /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial:       74B7B2070692B9EB0E422A683B8B21691834B10A
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Thu 06 Jul 2023 05:00:00 +0000
ROA not before:           Thu 06 Jul 2023 04:55:00 +0000
ROA not after:            Thu 04 Jul 2024 05:00:00 +0000
asID:                     139949
IP address blocks:        2405:aac0:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
                          rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 10:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b7:b2:07:06:92:b9:eb:0e:42:2a:68:3b:8b:21:69:18:34:b1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
        Validity
            Not Before: Jul  6 04:55:00 2023 GMT
            Not After : Jul  4 05:00:00 2024 GMT
        Subject: CN=0EA3BBD81AA19A7321A87715458E98BA9DA3D231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:70:08:02:82:b7:8f:78:ce:f4:2e:fa:98:
                    36:46:33:2f:62:29:6d:b5:35:ff:f8:43:cd:7f:c2:
                    52:2c:7a:4d:0f:75:6c:23:a6:51:ed:0f:cb:78:ef:
                    ef:73:a1:e8:38:ec:c9:47:4d:26:ee:b0:d8:78:3d:
                    ee:1f:26:2e:c5:9c:22:7f:6c:ff:07:26:b5:1a:e4:
                    16:4b:0d:91:0b:80:e3:9f:0d:af:b4:46:1d:f3:2b:
                    e7:81:cd:2a:2d:3f:00:09:dd:76:f8:7a:8c:f8:f2:
                    ed:7a:33:84:ff:e0:ba:ee:83:4d:a8:c5:d6:7e:b0:
                    06:59:99:30:7e:8e:ff:70:ba:05:c7:f1:52:5f:13:
                    d2:58:a6:f8:d1:ca:42:a8:cf:2b:79:6b:35:b4:59:
                    c6:7d:5b:e6:a6:77:91:1e:67:8e:02:3d:37:39:b1:
                    43:62:89:d7:8f:9a:b9:5e:e3:d2:16:3a:bd:a3:f9:
                    67:51:90:cf:5e:8a:7a:d4:5c:81:c4:77:35:30:ce:
                    dc:c8:b4:1b:42:62:39:5e:a9:e8:b4:e6:5c:46:28:
                    55:b8:bc:1d:4f:ad:27:9f:98:87:ab:5e:08:fb:c8:
                    e2:5f:b0:85:c3:fa:1e:cc:81:1a:ce:c8:b2:73:27:
                    63:80:f5:c8:d1:d8:e6:b0:3e:25:03:af:bb:ba:44:
                    d4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A3:BB:D8:1A:A1:9A:73:21:A8:77:15:45:8E:98:BA:9D:A3:D2:31
            X509v3 Authority Key Identifier:
                keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:04:44:63:1f:3e:63:47:ca:b1:ee:49:01:1e:14:e4:7f:f8:
         42:2c:5a:30:d0:f1:b5:39:c9:dc:5e:e2:b5:46:92:f0:fd:09:
         b6:3a:80:42:6f:69:84:95:75:c1:51:be:36:5e:9e:46:4f:c2:
         4a:24:22:3e:c5:a7:9f:b9:52:5a:f9:91:ee:be:56:11:d9:9d:
         4f:07:10:3c:f1:d1:10:fe:3e:ba:f0:34:84:34:6d:94:d8:da:
         5f:99:1f:be:f2:dd:42:26:03:a6:98:ac:7b:70:0d:3e:84:39:
         cb:d1:65:b4:51:9b:31:ec:17:8c:5f:67:74:45:a0:22:8b:91:
         48:f8:68:39:78:f7:2f:d2:9e:09:6a:af:01:08:2a:a8:0d:2d:
         9d:e0:8d:5a:37:c5:e9:10:45:0f:8e:a4:3f:af:37:76:b9:09:
         54:50:65:b8:85:c5:2a:95:21:d0:5a:be:e4:ef:f3:75:ef:68:
         91:eb:c8:be:7d:7e:0d:52:03:ca:1b:4c:13:f0:ca:77:44:63:
         7c:98:27:db:10:d6:fc:5c:9f:eb:b0:f9:d8:12:f5:96:1e:5e:
         06:c0:ea:8a:56:86:d9:6c:9c:5e:5b:d7:09:c0:86:f4:19:04:
         28:92:11:c4:9c:5b:d1:0c:f0:89:ac:30:90:2f:ef:62:60:82:
         d0:08:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:37:12 2024 by rpki-client on console-fra.rpki-client.org