Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa
File:                     323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier:          TSbP4ikAEQubVoBKgAuN+KABpg5nmhinI4Edt7MBPdw=
Subject key identifier:   47:B8:44:B6:30:9D:8D:FB:F1:4C:9C:35:99:9E:64:7A:D6:93:6B:7E
Certificate issuer:       /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial:       2F42E8425DBA38460F1CD599C0F5084E52137931
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa
Signing time:             Tue 21 Nov 2023 12:00:00 +0000
ROA not before:           Tue 21 Nov 2023 11:55:00 +0000
ROA not after:            Tue 19 Nov 2024 12:00:00 +0000
asID:                     139949
IP address blocks:        2405:aac0:fe::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
                          rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 10:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:42:e8:42:5d:ba:38:46:0f:1c:d5:99:c0:f5:08:4e:52:13:79:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
        Validity
            Not Before: Nov 21 11:55:00 2023 GMT
            Not After : Nov 19 12:00:00 2024 GMT
        Subject: CN=47B844B6309D8DFBF14C9C35999E647AD6936B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6a:db:25:a5:8c:6e:18:40:a6:06:35:75:c9:
                    e4:33:74:73:6d:d9:dd:07:d9:d4:d6:55:57:ef:21:
                    3d:66:50:14:b0:5c:b5:52:94:fb:ea:61:5c:72:1b:
                    b8:71:c4:4c:b6:d8:02:ec:c1:b6:0f:6d:a2:00:61:
                    80:1e:e5:0f:e9:c4:a5:3e:a5:47:0e:d6:17:73:6e:
                    e4:1a:13:e0:3f:71:bb:00:a2:58:f6:49:b2:12:00:
                    39:ba:3c:46:b5:35:c9:46:91:fb:a2:e1:b4:27:c1:
                    7f:3c:cb:f0:50:a0:57:72:28:39:b9:c3:3b:1d:7d:
                    55:7b:85:cd:78:08:ad:ff:68:1e:90:3d:bf:5b:95:
                    af:f2:f6:11:cf:c5:b3:9e:55:f0:f5:b9:84:10:9d:
                    d0:02:a6:70:74:99:e8:a8:3c:74:4b:43:17:d1:3c:
                    fe:31:95:48:70:2f:53:e9:dd:25:8d:0e:c8:42:87:
                    52:5a:36:b0:b8:b5:97:ae:a2:f2:62:a5:6d:72:65:
                    09:94:5f:2b:89:91:81:14:8f:4a:97:85:75:cf:b9:
                    b5:c1:47:f7:61:9f:b6:ae:81:63:5b:92:54:ad:d4:
                    ce:7d:d8:5b:86:a0:66:16:86:e5:e0:d9:6b:df:ab:
                    6a:ad:42:1b:a9:ee:24:25:06:e2:ae:c4:62:bc:8e:
                    20:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B8:44:B6:30:9D:8D:FB:F1:4C:9C:35:99:9E:64:7A:D6:93:6B:7E
            X509v3 Authority Key Identifier:
                keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aac0:fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:cf:68:12:ce:a1:53:6d:a5:6a:84:58:6d:7b:01:72:b0:13:
         32:ce:c3:40:62:0f:b6:ef:b8:03:0b:f8:cf:3f:c9:0e:43:80:
         48:18:5e:80:49:1b:6d:fb:7b:d1:99:08:83:14:ba:b3:cb:1d:
         9b:2d:65:98:7f:eb:88:4f:42:e5:4c:44:e7:47:c4:6d:2e:28:
         64:79:46:ef:4d:ee:bb:6c:33:c8:db:c2:d0:e8:0d:ab:d1:92:
         b5:1b:a7:87:1a:7e:ae:63:71:4f:74:d7:86:86:e6:73:9e:49:
         b1:70:d8:fe:82:ef:d9:d8:2b:f0:4f:25:3b:3e:23:64:0f:93:
         f3:94:f9:e8:7e:58:7f:e1:cc:6f:47:b4:b5:ef:b1:ea:a9:66:
         8c:94:87:a9:45:b9:88:f6:8d:7a:87:af:95:2c:e7:d0:d0:5e:
         ed:ad:db:81:88:1d:1a:aa:ae:02:6e:bd:a9:08:66:44:4c:7f:
         86:95:39:cb:a2:fa:7e:08:84:35:5c:22:08:61:0c:45:57:d3:
         62:e2:9a:60:2c:65:ec:32:82:72:4a:4d:e2:e7:86:1d:b3:98:
         01:ef:42:e4:3f:67:64:bb:95:09:60:81:33:8f:0d:d6:7d:e1:
         dd:30:36:1d:9d:d9:7e:01:d8:f8:38:72:d6:a3:5d:15:12:00:
         14:8c:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:19:49 2024 by rpki-client on console-ams.rpki-client.org