Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a3a2f33322d3332203d3e20313431303536.roa
File:                     323430363a366434303a3a2f33322d3332203d3e20313431303536.roa (raw, json)
Hash identifier:          vPGDL5Uz+m1Ri6z0hdVmq01za5aH2UUg8pKyvgRNgpw=
Subject key identifier:   3A:45:CC:DE:D0:A8:13:47:B9:94:00:6B:76:92:56:2C:D9:12:99:66
Certificate issuer:       /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
Certificate serial:       1F9C8998BC1C0D849F54BB9B049EEAC23EB4DCC9
Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a3a2f33322d3332203d3e20313431303536.roa
Signing time:             Sat 05 Oct 2024 04:00:00 +0000
ROA not before:           Sat 05 Oct 2024 03:55:00 +0000
ROA not after:            Sat 04 Oct 2025 04:00:00 +0000
asID:                     141056
IP address blocks:        2406:6d40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl
                          rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9c:89:98:bc:1c:0d:84:9f:54:bb:9b:04:9e:ea:c2:3e:b4:dc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
        Validity
            Not Before: Oct  5 03:55:00 2024 GMT
            Not After : Oct  4 04:00:00 2025 GMT
        Subject: CN=3A45CCDED0A81347B994006B7692562CD9129966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:92:90:7e:6a:45:50:d1:cc:76:6e:86:07:9c:
                    78:fa:53:34:4e:1f:0d:ce:dd:19:db:70:44:79:9c:
                    d6:4f:ea:96:88:aa:ae:10:8d:79:7f:2b:16:ed:5c:
                    e7:f9:e0:aa:d1:17:9d:c8:3a:9a:d7:74:3d:e0:01:
                    6f:9b:9c:03:81:9e:b9:d3:a8:7e:08:0c:eb:c4:b7:
                    40:f8:9e:e1:18:31:54:9c:7f:b5:78:8d:46:b6:85:
                    6a:ad:2a:60:39:2e:10:81:82:f8:ad:a5:d1:b3:d8:
                    0d:d6:fb:94:f2:77:33:07:02:c1:8c:3f:72:33:ef:
                    88:e7:05:10:41:a9:3a:e9:2b:4e:02:30:93:c8:32:
                    87:13:7a:5f:39:00:2b:5c:0c:47:98:bd:d8:d4:57:
                    30:96:8f:cc:d8:08:61:2a:af:08:cc:b0:34:5d:bb:
                    d7:6b:a1:ac:e9:db:69:d8:70:2b:70:7c:a0:71:f6:
                    e4:e3:65:1c:69:a0:a5:6e:34:81:cf:b7:ec:87:f9:
                    44:e5:fd:ac:eb:17:cb:8c:d5:87:00:22:63:3c:d0:
                    ee:c5:b0:ff:f0:c7:72:ea:f1:67:49:99:a4:9c:bf:
                    c9:f5:54:6f:42:e8:06:50:1f:cf:09:d5:67:b5:c9:
                    4e:4e:a7:c6:b1:7d:a6:6b:6a:97:f0:a1:b6:77:ab:
                    77:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:45:CC:DE:D0:A8:13:47:B9:94:00:6B:76:92:56:2C:D9:12:99:66
            X509v3 Authority Key Identifier:
                keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/323430363a366434303a3a2f33322d3332203d3e20313431303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:6d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:37:bf:71:79:6a:e3:96:8e:7c:d4:b0:38:8c:fe:82:a1:c4:
         21:8e:4d:88:a7:35:ed:8a:80:37:be:9f:63:71:57:02:3f:2f:
         89:29:3f:c1:b2:1e:57:bf:f1:97:6f:c8:3e:aa:3e:53:38:9d:
         b8:62:ed:ca:3c:f9:3d:d2:65:90:99:8a:14:57:13:53:4e:3b:
         a5:b8:3d:cd:dd:ae:46:93:f2:ae:d2:b2:66:b1:9d:60:b8:54:
         6c:1f:37:dc:86:11:cf:ec:82:f7:e0:c7:6f:12:d2:97:1b:fe:
         7d:ee:cf:3a:f4:cd:23:85:b8:75:91:f0:5c:6a:b1:5a:77:21:
         8d:09:b1:7f:87:4f:19:08:db:5d:e4:12:65:60:97:26:9d:d3:
         6a:ef:c1:fb:07:f4:71:09:67:88:bf:f3:97:c9:9c:19:75:23:
         a0:9e:24:d7:a6:53:55:3d:54:44:09:06:a5:4f:62:4b:9e:a4:
         6f:bf:bf:aa:77:71:8b:cf:be:3c:62:1b:eb:0b:31:ac:de:3c:
         33:26:c4:1a:6c:0f:33:11:04:fa:42:97:77:c2:ad:fb:b7:64:
         fe:83:f4:74:84:50:10:c1:3b:1b:77:f1:ba:08:dc:76:fd:4c:
         47:7f:f0:e8:db:cf:08:76:56:2c:f6:bb:55:fc:ec:9a:09:51:
         eb:36:70:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:49 2024 by rpki-client on console-ams.rpki-client.org