Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/323430333a653434303a3a2f33322d3332203d3e20313338303936.roa
File:                     323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (raw, json)
Hash identifier:          UjLhith7bY1e6MNaMaA8cP+v0+Avg21heUdRvJmZjew=
Subject key identifier:   4F:99:7D:6B:23:08:57:0B:AF:8C:5D:C0:1F:53:8D:DE:F1:7E:E0:41
Certificate issuer:       /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86
Certificate serial:       13575CD8C5D1649C417BB79067A547AEAEBB4A33
Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/323430333a653434303a3a2f33322d3332203d3e20313338303936.roa
Signing time:             Mon 17 Jun 2024 05:00:01 +0000
ROA not before:           Mon 17 Jun 2024 04:55:01 +0000
ROA not after:            Mon 16 Jun 2025 05:00:01 +0000
asID:                     138096
IP address blocks:        2403:e440::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl
                          rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 08:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:57:5c:d8:c5:d1:64:9c:41:7b:b7:90:67:a5:47:ae:ae:bb:4a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86
        Validity
            Not Before: Jun 17 04:55:01 2024 GMT
            Not After : Jun 16 05:00:01 2025 GMT
        Subject: CN=4F997D6B2308570BAF8C5DC01F538DDEF17EE041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:d2:66:74:f9:44:26:cc:50:0c:39:f5:36:
                    7d:40:41:a0:7a:1b:c1:f8:3f:c0:22:0a:55:cc:c6:
                    53:9e:e7:87:b6:23:f8:d4:c6:00:99:26:69:a4:d8:
                    46:8c:b3:37:4d:c9:35:34:a7:a3:54:8a:4f:f7:ec:
                    cd:c6:43:98:19:ab:e8:a6:ed:57:28:1b:51:7e:b4:
                    27:5c:9b:3e:83:c0:ff:fc:8b:31:c7:da:74:92:3c:
                    b4:93:c9:ed:04:f6:d7:59:ca:77:27:83:53:ff:be:
                    e0:de:bd:50:88:a5:3d:67:d9:77:c8:c1:37:b4:70:
                    f6:1e:c3:ca:83:d8:85:4d:c1:f6:e8:4f:26:8b:ae:
                    b1:04:89:3f:fd:c4:51:7a:98:86:92:ed:ef:b6:ce:
                    d0:e5:13:a0:2e:ad:03:e9:81:01:4a:51:e2:56:d0:
                    16:26:3e:4f:4c:3d:e9:8b:fd:9a:8a:71:e7:0e:c6:
                    c0:85:94:d6:9e:86:cd:be:0b:bd:11:f0:97:c4:02:
                    6f:31:e5:09:81:d5:a6:c1:e6:ca:fc:12:cf:b4:e4:
                    64:a5:d8:9e:40:7b:ca:81:19:53:c6:bd:d9:98:b1:
                    0e:fc:81:2a:db:8e:1f:4a:e4:e9:2c:75:5e:88:95:
                    92:0c:dc:e2:49:f0:53:e8:45:5b:e9:e8:0c:15:07:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:99:7D:6B:23:08:57:0B:AF:8C:5D:C0:1F:53:8D:DE:F1:7E:E0:41
            X509v3 Authority Key Identifier:
                keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/323430333a653434303a3a2f33322d3332203d3e20313338303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:e440::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:c0:4a:d5:75:e2:b5:e1:4f:50:c8:67:41:3b:f1:46:56:20:
         ba:c1:f4:46:42:ff:3a:b3:b6:ec:bb:07:71:ec:f0:b8:c9:2b:
         4a:ca:62:59:36:f1:da:43:ac:d4:3d:8b:82:04:96:3d:1b:95:
         57:5e:1a:be:7c:40:e2:4c:0c:b8:78:14:98:35:8a:cc:34:29:
         fd:6d:3f:30:c0:c3:82:07:e7:23:c6:f0:28:f8:8b:e0:16:90:
         ac:67:bf:ed:af:6e:08:e5:c8:04:6b:02:86:02:ed:3e:fb:57:
         fb:7d:b8:3e:b0:4d:b2:16:f6:7a:af:f5:67:4f:ef:37:ee:5e:
         79:73:9c:65:ad:4f:0c:d5:e1:1d:27:f5:99:4a:cd:c4:3f:8d:
         33:69:12:51:94:6f:ff:c5:0b:ee:30:32:27:38:d5:61:10:21:
         0a:03:b2:a5:b9:9e:2f:3b:f6:9c:8b:d0:71:80:1b:8a:73:c1:
         e9:ee:ca:c3:a1:9d:df:10:cb:b1:63:4a:65:f1:03:f7:da:c5:
         9e:82:cd:eb:62:aa:42:6c:5f:d7:72:6f:5a:4b:2f:04:6e:b1:
         2b:7a:78:8b:00:ce:2c:28:8e:48:4a:1a:4f:bc:af:d0:05:15:
         3c:f0:5f:c2:42:da:3c:63:cb:18:f3:98:53:e3:e4:0e:07:a1:
         38:2d:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org