Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/323430373a613630303a3a2f33322d3338203d3e203138303034.roa
File:                     323430373a613630303a3a2f33322d3338203d3e203138303034.roa (raw, json)
Hash identifier:          m5f2/PQZBnSRAVWkTJR7EOnxHarbkXTzHD4hb1zSRtg=
Subject key identifier:   EF:81:60:1E:37:1C:2A:13:BE:87:A4:38:35:51:9F:80:1C:12:A6:B4
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       5DD8734FC7DE45FFDD5AD5E529091F5FD207CB86
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/323430373a613630303a3a2f33322d3338203d3e203138303034.roa
Signing time:             Sun 02 Jul 2023 03:00:02 +0000
ROA not before:           Sun 02 Jul 2023 02:55:02 +0000
ROA not after:            Sun 30 Jun 2024 03:00:02 +0000
asID:                     18004
IP address blocks:        2407:a600::/32 maxlen: 38

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 07:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d8:73:4f:c7:de:45:ff:dd:5a:d5:e5:29:09:1f:5f:d2:07:cb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Jul  2 02:55:02 2023 GMT
            Not After : Jun 30 03:00:02 2024 GMT
        Subject: CN=EF81601E371C2A13BE87A43835519F801C12A6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:bb:f6:ab:33:ae:a3:76:06:3d:76:d7:f1:
                    c2:bf:75:c4:f2:db:88:b5:1c:ef:4f:61:d7:bb:38:
                    d4:eb:1e:2a:cd:8e:be:93:4c:d7:a2:41:4b:eb:fd:
                    ee:f2:7e:3c:ad:9f:2b:57:28:14:a9:19:55:cf:76:
                    d8:46:43:95:8f:94:46:2d:df:30:00:a0:96:e7:bf:
                    6b:d6:ec:b3:14:b9:2f:b3:b1:dd:d8:8f:9e:b2:63:
                    b0:e6:75:a8:1d:97:ee:96:15:7e:d0:68:34:91:34:
                    db:f5:24:58:34:73:51:9f:d9:5e:6a:85:32:84:a2:
                    4e:d7:a1:8f:35:13:94:90:34:64:22:1e:17:a2:b4:
                    4e:77:39:27:29:58:68:a4:e7:f8:6f:58:25:26:d7:
                    bf:33:cf:6c:dc:55:38:cb:9d:c3:29:86:3e:6a:b7:
                    58:b0:60:75:e2:4c:e1:f0:95:17:30:dc:8d:ea:c3:
                    90:2a:63:67:43:41:1d:fd:c3:80:4b:bb:75:1d:a5:
                    30:4b:2a:dc:61:ed:af:08:c4:a0:30:e8:63:9e:c6:
                    43:54:b0:66:6c:78:c6:6d:ea:7a:14:d2:91:43:62:
                    59:d5:39:cf:a4:58:73:6d:7e:08:2a:93:b8:71:4e:
                    ec:0f:03:04:e8:4d:08:8d:bb:e5:31:ff:5c:57:3b:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:81:60:1E:37:1C:2A:13:BE:87:A4:38:35:51:9F:80:1C:12:A6:B4
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/323430373a613630303a3a2f33322d3338203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a600::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:d6:8c:61:21:89:f8:46:b4:d2:d7:5c:fb:93:43:77:d9:2c:
         23:59:db:27:03:87:7e:fb:a5:8c:ad:7c:e0:58:39:de:4c:77:
         c6:17:e6:4b:02:0f:74:11:d2:71:fa:5c:e0:bd:38:01:57:50:
         f3:d9:68:1c:4d:8a:2c:a6:ba:54:9b:5e:78:dc:66:4d:f8:4f:
         88:b2:3a:f4:45:6d:d2:3c:f6:11:67:62:18:68:c6:42:fa:14:
         e9:72:dd:28:72:99:a0:f3:19:e0:97:45:33:a9:75:3a:fc:50:
         30:79:3d:32:4c:00:01:70:0c:4d:5f:d1:8f:8f:f3:7e:c3:83:
         b5:58:a5:bb:48:a5:6f:9c:aa:8f:ee:d7:e3:46:2a:d4:a4:df:
         a5:64:41:b5:f2:af:95:32:42:ee:60:27:f4:8d:87:0a:e3:46:
         07:56:85:83:17:c5:3a:15:a9:5a:cf:bd:b9:15:24:42:da:cb:
         f8:83:d7:5d:e2:88:f1:f5:e8:36:9a:9e:a2:ba:13:ef:71:c4:
         77:35:1a:ce:d8:a4:c3:d5:93:1c:dd:56:b8:31:30:de:aa:92:
         06:a2:a5:a8:31:01:87:88:49:b1:ff:e3:2a:7e:56:7d:3d:39:
         9b:7f:d0:08:86:48:ee:bc:64:79:47:8e:d4:91:ac:ed:f9:8f:
         91:77:ab:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:00:59 2024 by rpki-client on console-ams.rpki-client.org