Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa
File:                     323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (raw, json)
Hash identifier:          lx3+LLlQ4WnCMnKdcVANXgIMuP9AcgN7h+mv0gF7DvQ=
Subject key identifier:   36:37:C1:B6:1B:A0:A8:C2:6B:6A:6F:F0:48:04:40:C9:94:36:AA:B1
Certificate issuer:       /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial:       560FE3BD4C071A46DAE89A4C5FEB78C5468714D6
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa
Signing time:             Wed 15 May 2024 10:00:00 +0000
ROA not before:           Wed 15 May 2024 09:55:00 +0000
ROA not after:            Wed 14 May 2025 10:00:00 +0000
asID:                     139419
IP address blocks:        2405:6740:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
                          rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0f:e3:bd:4c:07:1a:46:da:e8:9a:4c:5f:eb:78:c5:46:87:14:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
        Validity
            Not Before: May 15 09:55:00 2024 GMT
            Not After : May 14 10:00:00 2025 GMT
        Subject: CN=3637C1B61BA0A8C26B6A6FF0480440C99436AAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:27:83:ab:bb:0c:03:a0:4e:49:9e:39:20:
                    21:b9:c9:a1:47:4a:a7:6c:b7:3c:29:67:ca:6a:51:
                    9b:d4:0a:44:04:62:8f:9b:3e:7d:90:da:d1:20:27:
                    f3:8b:7e:7e:c1:ab:da:93:4a:ac:bb:9a:80:c3:45:
                    f1:82:e1:71:be:19:d3:35:9b:08:a8:b6:f0:16:bb:
                    97:f6:bd:49:40:c2:87:a4:5e:64:c6:67:de:a0:6d:
                    00:da:1a:1f:d4:a2:18:78:63:b1:53:93:9d:62:ba:
                    76:a6:1a:c5:32:99:59:a9:30:53:72:e5:d0:6b:a2:
                    0a:1a:c3:1b:44:d8:79:5e:9c:bf:68:f9:5c:1e:f6:
                    35:e6:21:c1:2c:eb:c1:e2:1d:a8:46:4f:73:32:2f:
                    57:01:e7:e0:22:08:39:5d:41:95:b5:1a:c4:56:5a:
                    9a:21:c9:13:20:ac:6e:3d:a4:46:ee:ee:b2:89:23:
                    d5:b1:c4:8b:36:e2:8b:0a:07:43:05:0c:a4:7e:cc:
                    35:3d:31:90:7f:bc:9a:11:0e:1c:ff:fd:8a:ee:42:
                    3e:60:f0:eb:d8:ec:b5:c7:6a:53:01:b2:bf:cf:41:
                    1a:0a:52:f8:d3:8a:7b:3d:32:2a:cb:cf:83:91:7d:
                    42:d2:8f:38:36:b1:71:2d:11:2b:1d:7a:6d:7e:59:
                    60:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:37:C1:B6:1B:A0:A8:C2:6B:6A:6F:F0:48:04:40:C9:94:36:AA:B1
            X509v3 Authority Key Identifier:
                keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:6740:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:57:4a:14:94:1d:5a:dc:50:81:d9:e6:9e:fe:2a:3c:9f:11:
         75:18:49:80:ed:51:43:8b:4e:d1:9a:37:08:1d:81:ce:84:69:
         a6:1e:f5:5b:83:66:06:51:ad:43:6b:75:fc:3a:9c:a3:41:e6:
         b4:94:d7:06:a7:6d:8c:b1:12:a0:d0:ab:78:26:d1:97:c9:93:
         a4:18:5b:aa:c2:39:b9:63:67:6d:6c:2f:e6:d5:dc:80:22:20:
         d6:3e:ea:28:2d:ad:14:89:2a:e5:dc:d2:02:b3:ec:d3:88:9e:
         89:00:b3:c2:4f:a2:e1:f8:51:a9:03:cb:d3:ab:bf:8b:68:2a:
         04:8a:7e:a7:6d:92:30:3a:b9:56:0f:8e:4e:40:9b:a8:1b:c3:
         92:61:63:eb:a8:61:29:8d:80:4f:d2:7a:90:b2:2a:75:de:c3:
         78:d4:5c:d3:74:7e:9b:7a:ec:05:e2:2c:b5:6a:de:8e:4b:7c:
         d5:a6:6b:ca:df:cc:de:19:b4:a0:2b:2e:d2:cc:0c:41:28:f6:
         1b:cd:c6:18:0e:f0:5e:94:24:d7:64:d8:c3:7b:e1:f2:09:cd:
         e9:d6:2f:ba:ad:c8:d3:12:a8:17:f9:c0:2e:a8:18:e9:61:51:
         ac:66:43:7f:63:86:5e:f4:a4:19:30:86:4e:5f:6c:1e:3a:61:
         c3:8b:7a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org