Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3a2f33322d3332203d3e20313339343139.roa
File:                     323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (raw, json)
Hash identifier:          bKrbBC55rwvL7th1EkrT2ahO/qEfrCcBth/UGnzXcLE=
Subject key identifier:   C8:10:A6:A8:C2:11:6B:EE:83:FA:AD:76:5E:FC:43:14:D9:B4:F1:79
Certificate issuer:       /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial:       5DAF43DE070A4EDB3986FED458CD3A073FAAE697
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3a2f33322d3332203d3e20313339343139.roa
Signing time:             Fri 14 Jun 2024 14:00:00 +0000
ROA not before:           Fri 14 Jun 2024 13:55:00 +0000
ROA not after:            Fri 13 Jun 2025 14:00:00 +0000
asID:                     139419
IP address blocks:        2405:6740::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
                          rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:af:43:de:07:0a:4e:db:39:86:fe:d4:58:cd:3a:07:3f:aa:e6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
        Validity
            Not Before: Jun 14 13:55:00 2024 GMT
            Not After : Jun 13 14:00:00 2025 GMT
        Subject: CN=C810A6A8C2116BEE83FAAD765EFC4314D9B4F179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:8f:37:80:7f:23:40:93:28:47:a7:97:4f:
                    28:85:b3:2d:66:5d:d9:e4:f6:79:29:16:24:e8:80:
                    ab:e3:d5:53:b2:09:cd:2c:4c:ab:02:6c:cb:97:28:
                    2a:d9:5c:9d:73:aa:14:c2:69:76:eb:0f:7b:51:9e:
                    1c:5e:4d:f7:29:a5:f0:3c:6f:ad:c1:74:a7:e7:f5:
                    0e:fb:79:92:7b:f6:47:f3:0d:17:91:93:24:54:2b:
                    4b:fc:d8:02:b9:94:e2:a7:8a:12:77:a7:a6:50:f1:
                    22:84:48:61:04:ee:7f:35:4d:30:31:e0:0f:0d:2f:
                    07:fd:33:c7:45:f9:f7:4d:11:b8:9a:81:ce:82:cd:
                    6a:fc:b4:15:af:fb:87:25:f5:c2:e6:f0:4f:0b:ac:
                    95:18:f4:58:1e:7e:bf:9f:9a:a5:b2:4b:7c:76:60:
                    96:8a:b4:82:c9:dd:98:7c:ab:5d:ce:e8:e0:f3:17:
                    ca:22:73:09:89:3f:97:ba:88:0f:07:80:c0:2c:39:
                    aa:3a:f7:cd:74:15:04:a6:76:a4:4d:4b:f6:90:c6:
                    6d:1a:15:2a:3f:13:26:43:60:07:90:e3:e4:6f:1d:
                    62:d9:3c:fe:64:68:99:0d:30:23:dc:1d:7a:73:d7:
                    b4:53:82:8c:95:02:bf:c0:b9:4a:79:52:04:ad:72:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:10:A6:A8:C2:11:6B:EE:83:FA:AD:76:5E:FC:43:14:D9:B4:F1:79
            X509v3 Authority Key Identifier:
                keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3a2f33322d3332203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:6740::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:4e:b2:6f:05:c9:6d:ce:d4:1b:4d:a3:51:30:98:67:cc:4d:
         45:e0:1b:c8:39:52:4b:07:69:da:e3:97:25:20:61:0a:1f:3d:
         cc:f1:e3:0c:a9:8e:3b:15:81:e2:c0:5a:19:bf:85:13:19:ee:
         78:d1:82:01:d8:8a:15:7c:61:c7:5e:87:a6:82:53:2c:45:13:
         82:4d:11:5e:06:88:fa:1c:32:5b:62:e1:f0:68:04:78:50:d6:
         c9:0c:24:94:ee:37:6d:74:e8:3e:ca:6a:b1:6f:d1:fb:96:a4:
         39:97:14:0a:32:74:bb:72:78:d7:e6:cd:44:c3:d4:c4:a7:f2:
         6f:65:e9:71:67:9f:1d:37:25:77:73:7f:c6:4a:ef:a7:7b:85:
         17:67:aa:61:9b:10:29:ab:13:c4:26:e9:59:a1:64:36:01:37:
         b3:1c:c3:f8:75:ed:2e:4c:82:a3:e6:d3:c3:76:d5:49:ba:cb:
         37:3f:0b:57:c0:fa:5b:92:1b:da:e7:c6:d7:06:69:0b:0b:c7:
         f3:52:2b:8d:41:64:6e:6f:3d:cb:3e:e6:59:79:ee:9a:b1:43:
         db:4d:12:ab:39:6d:13:87:42:39:8a:81:a5:87:03:80:15:ec:
         72:59:b9:17:91:19:91:d7:f3:ad:32:85:64:d2:e1:7a:d9:5a:
         ee:58:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org