Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa
File:                     323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (raw, json)
Hash identifier:          OG5Z9CpKWxd1W4YOSrj5Xk//pa9S5164fCU9LE6L+sg=
Subject key identifier:   4F:89:F1:5B:60:0A:B0:75:B6:BE:E2:F0:24:74:8B:31:94:55:16:16
Certificate issuer:       /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial:       0B92A9E11CBF5330AD946F2DE89D8E3047BB9781
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa
Signing time:             Wed 15 May 2024 10:00:00 +0000
ROA not before:           Wed 15 May 2024 09:55:00 +0000
ROA not after:            Wed 14 May 2025 10:00:00 +0000
asID:                     139419
IP address blocks:        2405:6740:a0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
                          rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:92:a9:e1:1c:bf:53:30:ad:94:6f:2d:e8:9d:8e:30:47:bb:97:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
        Validity
            Not Before: May 15 09:55:00 2024 GMT
            Not After : May 14 10:00:00 2025 GMT
        Subject: CN=4F89F15B600AB075B6BEE2F024748B3194551616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:41:51:df:82:d8:fd:af:8f:86:28:f9:ff:
                    da:e9:77:06:90:01:c1:a2:cc:0a:2e:8f:f7:dd:2f:
                    44:c8:bd:97:ac:a1:19:c7:69:19:70:e0:da:24:0e:
                    34:0e:e0:ff:43:ce:f2:13:31:73:3f:b8:18:7c:ca:
                    97:1a:71:9b:85:80:0b:41:18:2c:90:5d:9c:89:6a:
                    4f:69:0b:d1:d1:fa:a5:dc:50:27:76:9f:61:77:fb:
                    91:a2:87:ae:07:99:c4:cc:9c:1e:62:36:e3:22:03:
                    9e:e0:35:db:54:50:b7:59:2d:ff:f6:f6:2c:32:cb:
                    6d:ba:2b:2c:e4:d6:50:5e:a5:f1:71:cf:07:a7:4a:
                    42:a1:7f:5a:76:7e:ba:3c:8c:12:46:af:fe:7d:e7:
                    10:aa:ad:d4:07:64:74:7e:c9:ec:5c:9b:e6:f4:fb:
                    ff:9f:e2:6a:91:7d:4f:8c:66:27:54:fa:b2:b9:34:
                    4b:83:f7:23:ae:06:02:c9:81:18:e5:5f:da:27:28:
                    28:d1:55:a0:df:18:1b:36:a4:c3:8a:15:7f:e8:eb:
                    26:57:c3:1f:8d:c9:38:30:8f:55:db:60:d0:17:7d:
                    3b:d7:3f:fb:ac:fd:f7:dd:19:c5:b3:eb:05:54:99:
                    bd:b1:2f:93:12:39:23:2f:62:cf:a7:d2:53:6e:1b:
                    d4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:89:F1:5B:60:0A:B0:75:B6:BE:E2:F0:24:74:8B:31:94:55:16:16
            X509v3 Authority Key Identifier:
                keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:6740:a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:0b:9c:e2:54:9a:3e:f6:08:71:ca:2b:87:2a:bd:d8:dc:4e:
         fb:70:16:89:97:7a:d1:3b:1d:ca:8f:15:61:82:1c:18:26:0e:
         e1:57:df:76:a2:ca:cf:3c:ef:fd:af:74:dc:5e:e5:e5:25:42:
         e9:47:09:e2:10:ba:05:8e:33:fe:ea:e5:0c:63:27:5d:61:77:
         fd:4d:ff:7a:ce:fa:21:8b:16:7c:c4:84:e8:19:ca:62:d1:36:
         aa:e0:9d:e8:56:63:06:89:bb:e0:07:6c:09:e8:55:91:6d:a2:
         92:34:9c:23:88:7b:45:ff:4f:e5:30:c1:5e:e0:f4:cb:e4:c3:
         9b:d8:18:f1:ff:b0:53:92:d2:23:6f:8e:4c:74:96:77:f7:7a:
         49:c5:cf:16:f2:4c:9c:e5:17:4c:4c:8b:f9:36:74:54:5b:f5:
         9e:d4:d3:54:5a:84:d5:e6:5e:d2:56:b9:91:c5:59:2b:60:6f:
         40:2a:61:b6:59:01:43:04:cd:6a:6a:de:47:d4:d8:6f:02:b2:
         75:7f:f2:b7:fa:9a:ee:81:b7:95:b2:39:fd:27:22:93:c8:43:
         07:54:f5:2f:43:a0:09:a3:f3:6b:4c:d8:10:83:a0:3c:e8:39:
         12:35:2c:e1:59:57:66:68:bb:60:03:7c:3a:24:4c:c4:ad:54:
         27:69:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org