Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa
File:                     323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (raw, json)
Hash identifier:          1cGLb6flF+sG9FbIeo7gqKEbomQnfYkuNhzZyM8ulKw=
Subject key identifier:   81:C4:17:47:D2:A8:96:5C:70:CC:27:82:0A:F2:33:A4:44:2A:D4:C6
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       6CADEC6F56F8692C7F255C6EDDD74C9C6326780A
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa
Signing time:             Fri 31 May 2024 03:00:06 +0000
ROA not before:           Fri 31 May 2024 02:55:06 +0000
ROA not after:            Fri 30 May 2025 03:00:06 +0000
asID:                     133827
IP address blocks:        2404:a640:66::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ad:ec:6f:56:f8:69:2c:7f:25:5c:6e:dd:d7:4c:9c:63:26:78:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: May 31 02:55:06 2024 GMT
            Not After : May 30 03:00:06 2025 GMT
        Subject: CN=81C41747D2A8965C70CC27820AF233A4442AD4C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:90:c0:35:b6:0c:36:a4:9a:2c:53:22:e5:
                    04:c1:a4:fc:6d:03:a2:74:6a:e6:b5:c1:ae:0f:a5:
                    17:e8:7a:20:1b:89:0e:84:ed:aa:9b:fd:73:81:7a:
                    83:19:f3:f2:fc:91:dd:b6:13:d9:67:4b:58:d5:e6:
                    45:9b:44:43:f0:af:cb:31:73:9f:e4:c4:6e:00:12:
                    62:15:d6:fd:c0:cc:6a:c7:7b:db:1c:60:71:03:92:
                    e6:76:be:83:d2:d9:bd:93:6d:74:0f:4c:76:c4:c6:
                    0c:f8:59:64:02:d9:22:40:f9:4c:3a:e3:9d:4b:f4:
                    df:f7:ce:16:53:b1:f4:db:5e:af:e5:f3:a6:fc:1b:
                    b8:e7:ff:61:9e:a7:83:91:10:aa:c5:cc:8f:fe:eb:
                    ba:fd:70:14:91:72:65:c9:b2:ee:77:04:56:8b:8c:
                    06:12:b4:38:bc:82:09:01:53:1f:36:21:60:cb:61:
                    4d:7c:33:93:d1:cc:ed:4b:33:c6:b6:76:00:d0:8d:
                    20:20:fd:7d:97:60:4d:82:7f:08:9d:a1:f7:97:4b:
                    1e:3a:ad:13:e2:e8:e5:b6:4e:31:c3:ba:3c:e1:63:
                    84:ca:27:ca:59:21:56:6a:c9:ff:cf:a3:fe:a1:89:
                    97:ba:08:68:2a:73:e9:aa:c7:9c:00:e6:8e:fc:ec:
                    40:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C4:17:47:D2:A8:96:5C:70:CC:27:82:0A:F2:33:A4:44:2A:D4:C6
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a640:66::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:e3:bd:7d:ef:3e:59:af:ee:c5:22:5b:d2:db:40:20:e7:b3:
         5b:b7:45:5e:b2:48:de:6d:65:40:0e:a1:50:95:2f:ea:08:ba:
         56:b7:45:a5:c9:19:e0:78:54:43:37:d8:7a:63:ed:23:3e:fd:
         ba:19:e7:9f:e0:9f:75:68:fd:ca:a0:29:f1:c3:28:d8:d6:c9:
         29:80:ee:c1:84:64:0a:03:af:82:ee:75:39:c2:fe:87:7c:84:
         4b:0d:0a:9b:c3:e1:0c:90:7f:9d:ad:7b:da:21:d6:3e:e3:d7:
         e6:d1:22:94:ed:a3:00:25:07:de:ce:0a:7c:c8:16:19:46:a4:
         b2:6c:c1:57:7d:4a:f8:e4:2e:93:79:61:a2:f9:81:f2:07:e3:
         3c:0b:74:28:30:db:13:04:3f:69:dc:49:3c:c5:cf:06:48:30:
         13:b2:93:c1:d2:d3:92:d0:9a:e0:78:4e:16:81:c7:7f:90:fa:
         a0:74:09:e4:e2:92:c8:78:f7:88:b5:fa:04:ad:7b:ef:cf:0c:
         06:0e:f2:cc:61:5a:c4:86:1d:4d:0f:8d:58:b2:25:26:6a:44:
         eb:ed:72:66:2d:eb:9d:15:50:b9:3a:16:38:3c:7d:7d:98:4d:
         21:33:b4:8d:9b:f5:df:1c:92:40:a1:45:bc:23:a8:ee:38:31:
         02:62:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org