Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa
File:                     323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (raw, json)
Hash identifier:          JeTZeiHc0ObZ6NTa9su8J3fL4BDL7P59zUbcfeYDg+8=
Subject key identifier:   AB:C7:3F:BD:D6:C1:32:BF:4D:89:CB:84:2E:B5:EA:BB:45:3E:E9:CD
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       481AA33F54DDBA844E249C0F2E0D2F5882FE21D0
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa
Signing time:             Fri 12 Apr 2024 04:00:00 +0000
ROA not before:           Fri 12 Apr 2024 03:55:00 +0000
ROA not after:            Fri 11 Apr 2025 04:00:00 +0000
asID:                     138089
IP address blocks:        2403:e0c0:13::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
                          rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1a:a3:3f:54:dd:ba:84:4e:24:9c:0f:2e:0d:2f:58:82:fe:21:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: Apr 12 03:55:00 2024 GMT
            Not After : Apr 11 04:00:00 2025 GMT
        Subject: CN=ABC73FBDD6C132BF4D89CB842EB5EABB453EE9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:06:57:ba:16:89:be:5e:47:c2:24:1e:c3:
                    fa:b9:5b:0f:0c:7f:63:7a:ea:81:1c:c5:1b:87:77:
                    a8:b8:b5:5a:06:fc:dd:19:da:7a:f1:bd:6d:31:9e:
                    d4:7e:32:79:dc:f4:cf:9d:33:a1:ee:76:ed:89:c2:
                    78:92:7c:88:aa:74:67:94:94:1a:35:0c:cb:6e:08:
                    e8:81:3e:05:84:ca:f9:23:83:53:93:63:eb:8b:01:
                    28:6c:53:9c:7b:ce:a5:9f:6f:f6:c2:b5:83:30:0b:
                    b2:5c:fd:02:56:b9:c4:77:13:22:28:5e:cd:68:d9:
                    11:fb:58:02:1a:99:b8:99:3e:fb:ba:47:33:9d:03:
                    46:53:38:dd:49:42:ac:8f:5b:42:a4:3c:15:40:49:
                    28:81:e6:4c:07:6a:81:a7:6b:74:54:84:b0:d1:3a:
                    48:a7:ea:51:80:e7:ef:60:23:cf:b0:2c:45:c9:1f:
                    f6:be:0b:d9:47:5b:e9:f1:73:bf:cb:9a:b7:0c:18:
                    cd:a6:c6:db:9a:73:f2:b3:6d:95:d5:84:7e:1b:9f:
                    3d:56:5a:a5:21:d4:c4:a1:19:0e:fa:00:df:f1:89:
                    95:51:f3:b1:ab:a7:b3:ca:e6:d4:71:e7:55:b3:95:
                    f9:b2:21:62:a4:c6:cb:36:1a:28:37:cf:65:a7:ae:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C7:3F:BD:D6:C1:32:BF:4D:89:CB:84:2E:B5:EA:BB:45:3E:E9:CD
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:e0c0:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:1a:19:0d:fd:36:0f:65:6f:86:2b:92:f5:38:f7:2d:65:2d:
         d3:8b:ef:f4:18:7c:2d:bf:72:90:58:17:ff:0f:ba:d6:9f:c5:
         92:d6:2a:f4:c1:18:05:43:a0:65:d9:5a:e9:2c:b4:cb:af:94:
         7f:52:15:3d:31:b3:0a:76:d8:78:7d:26:76:b9:36:7d:8d:ca:
         eb:b9:a8:d7:2f:a7:7c:38:8e:7c:2d:0c:77:1e:d1:c1:55:40:
         59:e2:83:9b:25:fd:17:4e:c3:69:fe:41:ee:68:3b:1d:f3:2d:
         e7:0b:7b:c4:76:c8:51:53:60:f4:eb:c0:59:c7:ab:8a:9f:b6:
         57:d3:6f:95:b0:45:94:47:f1:7c:a8:2e:01:d8:5d:0d:6e:ba:
         1f:6a:31:11:7a:f8:5c:52:fb:89:7c:26:a6:4f:22:0c:40:7a:
         22:dd:bd:fd:ae:e4:34:5f:3b:07:be:dd:69:34:5b:92:05:64:
         f5:55:a3:93:62:71:07:eb:10:c4:ca:1a:f5:ee:c8:66:77:50:
         bc:0d:cf:38:4b:5b:44:09:a5:85:45:56:12:99:1e:c1:03:d0:
         e5:7c:98:1c:53:63:a8:bf:ea:f8:e1:d2:f9:09:21:c0:c6:d0:
         5f:13:11:b3:d0:ad:e5:24:12:cd:a8:ca:70:21:d2:ba:e0:ae:
         79:4f:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:15 2024 by rpki-client on console-fra.rpki-client.org