Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a3a2f33322d3332203d3e203538353532.roa
File:                     323430343a666430303a3a2f33322d3332203d3e203538353532.roa (raw, json)
Hash identifier:          JGBb1001Vz9LX2+LuvSwCr3AJiLwGJNXqBF7LJv4xGk=
Subject key identifier:   C1:6D:53:2A:D2:59:60:A6:F9:2B:46:C5:DE:73:84:C0:2F:5E:2F:4B
Certificate issuer:       /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial:       04AEE123E2C78908A06F34E6FE8AC7FC5F5B5C72
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a3a2f33322d3332203d3e203538353532.roa
Signing time:             Mon 01 Jul 2024 01:03:07 +0000
ROA not before:           Mon 01 Jul 2024 00:58:07 +0000
ROA not after:            Mon 30 Jun 2025 01:03:07 +0000
asID:                     58552
IP address blocks:        2404:fd00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
                          rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ae:e1:23:e2:c7:89:08:a0:6f:34:e6:fe:8a:c7:fc:5f:5b:5c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
        Validity
            Not Before: Jul  1 00:58:07 2024 GMT
            Not After : Jun 30 01:03:07 2025 GMT
        Subject: CN=C16D532AD25960A6F92B46C5DE7384C02F5E2F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:3d:98:22:a1:5d:29:22:7c:2e:b5:ee:2e:
                    c2:bc:74:22:1f:08:10:b8:9f:78:c5:83:80:01:e8:
                    2f:78:3e:11:6f:c1:29:36:cc:3d:27:30:1d:82:e0:
                    cd:b7:42:65:4a:fa:cb:61:05:a9:ed:dd:3b:ce:16:
                    f7:c6:60:b5:ea:d5:2b:c1:db:27:77:21:46:a8:90:
                    b0:b1:5c:bb:f5:6d:1e:1d:49:ad:32:f7:c5:23:9b:
                    c0:6e:24:4e:c3:c0:00:02:1e:03:76:bf:c2:08:9a:
                    1a:22:6e:45:c1:00:e7:00:64:d2:57:1d:9a:f4:99:
                    77:a2:7c:9e:4c:5d:73:44:d8:9a:2b:67:ef:20:f7:
                    d3:0a:04:99:a6:42:35:d3:3d:60:6b:17:4b:2d:56:
                    59:3d:f9:82:47:69:4c:72:c8:23:f8:f1:6b:48:39:
                    66:6b:f6:ff:d0:27:32:0c:62:c5:b5:5b:a5:87:83:
                    60:fc:60:b6:b7:02:ad:88:e9:ed:97:f6:b9:aa:e9:
                    b7:cc:7b:c6:ca:c3:c4:24:25:df:e7:60:66:2f:58:
                    73:04:89:55:a1:87:ed:40:6a:41:19:1a:b7:74:c6:
                    56:a3:48:d1:2f:73:90:2b:45:b4:db:41:26:d9:4f:
                    ed:12:30:9a:cc:9f:75:d9:c7:d2:7d:6f:f6:94:c3:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6D:53:2A:D2:59:60:A6:F9:2B:46:C5:DE:73:84:C0:2F:5E:2F:4B
            X509v3 Authority Key Identifier:
                keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a3a2f33322d3332203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fd00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:67:e5:13:17:bf:45:18:74:45:b1:40:ba:01:70:41:f6:ec:
         b6:03:82:a2:43:f1:01:0d:18:41:4b:cd:3d:ae:9e:16:bf:7e:
         84:48:d0:ff:1d:75:dc:bd:18:0b:df:fd:8f:62:18:98:b9:57:
         c2:d4:49:37:59:f1:25:f2:77:5d:2c:5d:12:5b:76:4a:60:a4:
         95:42:d8:d8:7a:5e:9f:06:ee:93:ea:5e:85:65:83:cb:cc:0e:
         62:97:50:83:de:c4:38:3d:1b:dd:1c:1c:b8:93:6c:9c:b0:55:
         e5:b4:00:84:87:8a:26:f7:24:5c:f1:ad:c0:1f:3f:96:68:1c:
         cd:0e:4c:c7:87:a4:eb:eb:a8:39:fa:03:20:51:9d:a1:0a:f6:
         0e:77:68:72:f4:7d:a9:74:62:6a:1a:54:d7:9b:bd:cc:9f:c5:
         f2:6e:94:7a:21:0e:cb:a5:39:3a:81:56:7d:60:22:20:cc:d5:
         43:55:69:bd:2f:53:a5:1e:f0:10:23:34:b3:ed:91:71:60:45:
         97:f4:44:e0:44:7e:37:45:8f:44:c2:2c:70:94:69:6f:89:d1:
         d9:cb:fa:f5:6c:35:2d:f6:50:38:99:81:c6:fc:ae:b2:8c:9c:
         d3:a4:3c:4b:d7:db:65:bc:aa:17:89:19:ae:fb:53:9f:f1:2f:
         67:23:24:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org