Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34372d3437203d3e203137373237.roa
File:                     323430343a633030303a633030303a3a2f34372d3437203d3e203137373237.roa (raw, json)
Hash identifier:          Z/WjLyVRQB9CWDZ3HosXPeWueLth6IfAWuqyWO7cIyQ=
Subject key identifier:   62:96:D4:42:19:8E:96:C9:50:FF:9F:4D:5B:DE:20:67:5F:08:C8:96
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       327E0D97B847810FD7F15D5088D434321DAF89BD
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34372d3437203d3e203137373237.roa
Signing time:             Mon 03 Jun 2024 04:01:10 +0000
ROA not before:           Mon 03 Jun 2024 03:56:10 +0000
ROA not after:            Mon 02 Jun 2025 04:01:10 +0000
asID:                     17727
IP address blocks:        2404:c000:c000::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7e:0d:97:b8:47:81:0f:d7:f1:5d:50:88:d4:34:32:1d:af:89:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Jun  3 03:56:10 2024 GMT
            Not After : Jun  2 04:01:10 2025 GMT
        Subject: CN=6296D442198E96C950FF9F4D5BDE20675F08C896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:d8:94:58:2e:c9:e5:30:34:03:52:a3:de:
                    a1:84:0c:a4:6d:40:c9:86:19:49:8c:b2:da:5e:3f:
                    5f:2e:7b:35:f9:ec:05:12:61:f2:81:9e:70:2e:f9:
                    80:78:b9:d0:ff:88:6b:9f:25:e0:66:c0:f2:57:16:
                    9b:1d:9d:2c:93:25:76:0c:c9:40:2c:dd:b1:b8:13:
                    91:49:ea:03:f0:43:6f:55:a6:05:af:1a:b1:76:9b:
                    86:49:c0:0d:81:2f:d7:d5:b4:66:59:72:ab:c9:90:
                    99:4a:76:73:a9:2d:91:5e:c9:a0:b1:b4:c8:52:fe:
                    d9:ab:74:ac:5d:ef:9c:0b:48:f8:69:ea:bb:fa:5c:
                    0e:1b:c7:94:fd:a3:39:42:70:10:fb:78:dc:72:82:
                    35:a4:d7:09:e7:65:60:e4:ca:1c:95:b8:43:43:72:
                    80:49:46:2d:ac:fb:8f:ed:ad:b2:3a:fb:ce:64:08:
                    85:a4:3f:47:e8:25:0a:60:4c:d1:43:ed:63:23:54:
                    20:4d:67:be:bb:ab:a6:5c:20:7f:e7:1d:8d:85:47:
                    47:60:56:18:c4:c3:f2:b9:f9:9a:c9:fc:76:ab:4f:
                    dc:ec:b5:50:c2:82:11:d5:8e:68:b4:5c:ae:2a:65:
                    0d:07:74:70:3e:79:d8:e1:12:0d:dc:7c:04:a3:13:
                    40:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:96:D4:42:19:8E:96:C9:50:FF:9F:4D:5B:DE:20:67:5F:08:C8:96
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34372d3437203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:c000:c000::/47

    Signature Algorithm: sha256WithRSAEncryption
         c6:30:b3:aa:17:4d:a4:bc:c9:14:ad:9b:05:dc:29:d7:08:11:
         b7:df:c7:bf:8b:44:70:12:97:c8:cb:7a:88:53:a7:1a:3f:6c:
         23:ac:e5:17:10:86:3f:d9:3e:e8:24:bf:27:8a:aa:63:28:e3:
         b6:11:f7:7c:16:63:24:fb:5b:33:f6:69:9f:f7:b4:a6:ac:ed:
         e4:3a:1c:32:96:4c:95:cb:79:02:05:ff:e2:e2:d8:65:7e:30:
         af:47:6f:f1:22:30:e8:b0:9c:34:a6:28:29:0f:f0:5e:ef:5b:
         a6:5c:ff:05:77:3a:0e:ca:a6:02:54:be:db:ba:3d:e4:46:f0:
         cc:e3:4c:91:58:7b:a1:3c:2e:16:2b:a6:48:45:6c:05:be:f0:
         8c:37:4c:6e:d3:6e:9e:b1:68:51:0e:dc:a4:39:86:7f:a6:5d:
         dd:a4:d2:03:9e:9e:aa:ec:57:f6:2a:a5:6c:78:de:1d:f5:b4:
         5b:a2:44:5e:39:06:82:7e:9c:75:f6:1f:83:fe:68:b1:7f:e5:
         7a:ff:be:e6:ba:49:da:e8:34:df:cc:cb:ad:93:dc:f5:7a:a8:
         37:6a:f8:18:e9:e2:91:c1:2f:ac:41:50:22:51:32:d0:43:9a:
         e4:97:d4:51:7f:ec:29:50:45:ef:8e:c3:2d:54:68:3d:9a:d5:
         dd:53:3e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org