Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa
File:                     323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (raw, json)
Hash identifier:          BAj6wGXRStOevsKAAs4sF+Q+V6U6g9tECkAMCeQYV7c=
Subject key identifier:   D6:AB:31:98:84:FB:99:03:A0:5E:F7:FC:7E:34:66:B7:0D:13:27:FD
Certificate issuer:       /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Certificate serial:       3748C5E3496DDA6E84984E704F23111F00D27657
Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa
Signing time:             Thu 30 May 2024 16:00:01 +0000
ROA not before:           Thu 30 May 2024 15:55:01 +0000
ROA not after:            Thu 29 May 2025 16:00:01 +0000
asID:                     134655
IP address blocks:        2404:5980::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl
                          rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:48:c5:e3:49:6d:da:6e:84:98:4e:70:4f:23:11:1f:00:d2:76:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
        Validity
            Not Before: May 30 15:55:01 2024 GMT
            Not After : May 29 16:00:01 2025 GMT
        Subject: CN=D6AB319884FB9903A05EF7FC7E3466B70D1327FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:60:ed:46:a8:c7:15:ed:a9:f7:fe:e4:34:
                    e0:ba:53:c7:2c:dd:dc:62:af:5b:f5:1c:7a:f6:06:
                    ef:6d:dd:aa:27:6f:e6:2b:ac:ec:68:24:1c:3b:0d:
                    7d:11:2a:2d:95:7f:bc:3e:56:a9:48:e2:2c:aa:b6:
                    58:1b:db:8f:76:03:b1:b3:0a:da:20:8a:5d:dc:3c:
                    bf:62:7c:8f:26:54:d3:4a:62:8a:1e:f8:b2:fc:b2:
                    4c:77:7f:89:74:3e:1a:73:99:19:15:8e:85:af:c6:
                    95:d9:fd:ea:4d:ab:fd:f0:08:d5:02:f8:e0:db:f7:
                    c5:2a:41:5d:2e:1d:c1:9d:aa:bb:87:4c:dd:7b:22:
                    26:2a:d3:96:9f:48:29:5a:25:50:c6:bf:6a:13:1b:
                    2c:43:9b:ba:8f:c4:39:c3:c3:df:bf:a3:d5:e2:23:
                    4d:6a:33:de:ec:fa:d7:f4:b9:e8:97:5c:12:ad:58:
                    be:12:e4:11:5e:e7:fa:14:fe:3c:10:61:d2:1e:aa:
                    9d:4a:b6:6c:76:b2:de:57:42:0d:50:6d:9a:78:33:
                    ec:93:28:c3:8f:02:a2:74:2a:e3:fc:69:44:3f:03:
                    0f:7b:0a:bc:85:82:82:97:4f:b6:23:61:50:0e:a8:
                    65:7e:4e:05:de:87:24:98:b9:b7:7c:3f:70:76:cc:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AB:31:98:84:FB:99:03:A0:5E:F7:FC:7E:34:66:B7:0D:13:27:FD
            X509v3 Authority Key Identifier:
                keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:5980::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:cd:3a:90:96:90:1d:fb:2c:76:40:9f:a1:ee:71:68:07:cb:
         7f:6d:c9:75:9b:58:c2:81:d3:45:c5:3f:2f:7f:d4:8d:ce:f4:
         59:eb:b7:4e:12:41:88:f9:aa:79:40:35:9c:d9:af:54:25:1d:
         41:f6:f2:79:b3:d4:f8:89:4d:63:89:88:b6:86:3e:eb:7d:da:
         e5:a1:8e:02:a2:e0:51:09:17:ec:28:89:c8:1b:9b:b8:6a:64:
         c3:c7:f9:82:a8:09:01:3c:71:eb:33:12:85:b4:94:f8:49:7a:
         d7:b9:da:e2:dd:46:a7:cb:7a:f4:f2:e6:13:9f:a3:c5:e3:7d:
         b8:da:17:9a:30:cf:18:b8:a5:89:48:67:0f:dd:1b:7e:98:f3:
         7d:09:6b:16:76:20:ac:9a:a5:e8:88:d4:01:30:10:b2:ac:2b:
         ae:9a:57:1a:f0:b8:00:79:f2:01:47:09:09:3b:c9:c3:d4:c7:
         50:33:72:86:99:dd:65:52:85:9e:5d:13:8c:ca:0f:1c:c1:57:
         78:fc:a0:3b:97:f8:8e:15:f8:f9:9b:9a:36:ea:f3:fb:dd:64:
         fa:08:a0:94:ce:aa:f8:58:c9:d4:ee:18:fc:39:0c:e1:34:4d:
         55:24:aa:3f:57:45:cc:6f:94:3b:8b:c7:20:3e:f5:fa:f7:53:
         0b:f2:99:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org