Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/323430343a663930303a3a2f33322d3438203d3e203538343832.roa
File:                     323430343a663930303a3a2f33322d3438203d3e203538343832.roa (raw, json)
Hash identifier:          NuYbQhYrZeTuagYSrZmxOk8DcUhrY2KakstDDqoH304=
Subject key identifier:   87:C9:90:A9:AE:0A:7F:F2:13:E2:2B:98:5E:36:F6:13:CB:BF:E3:51
Certificate issuer:       /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial:       7EAA79127300E9D3A50463B0FE38FFA95476321E
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/323430343a663930303a3a2f33322d3438203d3e203538343832.roa
Signing time:             Thu 29 Feb 2024 00:00:00 +0000
ROA not before:           Wed 28 Feb 2024 23:55:00 +0000
ROA not after:            Thu 27 Feb 2025 00:00:00 +0000
asID:                     58482
IP address blocks:        2404:f900::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
                          rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:aa:79:12:73:00:e9:d3:a5:04:63:b0:fe:38:ff:a9:54:76:32:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
        Validity
            Not Before: Feb 28 23:55:00 2024 GMT
            Not After : Feb 27 00:00:00 2025 GMT
        Subject: CN=87C990A9AE0A7FF213E22B985E36F613CBBFE351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:36:0a:94:49:a4:25:8d:95:5c:92:10:d2:
                    c5:04:d5:3e:e9:78:91:8c:79:26:99:66:ff:79:ae:
                    5e:3e:5c:73:a9:e2:fd:46:72:f0:e9:78:c3:8a:38:
                    cb:d9:5d:d5:f5:a4:a0:90:f3:c3:b0:56:0f:e3:b3:
                    b3:e6:0c:40:cb:f5:50:04:f2:9c:84:ee:41:12:56:
                    99:1d:d0:b5:57:b2:11:88:2f:e8:e6:76:27:69:5d:
                    b4:eb:16:ef:b5:8e:07:4d:73:b2:fd:c5:9c:3f:27:
                    b1:3f:b4:ae:ca:13:c3:29:9a:95:0c:24:10:bc:0b:
                    78:33:3a:3c:41:7d:a9:98:d1:bd:50:ea:f1:c3:f9:
                    8d:5a:f4:8f:e8:dd:3f:38:e3:50:c3:ed:73:97:ae:
                    06:e1:c7:e9:62:9e:f8:87:eb:36:5b:73:27:9b:4c:
                    95:be:9d:d9:7d:10:58:4e:d2:85:7d:1d:bb:9f:85:
                    60:8f:9f:cd:4a:c7:e5:d7:00:df:29:b2:bf:5a:c3:
                    f8:b4:4d:dd:a8:af:f6:93:78:60:26:2a:1a:a4:9d:
                    bc:d9:7d:47:02:85:fb:fe:9d:e8:cb:ab:ea:78:68:
                    6f:26:8e:58:6f:ef:d7:09:a6:d1:71:26:bf:6e:e0:
                    67:9f:da:fd:e1:b9:ef:58:df:68:0d:22:fc:10:27:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C9:90:A9:AE:0A:7F:F2:13:E2:2B:98:5E:36:F6:13:CB:BF:E3:51
            X509v3 Authority Key Identifier:
                keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/323430343a663930303a3a2f33322d3438203d3e203538343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f900::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:61:01:48:1f:c1:80:ea:62:b2:1c:66:15:87:63:65:23:69:
         73:b0:93:9d:bc:03:54:a9:49:55:a5:a8:15:0f:b5:3c:d9:1a:
         83:9f:cb:d7:0b:ba:cd:e7:69:40:5c:6f:87:36:f9:74:56:1b:
         6f:fd:46:6b:ae:e2:36:bf:bf:af:f6:03:4e:f2:05:b5:a1:cc:
         d8:72:6a:31:ed:27:e4:d8:e5:af:d1:bf:4c:4b:7d:15:f7:f6:
         89:45:0b:fc:76:02:e7:45:50:33:22:01:f6:49:e2:7f:47:e7:
         02:d3:8a:26:6f:8a:48:86:fa:47:e1:f4:88:9e:d0:4e:11:da:
         4f:0b:a0:28:c8:89:4d:dc:7a:26:51:d7:9a:e7:fe:4d:08:1c:
         6c:de:7e:04:26:15:6e:29:ff:74:b9:72:db:d3:66:34:e8:8e:
         c4:31:10:c5:83:d7:36:ba:16:0a:8a:06:89:de:3c:1c:01:e8:
         f5:97:6e:0f:c6:61:cc:2c:6e:e0:8c:ed:27:3a:cf:d8:0f:38:
         5e:be:0a:37:39:1c:9a:71:88:3a:94:6a:2e:6c:92:7a:de:f6:
         6f:f5:3d:bd:f6:10:f3:28:87:05:48:de:92:3d:82:02:bc:f2:
         7b:00:33:cc:67:2c:ef:6e:9c:9e:ed:f7:a9:19:3f:d0:08:8b:
         21:32:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org