Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa
File:                     323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (raw, json)
Hash identifier:          vt0G6o2tx3+JPh8DyeO8Ja/46Oq7gFTDcD6L9k0NdLQ=
Subject key identifier:   FB:9D:FB:0F:12:9E:8D:77:B3:DE:65:FA:55:60:F5:41:77:62:A4:78
Certificate issuer:       /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76
Certificate serial:       114B1C951B0A4F592EC7CF2D1EAB6D5BDB681343
Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa
Signing time:             Tue 05 Sep 2023 06:00:00 +0000
ROA not before:           Tue 05 Sep 2023 05:55:00 +0000
ROA not after:            Tue 03 Sep 2024 06:00:00 +0000
asID:                     46062
IP address blocks:        2404:e900:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl
                          rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4b:1c:95:1b:0a:4f:59:2e:c7:cf:2d:1e:ab:6d:5b:db:68:13:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76
        Validity
            Not Before: Sep  5 05:55:00 2023 GMT
            Not After : Sep  3 06:00:00 2024 GMT
        Subject: CN=FB9DFB0F129E8D77B3DE65FA5560F5417762A478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:74:ee:9d:f2:00:d6:84:29:e3:9c:fd:97:e7:
                    98:5f:90:9e:a0:65:f3:51:a7:e6:41:63:99:5f:16:
                    50:4f:17:fb:fd:8a:3b:77:40:ec:3a:05:46:ad:ee:
                    da:31:b2:eb:3b:ce:fc:a9:19:9d:87:b0:60:ac:f7:
                    06:d7:34:1c:ba:74:0d:17:80:59:e6:4c:97:16:26:
                    0a:6a:f2:8a:6c:55:d8:0b:1d:b5:af:60:5b:be:0b:
                    fa:80:ca:2f:72:6f:a7:79:02:02:08:67:1e:f7:fb:
                    fd:0a:a7:8c:38:7d:07:3b:3f:a7:c7:1d:a7:1a:a0:
                    ef:f9:8d:f7:b7:e4:cd:1b:3b:87:af:bb:65:32:06:
                    b0:3a:a3:31:0c:69:cc:3e:b2:36:25:df:b0:4f:77:
                    ad:16:d3:ce:6a:aa:c1:37:ad:99:ad:49:45:6f:96:
                    d2:0e:de:e0:0e:32:8f:d2:5f:ce:15:e1:e4:93:3f:
                    f4:04:d5:dc:f8:fa:d3:86:13:82:2e:4e:e7:b3:84:
                    fd:50:06:97:62:61:ee:ba:5f:0d:a7:fd:f8:cf:9e:
                    1a:d5:39:ae:b6:4f:f9:f8:db:e7:0f:17:e9:6c:ed:
                    f7:eb:fc:0f:1d:8a:b3:9c:99:54:20:39:a9:1f:cd:
                    fa:77:ce:00:71:15:6a:a5:57:21:4d:4f:6f:18:9e:
                    88:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9D:FB:0F:12:9E:8D:77:B3:DE:65:FA:55:60:F5:41:77:62:A4:78
            X509v3 Authority Key Identifier:
                keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:e900:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:41:73:92:58:8b:44:47:a2:a6:91:b5:51:48:d2:a9:cc:ef:
         56:e9:5f:d0:24:46:48:fa:56:82:53:6e:46:02:b1:d5:c9:ba:
         8c:82:d0:66:c5:a6:09:cc:a0:69:26:2f:41:14:54:25:0f:90:
         d2:ed:dd:7b:ff:de:38:b7:a4:30:29:1e:ea:da:6b:ca:4d:75:
         e5:6f:7a:e8:3c:e6:95:e5:02:3e:9e:56:65:94:cf:ad:ed:b2:
         ec:04:b0:df:a0:78:fe:1e:75:f7:36:de:3c:28:8f:e5:c4:fc:
         1f:1b:3d:7a:1e:c7:f4:b4:71:7c:82:0d:36:8f:85:23:d3:43:
         7a:3d:f9:05:5d:a5:7c:17:b5:3c:27:f2:d6:3d:0b:37:52:a6:
         27:6a:e6:c2:82:9c:a9:7f:cd:35:06:f8:74:ae:de:ce:7e:a5:
         e9:ff:c3:0f:c3:3d:87:4c:70:22:79:75:cf:a4:a0:53:71:2e:
         c0:9f:48:5c:d8:f9:d2:87:2e:14:d4:4e:c6:71:ea:00:ce:80:
         ec:21:54:90:5c:f4:1a:26:cc:83:e6:70:8a:06:fb:34:83:0a:
         6c:3f:bb:c2:5f:25:3a:32:d3:84:5a:c9:80:35:46:80:2e:dc:
         71:65:0a:4d:67:eb:db:50:4f:69:a9:0d:36:ab:16:1f:76:11:
         7e:93:9f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:37 2024 by rpki-client on console-fra.rpki-client.org