Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa
File:                     323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (raw, json)
Hash identifier:          hXImVbWQ2f/ws4JjD/5ntnp8r8HOD9bsNhW6l4X5mhA=
Subject key identifier:   70:C7:B9:C4:60:78:26:48:B2:54:64:CD:54:CA:E5:B7:AD:F4:FF:C7
Certificate issuer:       /CN=D681DB990E904642A480AE9546646329FF5D0162
Certificate serial:       7F915AEF81403F73E8337F007D51DFFDD76CA2CF
Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa
Signing time:             Tue 19 Mar 2024 00:00:00 +0000
ROA not before:           Mon 18 Mar 2024 23:55:00 +0000
ROA not after:            Tue 18 Mar 2025 00:00:00 +0000
asID:                     139449
IP address blocks:        2405:77c0:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl
                          rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:91:5a:ef:81:40:3f:73:e8:33:7f:00:7d:51:df:fd:d7:6c:a2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162
        Validity
            Not Before: Mar 18 23:55:00 2024 GMT
            Not After : Mar 18 00:00:00 2025 GMT
        Subject: CN=70C7B9C460782648B25464CD54CAE5B7ADF4FFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bc:06:e8:23:a6:ca:d8:db:26:ad:2d:c8:db:
                    dc:f2:3e:bd:aa:35:26:1d:70:6b:46:38:d0:ab:aa:
                    cd:a9:54:d1:88:c9:3a:0c:3a:6e:2f:6e:1f:05:57:
                    33:ce:9b:3e:bb:97:b4:a0:38:19:8d:0a:db:5e:a8:
                    b4:35:29:c8:61:0e:c3:43:d6:4f:23:0b:6f:ee:12:
                    99:19:3f:59:37:d1:94:59:39:58:30:2a:66:07:63:
                    a8:db:57:9b:a6:e2:de:ea:d0:20:9a:8d:fe:2f:0a:
                    c5:08:e5:8b:93:ac:0c:34:16:46:2b:a4:37:ef:d5:
                    c1:e2:33:3b:2e:34:d6:87:4e:1b:a0:be:a2:1a:36:
                    49:a8:fe:85:b7:ab:5e:95:2c:d4:43:f3:5d:31:7b:
                    86:49:c0:10:a5:16:67:5e:9d:88:09:a9:c3:c9:59:
                    6c:29:c3:75:95:06:f9:bd:e8:ef:b3:08:2f:b8:15:
                    11:d0:ff:7d:99:73:91:29:63:6f:dc:7a:bc:f5:ea:
                    a7:72:33:b5:03:9c:85:42:0e:f6:78:06:b1:06:28:
                    54:95:68:a5:da:f5:1f:79:81:db:5b:6b:86:17:f3:
                    a3:d9:af:ff:7a:8b:30:be:81:fa:9a:39:a1:9a:aa:
                    e8:6d:b6:98:fe:2d:50:c4:31:a2:ba:09:8e:1f:ba:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C7:B9:C4:60:78:26:48:B2:54:64:CD:54:CA:E5:B7:AD:F4:FF:C7
            X509v3 Authority Key Identifier:
                keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:77c0:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:09:1a:79:ba:63:0a:42:a7:01:0e:af:ee:bf:48:69:4b:96:
         9a:b0:16:59:bf:a0:c9:9a:12:8d:d6:5a:fd:28:ac:5b:21:4a:
         9c:f4:cc:5d:ef:e7:97:d6:7f:8d:86:63:ce:9e:12:b9:8a:8c:
         fc:e9:3e:ca:be:87:f7:6c:bd:c2:68:74:db:46:0b:01:f7:bd:
         ee:da:3b:4c:bf:b2:6f:ee:5e:74:29:e9:d9:f9:91:cb:eb:27:
         74:94:02:f3:d0:65:24:c0:84:8f:e0:21:20:41:67:19:8e:cf:
         f4:fe:27:1f:48:45:e4:20:8b:28:20:3a:49:b3:d9:7c:ed:ec:
         84:41:d2:1f:11:1d:91:4d:f4:fe:52:41:57:15:8c:3e:d0:b0:
         1a:3d:69:0b:a9:cf:36:d3:66:ce:f4:89:d6:68:89:92:54:c7:
         7f:73:35:2c:d5:e2:83:4f:6b:13:0a:25:69:db:a1:b1:4a:3b:
         b6:a1:42:b0:2f:1b:30:2a:7d:d8:58:90:73:e0:59:c4:80:2c:
         b2:2e:af:ca:6a:6e:32:67:c7:d0:1c:ad:cd:a2:c1:8c:a3:97:
         47:18:6b:c8:07:9d:bc:ac:fe:9d:48:36:e7:50:f8:29:05:33:
         f8:5d:67:a4:8e:00:f4:cc:3b:76:81:11:c0:1b:64:8c:92:7e:
         af:c0:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org