Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030363a3a2f34382d3438203d3e20313333383430.roa
File:                     323430343a653130303a333030363a3a2f34382d3438203d3e20313333383430.roa (raw, json)
Hash identifier:          jRxs14JeP39+a5+N+ciyuuY7nxB+5hQuSWdFpITo1M4=
Subject key identifier:   66:03:A9:ED:69:0A:06:85:86:2B:18:D4:72:B2:67:D6:E7:0D:89:26
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       69D5828190BB3DFB2F450096305690114DB6F2FF
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030363a3a2f34382d3438203d3e20313333383430.roa
Signing time:             Sat 20 Apr 2024 06:00:02 +0000
ROA not before:           Sat 20 Apr 2024 05:55:02 +0000
ROA not after:            Sat 19 Apr 2025 06:00:02 +0000
asID:                     133840
IP address blocks:        2404:e100:3006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d5:82:81:90:bb:3d:fb:2f:45:00:96:30:56:90:11:4d:b6:f2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Apr 20 05:55:02 2024 GMT
            Not After : Apr 19 06:00:02 2025 GMT
        Subject: CN=6603A9ED690A0685862B18D472B267D6E70D8926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:75:7d:5f:ba:10:6a:ba:0c:57:97:6c:0b:
                    a2:c2:9d:9d:f2:29:f3:43:57:41:61:48:f2:3d:f6:
                    c4:c8:d1:72:35:e2:d9:d5:c2:69:5e:55:e7:98:83:
                    fd:85:35:42:d3:6c:92:99:35:3a:6b:fb:7e:e4:35:
                    46:df:b6:ce:ff:36:da:a9:5b:8a:6e:1d:e3:06:0d:
                    88:c6:b5:55:63:b0:07:20:ff:18:1a:ef:c4:12:a8:
                    40:56:e7:fa:88:53:01:39:21:3e:a8:4c:56:03:2e:
                    f4:61:7e:59:ae:a9:a9:67:94:11:a8:6d:4d:f7:8a:
                    d2:78:f0:1d:b2:e7:1f:7b:d1:1d:a1:44:47:30:d2:
                    f1:7f:c3:39:b3:7a:83:26:ce:29:b8:91:52:27:57:
                    97:ba:3e:f2:55:94:49:88:83:37:e0:89:09:a7:f2:
                    06:98:55:94:64:64:76:86:d6:6d:a3:b6:9c:bd:52:
                    be:05:24:d2:98:69:96:02:1d:88:68:2a:2d:8e:24:
                    cf:08:f9:a4:73:4e:3f:be:62:c0:4b:c0:d6:02:cd:
                    fc:a6:53:5f:1e:0b:f2:45:b2:6d:61:8d:e7:85:27:
                    a7:98:c1:1e:75:27:8d:a6:26:37:38:3c:a3:8e:67:
                    83:26:c0:f3:b5:bd:e3:ce:d2:a2:82:1e:c5:61:f6:
                    28:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:03:A9:ED:69:0A:06:85:86:2B:18:D4:72:B2:67:D6:E7:0D:89:26
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030363a3a2f34382d3438203d3e20313333383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:e100:3006::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:38:28:1f:bb:51:c0:81:83:94:5b:12:ae:10:5e:3b:1c:ab:
         28:59:69:85:1a:6d:3b:83:3b:ae:b8:de:e1:5e:b1:20:47:d3:
         74:2e:6e:49:22:35:7b:69:a1:e3:ff:98:6f:57:64:30:1a:86:
         9e:ad:06:54:6a:15:f4:19:e3:55:bd:e0:36:46:25:ba:7f:d6:
         c7:d7:aa:93:42:39:59:3b:bd:6b:72:81:a1:13:d2:64:9e:77:
         5b:44:f8:52:64:c2:ab:8a:d5:ea:ba:42:81:6f:53:cd:e4:7a:
         31:43:c2:e8:ff:46:78:51:71:6e:e1:4a:b0:c6:33:7e:f6:54:
         7b:dd:53:7d:17:f8:02:b2:18:69:05:8a:7b:a6:cd:2a:01:15:
         80:d9:6e:e1:61:5a:89:02:8b:f2:a1:5c:8c:83:43:eb:b8:57:
         2f:38:33:97:59:22:70:b2:1f:d0:8a:7a:2b:22:39:a8:eb:7e:
         1a:8d:6a:e8:2d:a5:64:96:6d:46:29:df:c3:e9:55:ab:30:1a:
         d1:c0:9c:15:be:05:f1:9d:30:f5:37:e8:bf:00:06:5d:b3:5b:
         5b:d8:0b:ee:df:93:18:fa:15:05:a2:72:37:2d:b2:3f:91:da:
         8b:5c:e9:75:7c:3b:4a:36:f1:36:68:8c:f9:64:90:29:bf:4e:
         64:b0:ef:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org