Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030373a3a2f34382d3438203d3e20313333383430.roa
File:                     323430343a653130303a333030373a3a2f34382d3438203d3e20313333383430.roa (raw, json)
Hash identifier:          PHu5vpzk+iPEhVjYGfb1SeDrfOZBMLPSwSszG6SQCOA=
Subject key identifier:   06:A6:DD:97:FE:7F:C0:27:B9:5C:DD:51:8A:F7:29:47:8C:BF:FA:01
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       69C2638C2663608DFFC068733BC6718AB401FCE9
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030373a3a2f34382d3438203d3e20313333383430.roa
Signing time:             Sat 20 Apr 2024 06:00:02 +0000
ROA not before:           Sat 20 Apr 2024 05:55:02 +0000
ROA not after:            Sat 19 Apr 2025 06:00:02 +0000
asID:                     133840
IP address blocks:        2404:e100:3007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c2:63:8c:26:63:60:8d:ff:c0:68:73:3b:c6:71:8a:b4:01:fc:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Apr 20 05:55:02 2024 GMT
            Not After : Apr 19 06:00:02 2025 GMT
        Subject: CN=06A6DD97FE7FC027B95CDD518AF729478CBFFA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2f:0c:53:c8:bb:c8:e7:35:c8:c2:bf:1b:81:
                    53:b2:75:bc:b1:c5:13:e9:b2:e4:24:c1:98:b5:c4:
                    d3:f4:77:1d:11:d0:1f:ff:95:70:b6:e6:69:8f:21:
                    31:46:0a:a6:cc:01:9a:47:f8:13:d8:b7:9b:1d:c8:
                    a0:84:a5:3e:68:37:0a:fc:dd:54:26:b3:97:a0:9b:
                    79:fe:e6:1b:b7:a8:3b:6a:bc:76:e0:ed:70:04:25:
                    61:48:8d:aa:45:e8:12:7b:81:44:b4:72:22:5a:86:
                    4e:05:42:22:b1:11:06:ea:c8:33:29:9b:2e:d6:c4:
                    12:a7:8b:0c:50:8f:0c:ad:a7:d2:5c:f5:ff:a8:50:
                    9c:e1:8a:ac:00:b0:4d:fb:b4:84:d0:6f:8a:53:14:
                    07:44:70:a1:61:70:45:47:99:7e:fc:04:4a:b7:a6:
                    58:1d:c8:88:e9:1f:e3:7e:ae:ef:cc:28:bf:34:3d:
                    ae:64:65:90:04:46:a0:b2:7b:19:ba:3b:d4:8a:31:
                    9f:89:3b:a8:56:c7:27:17:70:7b:e9:0a:2c:29:7e:
                    20:5a:a5:7d:23:9d:96:f4:e1:99:72:1c:58:67:86:
                    d3:65:68:ce:8c:84:e2:0b:46:7e:14:4d:28:25:a9:
                    82:78:b6:dd:3e:5f:54:68:4d:95:0d:13:08:90:a8:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A6:DD:97:FE:7F:C0:27:B9:5C:DD:51:8A:F7:29:47:8C:BF:FA:01
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030373a3a2f34382d3438203d3e20313333383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:e100:3007::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:0f:d3:84:db:4c:cf:72:fe:44:2d:a3:00:b2:6c:03:e0:68:
         0b:79:c7:63:84:ac:be:86:7a:05:bd:41:9c:da:a4:3b:cc:cd:
         71:b9:5f:3d:32:ad:78:4c:03:a7:63:41:ea:98:35:40:cd:92:
         dd:fc:87:34:53:8f:59:a7:66:33:7e:94:80:89:77:f5:54:2c:
         e7:b6:40:84:3b:70:9d:77:ca:ef:23:45:43:06:27:f4:5d:c2:
         39:6b:00:4d:75:40:30:53:15:56:22:81:bb:7d:4f:ef:50:ef:
         e3:f2:c3:2a:13:0f:70:d0:de:72:9c:58:64:c4:ed:e5:59:c2:
         65:ee:20:96:d5:29:ae:de:06:ff:09:5f:78:9b:e4:f1:d4:2e:
         e7:4c:cd:bd:8a:44:18:e0:2c:04:bc:16:6a:60:d4:c3:6c:ed:
         4e:bf:36:5e:9d:0d:79:8b:1d:4f:5d:d1:2e:45:83:9d:1c:eb:
         33:94:5a:71:5d:7f:12:a9:2d:2a:dd:15:c3:1e:09:0e:8e:ea:
         f9:a6:69:7a:64:f4:3a:44:98:b0:7d:29:d0:74:92:85:92:29:
         d3:69:ed:d1:84:66:c6:f8:d3:37:c7:5a:3b:a3:5f:76:dd:92:
         f2:78:4a:1c:bb:93:4e:55:70:8d:57:d3:5e:9f:56:7b:db:c2:
         f1:81:3f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org