Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa
File:                     323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa (raw, json)
Hash identifier:          SFgaSXtlzfcPkOhaCV8MWQWhz4xZCkoZejyEImjp0hg=
Subject key identifier:   F3:73:DE:29:39:6F:47:24:96:54:CF:FC:E7:55:A6:DE:DB:D0:F1:8A
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       72BE482FC6C5AF9E0CC1031B6565A35FC40C3795
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa
Signing time:             Tue 23 Apr 2024 07:00:34 +0000
ROA not before:           Tue 23 Apr 2024 06:55:34 +0000
ROA not after:            Tue 22 Apr 2025 07:00:34 +0000
asID:                     133840
IP address blocks:        2404:e100:3008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:be:48:2f:c6:c5:af:9e:0c:c1:03:1b:65:65:a3:5f:c4:0c:37:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Apr 23 06:55:34 2024 GMT
            Not After : Apr 22 07:00:34 2025 GMT
        Subject: CN=F373DE29396F47249654CFFCE755A6DEDBD0F18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:aa:89:4d:01:0d:1b:f2:77:52:28:79:d3:
                    70:3a:ae:5c:b7:b3:cc:0a:2c:7d:6d:47:e1:b3:cc:
                    c2:a5:d8:13:19:28:b1:a2:e0:42:26:b4:8a:8a:2e:
                    9e:6c:1f:37:e0:de:82:e1:3a:f6:c7:24:85:73:72:
                    ca:0a:f3:ba:f5:32:7e:db:1f:d4:20:17:6a:0d:e8:
                    fe:c6:d7:1a:30:a2:d0:a3:b2:71:e6:45:86:de:69:
                    01:6c:cb:0e:f4:a1:6c:b6:42:96:bd:45:ee:b0:cf:
                    21:2a:97:17:51:b4:ff:7b:13:78:93:b5:96:5f:25:
                    ea:16:90:a4:98:9e:53:3f:4a:18:e8:d5:ca:35:f5:
                    19:e5:a1:b2:bd:51:32:6a:54:85:6f:dd:e8:a6:24:
                    25:a9:f6:94:da:12:86:9d:91:58:dd:1c:c8:51:28:
                    46:a5:68:c2:e9:92:11:8a:34:54:8e:00:57:11:40:
                    41:b2:b4:ff:30:98:d1:60:8a:fa:19:3f:b3:7f:a0:
                    af:5e:33:0a:40:2c:a0:ba:52:f7:31:bd:8c:f2:89:
                    91:96:7a:dc:9a:9b:50:70:86:bd:76:7a:d5:1f:45:
                    cd:03:47:67:a0:91:1d:23:96:c0:7e:b1:2d:dc:73:
                    41:a4:42:c4:3c:eb:84:1e:6e:45:6f:97:dc:f1:91:
                    f7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:73:DE:29:39:6F:47:24:96:54:CF:FC:E7:55:A6:DE:DB:D0:F1:8A
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030383a3a2f34382d3438203d3e20313333383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:e100:3008::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:b2:93:8e:e6:68:ac:8a:bb:74:72:ea:d8:2e:5e:cc:44:d9:
         51:3a:9d:77:26:c8:a6:bd:a7:4b:ce:f3:3b:d0:97:53:ea:6b:
         98:28:05:7f:9a:52:ce:e2:8a:de:87:ce:06:dc:2c:cb:6b:5a:
         02:97:6d:70:07:70:cd:cb:f8:e1:84:22:03:6a:83:0d:aa:cf:
         da:c6:e7:9c:0c:2f:8c:6b:3a:b4:4a:1b:c5:b1:fe:25:a3:ee:
         5f:6d:f0:55:76:52:8a:90:7e:fc:99:df:05:1a:e2:3f:6c:ae:
         5b:81:2e:1f:28:17:fe:67:f0:8c:e6:00:64:e9:fe:27:97:00:
         3d:04:52:bd:05:cc:4b:f8:85:f4:1b:85:e5:b6:25:a4:98:1e:
         44:53:34:61:7f:ff:89:d0:15:72:34:16:00:7f:8c:b6:ca:97:
         06:ba:d8:4e:33:0c:83:16:35:9e:40:05:7a:ad:ed:72:9d:19:
         d4:e4:be:f3:12:9b:66:58:db:13:62:c2:14:bf:0e:fa:b8:95:
         c9:e4:20:68:2c:8b:b7:a6:90:3f:31:04:1b:5d:4f:94:e8:4a:
         69:17:4c:43:f2:5f:27:b4:2e:41:79:28:ae:ce:91:b3:04:09:
         62:90:c5:e4:37:b0:ba:0c:f9:e0:bf:3b:08:50:81:ad:62:0b:
         87:31:4c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org