Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343030303a3a2f34372d3438203d3e203535363835.roa
File:                     323430343a653130303a343030303a3a2f34372d3438203d3e203535363835.roa (raw, json)
Hash identifier:          49uNzLOpQIhlCoBh0CCWKk9BL9BAlG74QD6SuYQ4eJk=
Subject key identifier:   26:AC:7F:B3:FF:4C:86:09:94:55:F3:24:4A:7A:16:92:4C:98:5A:E6
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       399C2B3B0E054588CBA1DF23B38964743135A407
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343030303a3a2f34372d3438203d3e203535363835.roa
Signing time:             Mon 01 Jul 2024 01:05:49 +0000
ROA not before:           Mon 01 Jul 2024 01:00:49 +0000
ROA not after:            Mon 30 Jun 2025 01:05:49 +0000
asID:                     55685
IP address blocks:        2404:e100:4000::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9c:2b:3b:0e:05:45:88:cb:a1:df:23:b3:89:64:74:31:35:a4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Jul  1 01:00:49 2024 GMT
            Not After : Jun 30 01:05:49 2025 GMT
        Subject: CN=26AC7FB3FF4C86099455F3244A7A16924C985AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ca:17:db:e9:5f:9c:48:d9:8b:fa:07:2d:ee:
                    34:28:66:71:fd:de:88:45:0f:0f:09:e6:d8:c8:bc:
                    dd:73:00:f7:b0:6b:18:4c:30:ea:d3:72:c3:fc:1c:
                    52:2a:38:b3:f0:64:54:aa:da:30:91:f2:70:d5:77:
                    a8:5a:84:75:10:d7:ca:0c:a5:6c:14:dc:8a:ae:21:
                    47:f3:43:b6:8d:81:30:f1:be:32:56:d1:05:66:82:
                    1a:6f:59:68:c7:69:1d:22:ef:14:04:75:59:7c:f0:
                    90:c8:fe:db:cf:84:ad:c0:63:bb:89:d4:a8:39:1e:
                    b1:fb:1f:08:8c:73:32:41:29:75:f1:69:65:b9:b7:
                    0e:c4:f6:12:ba:ad:0d:9d:62:4a:c2:d8:bd:b8:e4:
                    44:e9:be:97:f7:b9:36:4b:cd:98:af:cd:59:24:63:
                    3a:55:45:01:3d:3d:3f:37:22:05:9e:ca:4b:a0:5d:
                    96:1d:e6:24:57:61:eb:4a:d4:8e:ce:72:05:a1:c3:
                    2e:b4:59:6b:93:42:39:b6:68:3d:2e:d1:f8:a9:70:
                    09:eb:d9:64:35:78:f1:28:9a:49:cf:d2:86:b1:a2:
                    52:0f:f1:6c:dc:85:03:09:43:77:52:99:f7:29:fa:
                    7f:8d:85:e1:70:77:fc:9b:61:3f:81:0c:65:d8:20:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AC:7F:B3:FF:4C:86:09:94:55:F3:24:4A:7A:16:92:4C:98:5A:E6
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343030303a3a2f34372d3438203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:e100:4000::/47

    Signature Algorithm: sha256WithRSAEncryption
         7c:78:e1:2f:f4:ca:82:cb:e1:3e:93:7a:63:df:2c:90:9e:b8:
         ba:19:17:5d:39:c9:97:05:9e:5a:66:2d:9f:61:53:1d:98:f2:
         03:dc:99:13:86:b4:45:a7:8d:a6:b9:8c:18:08:b6:82:76:7b:
         35:df:9e:60:e3:2d:37:b5:48:16:cc:10:cf:7c:e8:b8:d7:cd:
         26:c9:4e:cc:1d:f2:14:ca:94:3b:90:85:f1:ff:d9:0a:e8:0f:
         ae:10:d5:a4:66:b5:1e:23:82:51:65:29:01:30:d8:d8:cf:05:
         e9:7b:ad:9c:0e:34:22:09:e4:36:33:0b:b6:b5:22:45:74:f5:
         05:8d:3b:e3:64:ca:1b:7b:a1:c4:d7:11:25:1c:b2:52:b0:85:
         03:db:71:8c:5c:4f:e1:7a:9c:71:fb:12:56:f0:55:2d:44:f3:
         1b:aa:eb:5e:9a:b9:a2:cd:b9:dc:3f:9a:7f:ff:29:5e:f2:80:
         d2:67:e5:bc:5b:10:4a:3e:1d:c0:b0:80:0e:41:28:2a:f8:92:
         c3:3a:71:aa:4e:c7:fd:2e:ff:db:ea:4a:09:92:62:0d:6a:d4:
         71:93:9b:67:91:1a:b6:70:24:be:ec:cf:9f:66:5a:9b:5e:4f:
         9c:f4:34:8e:a0:f4:61:f3:2a:7c:ec:26:ec:7a:79:68:3c:2d:
         19:8d:d5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org