Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343030363a3a2f34382d3438203d3e20313333383430.roa
File:                     323430343a653130303a343030363a3a2f34382d3438203d3e20313333383430.roa (raw, json)
Hash identifier:          RZY1cz8AFRM8xhqyqTHkXyupEcUopdpIhjg9tCbZPM4=
Subject key identifier:   59:3F:DF:A0:03:D0:80:A8:2F:0B:3E:12:14:63:F7:95:46:30:DE:A3
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       1BE80F1780A535D9D4605B4E48FCD128FC273F36
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343030363a3a2f34382d3438203d3e20313333383430.roa
Signing time:             Mon 01 Jul 2024 01:05:48 +0000
ROA not before:           Mon 01 Jul 2024 01:00:48 +0000
ROA not after:            Mon 30 Jun 2025 01:05:48 +0000
asID:                     133840
IP address blocks:        2404:e100:4006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e8:0f:17:80:a5:35:d9:d4:60:5b:4e:48:fc:d1:28:fc:27:3f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Jul  1 01:00:48 2024 GMT
            Not After : Jun 30 01:05:48 2025 GMT
        Subject: CN=593FDFA003D080A82F0B3E121463F7954630DEA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:7e:3c:a2:02:1b:95:e5:3d:bb:49:74:ae:
                    0c:82:43:a9:e1:ab:6f:17:95:5f:88:f4:10:db:20:
                    23:ae:54:b1:a1:1f:4e:da:b7:98:71:f7:0e:9c:4b:
                    85:a5:8b:af:50:d9:bc:5c:4b:2d:8a:23:0c:32:ff:
                    7b:35:a9:a0:dc:0a:cf:10:94:5c:68:94:bc:8e:5f:
                    ac:03:93:8f:b9:6e:7f:52:b7:57:b2:bf:62:00:56:
                    cb:54:49:fc:c1:c7:f3:d8:16:9d:b2:bd:48:ce:e5:
                    b1:04:fc:94:44:af:34:74:35:1e:ea:87:0c:70:e4:
                    d2:11:bd:c7:01:cf:54:b7:3c:5d:b9:11:22:83:04:
                    05:e2:a7:d4:d6:b9:07:30:d9:f5:ab:65:16:da:ec:
                    d1:d7:f3:35:ca:fe:4b:81:85:87:cf:7d:f5:84:36:
                    f3:ae:6a:62:41:94:b6:83:72:0d:20:50:f7:b4:56:
                    2f:d0:b8:59:13:43:47:8b:03:d9:8a:02:a5:ce:70:
                    c7:5d:ce:1a:86:43:e1:81:ca:ec:62:2c:ca:91:63:
                    46:d2:9b:1d:05:df:88:4f:ef:a7:e0:b4:23:42:a0:
                    4d:1c:a8:3c:c7:18:f5:eb:17:51:5e:a6:48:92:f8:
                    1f:00:b0:90:5c:63:b9:66:b2:07:3c:5e:bd:b8:a4:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3F:DF:A0:03:D0:80:A8:2F:0B:3E:12:14:63:F7:95:46:30:DE:A3
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343030363a3a2f34382d3438203d3e20313333383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:e100:4006::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:b9:4c:80:37:b9:62:62:0a:b0:d8:f5:9d:25:4a:4e:d9:f7:
         b8:18:c4:4c:35:f7:c3:f1:8d:17:b5:b8:b9:24:fc:7c:1a:ca:
         cf:23:1a:33:57:ff:dd:be:88:9e:eb:4e:58:c5:72:43:e6:fa:
         75:0e:5b:f8:8a:cb:cc:37:57:9a:07:2b:54:7e:fd:bc:a7:bf:
         c4:43:2f:c9:02:d4:29:b6:5c:5f:95:5d:30:fa:66:d3:f7:c2:
         94:83:71:d6:ef:ba:77:f3:12:52:32:2f:57:71:5a:75:8c:d9:
         d2:65:45:4e:97:59:a3:e8:ba:81:06:dc:97:e1:46:0e:3e:9b:
         43:69:ad:bc:32:89:0f:1f:cf:7a:96:28:25:63:2b:d0:8e:d6:
         26:68:46:9d:42:77:cf:b4:9c:52:54:1f:51:3f:26:af:ed:25:
         5f:fd:9a:13:55:9a:a5:1b:40:a7:dc:08:91:57:7b:bd:56:3e:
         de:64:e0:a2:76:21:83:8b:8b:5c:fa:8b:1e:0c:58:57:a9:f6:
         38:3f:50:79:13:76:ac:18:14:40:67:29:f1:2f:de:3a:f5:91:
         00:0c:11:7a:60:43:a3:66:99:54:a6:8f:28:11:45:94:16:3b:
         53:7b:68:e8:5b:6c:f1:6a:cd:b7:1f:e6:f8:f4:dd:72:d4:cb:
         29:0d:17:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org