Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a363030653a3a2f34382d3438203d3e20313336303739.roa
File:                     323430353a326363303a363030653a3a2f34382d3438203d3e20313336303739.roa (raw, json)
Hash identifier:          xrpSzgHa9zaFBa/VYOgjPFbRDtwLodNSxrBTWKN0rmE=
Subject key identifier:   59:C2:90:52:11:02:C2:CA:09:C1:DE:98:B4:4B:76:FF:28:54:56:8C
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       7FAD6AE69D03C7EFEBC9A545137640868F1C5836
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a363030653a3a2f34382d3438203d3e20313336303739.roa
Signing time:             Mon 31 Jul 2023 00:04:00 +0000
ROA not before:           Sun 30 Jul 2023 23:59:00 +0000
ROA not after:            Mon 29 Jul 2024 00:04:00 +0000
asID:                     136079
IP address blocks:        2405:2cc0:600e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
                          rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 05:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ad:6a:e6:9d:03:c7:ef:eb:c9:a5:45:13:76:40:86:8f:1c:58:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: Jul 30 23:59:00 2023 GMT
            Not After : Jul 29 00:04:00 2024 GMT
        Subject: CN=59C290521102C2CA09C1DE98B44B76FF2854568C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:ba:46:2a:d5:c8:e9:9a:e4:a9:e4:14:1d:
                    d9:5d:21:b2:82:aa:d5:f9:e5:30:31:d5:6c:50:06:
                    eb:cb:db:28:15:66:78:20:0d:8e:3a:d5:94:a6:3a:
                    07:68:87:32:4a:a4:d1:d6:8e:65:80:19:61:4d:f5:
                    11:2f:09:e2:06:96:27:97:7d:e0:46:e6:8e:07:52:
                    c2:70:3c:58:3d:65:c7:f2:b6:1f:1e:1d:6a:b5:40:
                    75:b8:6b:7f:92:ee:b4:5e:d1:88:41:93:1e:97:5f:
                    68:93:6f:3c:cb:45:75:4c:1b:e7:a4:34:36:0a:95:
                    9f:0a:e7:36:e2:3c:c4:08:26:10:e9:14:d5:3c:73:
                    a6:c4:af:9f:0c:6f:d4:3a:03:b4:a2:cc:ca:c8:6c:
                    cf:76:b3:72:b3:5e:81:5e:56:99:d2:8f:da:96:65:
                    0e:c6:1d:56:6e:a1:d9:d1:de:3f:b2:bf:31:46:24:
                    4f:7f:c1:6b:9c:6d:cf:01:ac:9c:9c:0d:b6:04:b7:
                    bd:b7:c8:81:07:99:7c:ba:42:06:33:87:af:5f:ad:
                    30:fd:ac:da:bd:7a:11:54:d0:7f:98:d5:bd:7a:78:
                    31:a7:39:8b:e1:31:88:30:62:75:e6:88:e9:c8:fd:
                    a2:f4:78:a5:cc:77:ef:05:7d:c2:26:f8:47:95:5d:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C2:90:52:11:02:C2:CA:09:C1:DE:98:B4:4B:76:FF:28:54:56:8C
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a363030653a3a2f34382d3438203d3e20313336303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2cc0:600e::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:17:51:8d:c4:40:98:18:46:ea:07:51:89:a0:5a:9f:a8:0c:
         9b:69:a9:70:ba:4c:c0:e7:c3:d8:0c:65:6a:c5:cd:3a:4e:34:
         38:f7:60:42:3d:96:30:83:d6:ea:71:d9:ab:54:5c:00:8e:ee:
         d1:4e:df:51:17:9a:d4:34:09:ba:21:22:10:be:30:71:35:51:
         b2:5d:fd:7b:01:38:a9:8f:da:4e:29:7e:bd:a6:24:ae:01:f1:
         68:96:5c:02:51:54:13:b1:60:f9:25:41:af:9f:0d:fa:1e:f7:
         a9:ef:42:6a:a1:f6:4b:19:92:29:1c:42:da:33:47:6c:9b:ae:
         2a:b9:9e:69:9f:c1:df:c6:bf:da:79:ad:05:db:3d:70:ac:43:
         01:86:87:99:94:c1:09:73:32:68:67:b6:21:22:7a:d6:b8:b5:
         1e:f3:fc:92:46:53:43:b5:1c:ef:c4:a5:a4:62:c1:fe:88:34:
         fd:58:21:cc:0f:93:63:2c:6b:8e:00:35:08:e5:fe:e1:1d:0f:
         f8:b5:13:e6:42:3f:bc:d3:d4:77:9b:ff:c9:da:ef:72:01:52:
         d8:d7:15:dc:4f:9f:3d:56:77:71:ef:33:ea:5e:79:e9:1a:00:
         6e:2c:8e:f9:a0:02:ec:6f:6f:f2:24:70:a6:28:bd:31:15:28:
         03:e9:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:11:42 2024 by rpki-client on console-ams.rpki-client.org