Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f34382d3438203d3e20313336303739.roa
File:                     323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (raw, json)
Hash identifier:          GZ3/V+zqcDIloNwLRDncl8p22SXMpal1fQkO46P1elU=
Subject key identifier:   6F:A1:4A:5A:F9:C7:D6:F4:1D:27:34:39:83:F3:1C:83:54:1A:5E:D0
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       62BFADD562D13931C19D5D79CFD14BC1CAE5ECBC
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f34382d3438203d3e20313336303739.roa
Signing time:             Tue 13 Aug 2024 01:22:59 +0000
ROA not before:           Tue 13 Aug 2024 01:17:59 +0000
ROA not after:            Tue 12 Aug 2025 01:22:59 +0000
asID:                     136079
IP address blocks:        2405:2cc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
                          rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 09:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bf:ad:d5:62:d1:39:31:c1:9d:5d:79:cf:d1:4b:c1:ca:e5:ec:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: Aug 13 01:17:59 2024 GMT
            Not After : Aug 12 01:22:59 2025 GMT
        Subject: CN=6FA14A5AF9C7D6F41D27343983F31C83541A5ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:e3:b2:38:6c:6d:dc:6a:79:ad:36:6e:44:
                    e1:2b:8b:af:a4:f6:99:25:21:87:bf:ca:f5:a5:7a:
                    c4:e6:48:a3:e6:67:00:fc:6d:b7:80:c0:28:8d:ab:
                    03:55:bf:71:a6:83:a3:0c:f4:77:02:2e:a7:df:90:
                    4d:d9:10:b0:42:68:7c:7a:8d:73:11:d8:2d:61:d8:
                    56:7f:8a:39:69:8e:73:1e:0d:86:ad:39:50:38:26:
                    1c:27:11:88:2e:0c:57:c0:1b:29:1e:ad:97:47:ba:
                    6e:97:ad:bc:47:05:2b:28:0b:7b:ce:c4:fc:49:27:
                    26:74:7e:89:90:9d:cf:f2:a5:fe:23:b7:5c:13:0a:
                    53:26:88:6c:a4:59:42:80:9e:eb:f5:a9:f3:7e:87:
                    b1:11:d4:2e:5b:23:0e:3c:e4:28:90:b3:a2:b3:bb:
                    2e:48:7a:84:d7:a1:20:b8:03:88:33:da:44:09:db:
                    7f:84:e4:9d:c8:11:e3:05:3f:85:01:9d:c2:dc:d7:
                    51:2f:b5:a0:04:3b:86:d9:b2:c7:f3:59:f5:ba:fb:
                    ba:78:ce:03:1f:2a:d7:de:ba:ec:19:14:5d:61:f7:
                    d1:39:f6:b5:a5:04:7e:9e:03:ac:f9:6f:2e:8c:4f:
                    88:6a:3a:92:44:60:5c:d6:7e:5d:90:31:c2:ba:e5:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A1:4A:5A:F9:C7:D6:F4:1D:27:34:39:83:F3:1C:83:54:1A:5E:D0
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f34382d3438203d3e20313336303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:16:70:06:c7:34:01:18:df:cb:58:8a:bb:f8:06:c0:b4:70:
         3c:b8:80:27:ab:8e:19:7f:2e:b4:13:40:12:f7:09:36:55:84:
         c4:eb:b6:a4:e0:f5:b1:eb:6f:3f:ef:bd:87:35:d5:63:f0:80:
         c4:24:56:52:c0:ea:3b:e4:9f:b9:f4:fe:dd:ae:42:05:1e:15:
         d4:d9:0f:25:de:8d:0c:b0:e6:07:fa:e8:ed:62:2d:45:b5:15:
         6b:9b:a7:ad:a9:36:b1:b6:d2:10:75:cc:3c:0c:fb:55:b8:d4:
         6d:08:6d:70:30:7e:da:9b:51:12:8b:da:4c:29:58:7d:64:44:
         72:3c:95:d0:c2:6d:67:04:38:e9:5a:35:1d:a0:43:b7:79:13:
         c6:2c:ac:19:cd:4f:92:49:79:0e:2b:ed:71:6c:d6:14:4f:47:
         36:48:8e:ee:37:ce:a3:9f:07:90:6e:a0:ac:a5:1e:f1:d6:04:
         30:f7:13:e2:9b:3d:fd:6f:9d:d0:c7:b8:64:fb:9b:58:08:9f:
         57:a1:aa:51:b0:5d:4a:12:61:dc:8a:f8:28:29:d9:3d:df:3e:
         95:39:e5:32:3b:b7:85:c8:aa:27:af:d6:27:a6:d9:6d:30:b6:
         e6:d1:5b:1e:a7:1e:d3:94:85:9f:e4:c2:06:26:b4:46:cc:54:
         32:31:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:56 2024 by rpki-client on console-ams.rpki-client.org