Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/323430363a363263303a3a2f33322d3332203d3e20313431303734.roa
File:                     323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (raw, json)
Hash identifier:          /Qubahg6iyutXhJp/TWUbUW351esUCIVNAyTMSK5KWU=
Subject key identifier:   4C:E2:6F:54:C6:3B:23:95:0F:ED:11:F9:B4:57:74:3B:1A:74:F9:5C
Certificate issuer:       /CN=DE4325727D17555F6DABCC72788E361C741D47CF
Certificate serial:       5C08815B6DF63515DA3974132E309881B1B5F545
Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/323430363a363263303a3a2f33322d3332203d3e20313431303734.roa
Signing time:             Thu 04 Apr 2024 06:00:01 +0000
ROA not before:           Thu 04 Apr 2024 05:55:01 +0000
ROA not after:            Thu 03 Apr 2025 06:00:01 +0000
asID:                     141074
IP address blocks:        2406:62c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl
                          rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:08:81:5b:6d:f6:35:15:da:39:74:13:2e:30:98:81:b1:b5:f5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF
        Validity
            Not Before: Apr  4 05:55:01 2024 GMT
            Not After : Apr  3 06:00:01 2025 GMT
        Subject: CN=4CE26F54C63B23950FED11F9B457743B1A74F95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:61:81:48:91:3a:b0:8b:21:04:67:4f:95:
                    34:de:7a:7c:1e:d1:ef:91:ce:a4:a4:d5:8b:c3:5a:
                    42:cc:bb:ee:69:9a:90:24:3b:d2:29:be:93:8b:86:
                    fa:21:63:97:c6:eb:8f:4b:bd:c3:0e:80:55:18:4c:
                    ca:0b:44:22:a2:f5:36:77:a6:cc:65:b4:1d:ee:18:
                    6a:db:c5:b8:05:94:1d:66:56:5c:aa:26:f8:a2:ad:
                    94:79:24:47:2f:0d:6c:f8:ee:35:45:72:ad:bc:00:
                    8a:e8:e9:f0:a0:18:e0:68:bc:24:b2:1a:f8:c9:99:
                    42:64:e3:ba:f5:31:1e:51:67:3f:ac:fb:77:6a:63:
                    f0:b1:9a:06:1f:12:d3:13:ba:9b:3c:3d:af:cc:e7:
                    03:32:71:8b:3d:57:47:a8:fe:3f:ef:1f:84:c5:06:
                    eb:b6:74:7e:68:88:1d:08:5a:87:11:0d:8f:91:74:
                    97:d5:63:6f:9c:78:29:d0:21:7c:a8:d6:b3:66:a1:
                    1c:77:6e:c3:fb:7b:44:ad:67:64:fd:58:92:34:ff:
                    02:cd:97:3a:4c:04:25:ab:7c:2d:a5:30:01:90:f3:
                    c6:81:91:6e:90:fd:63:41:9d:22:24:c6:f6:f8:16:
                    df:9a:90:6b:7e:38:96:2b:a6:d2:c7:3b:0a:d6:62:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E2:6F:54:C6:3B:23:95:0F:ED:11:F9:B4:57:74:3B:1A:74:F9:5C
            X509v3 Authority Key Identifier:
                keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/323430363a363263303a3a2f33322d3332203d3e20313431303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:62c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:3c:cb:cb:0b:ff:8b:5b:91:d6:c1:86:f9:4e:ec:7e:9a:a2:
         aa:75:b6:c5:bf:34:a5:66:94:52:83:67:16:62:8b:56:2c:bb:
         5d:b3:62:f2:ef:ea:50:b8:f9:86:50:bf:a2:6b:d5:7c:a5:b2:
         09:02:7d:d2:db:fb:32:27:7f:ee:1a:8d:af:84:6d:f6:c3:ea:
         b7:db:72:ee:8e:5c:fe:d7:c8:3b:2f:24:e7:13:94:5b:c8:55:
         28:70:4e:0e:5e:d1:d9:7c:6e:75:eb:77:1b:f7:20:4e:ca:28:
         b5:fc:b6:53:45:b1:ba:64:8c:b0:6b:ff:24:2d:99:84:a0:09:
         ab:79:87:cd:c4:b9:3f:70:a5:ce:23:95:47:66:ab:5d:41:11:
         60:f3:e1:44:44:32:97:5d:b3:3f:52:58:33:ef:23:0d:e8:05:
         73:4c:19:ec:4a:18:e5:1f:43:4f:6c:bd:fe:70:25:49:f6:69:
         e5:92:9a:7f:10:08:dc:42:a9:8f:b9:88:70:4a:5e:0a:9f:b2:
         77:cb:b8:90:0a:e6:97:92:e1:d2:9b:24:f7:0f:44:bb:0b:6b:
         a6:2f:e6:41:9f:ce:18:0e:a6:5b:a4:97:5c:5e:a7:6a:fd:71:
         59:9f:3f:6e:1f:2a:e4:7c:bc:07:bf:02:c2:9c:21:1c:d9:5c:
         a8:7b:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:06:51 2024 by rpki-client on console-ams.rpki-client.org