Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa
File:                     323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (raw, json)
Hash identifier:          GoQoKq1akj/66y0nBjwwfHjK4L+5cg9uBhRux81ephU=
Subject key identifier:   49:0F:E4:5B:E3:C6:79:09:27:A9:E3:C1:66:87:BA:67:9C:D9:AE:AB
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       6954CD55E1BFED83A5FBAC1ECAF2EF6474B3CFFB
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa
Signing time:             Fri 14 Jul 2023 05:09:50 +0000
ROA not before:           Fri 14 Jul 2023 05:04:50 +0000
ROA not after:            Fri 12 Jul 2024 05:09:50 +0000
asID:                     138818
IP address blocks:        2406:be40:b15a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:54:cd:55:e1:bf:ed:83:a5:fb:ac:1e:ca:f2:ef:64:74:b3:cf:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Jul 14 05:04:50 2023 GMT
            Not After : Jul 12 05:09:50 2024 GMT
        Subject: CN=490FE45BE3C6790927A9E3C16687BA679CD9AEAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:81:69:cf:4a:33:54:f3:33:4d:55:b6:2b:e8:
                    18:1b:67:6f:ad:9d:97:d0:6b:c6:5e:82:15:e2:54:
                    3f:35:72:4f:fa:16:67:be:3e:dc:23:5a:aa:67:60:
                    9c:b0:b8:4c:26:47:51:88:54:a6:24:b2:90:30:3b:
                    33:81:9a:72:cf:92:1f:38:dc:a7:fe:c7:f8:99:17:
                    28:5d:ce:d8:a6:d7:33:84:48:dd:ad:3b:f1:76:57:
                    54:b0:14:dd:c7:1d:a8:2b:bc:61:15:b0:67:f0:e0:
                    d8:c1:16:4b:92:b3:1f:b5:0f:6b:72:1f:6e:ca:48:
                    67:13:2a:72:46:92:a3:c0:dd:47:c4:6d:3f:cf:56:
                    18:c7:e5:96:46:ad:16:ea:14:18:8c:13:27:af:56:
                    f8:25:3b:bb:bb:f0:af:cc:73:34:6c:bf:d8:f7:8b:
                    a9:47:20:2d:d7:29:2b:14:8f:00:15:fe:6a:f1:7e:
                    da:39:a3:e4:de:4f:64:87:20:38:1b:cc:78:82:1d:
                    76:ba:47:a1:ba:53:0f:e3:d2:fc:64:05:3c:a0:05:
                    ec:2c:86:7f:ea:e8:3a:f6:c3:0b:eb:03:09:47:b5:
                    ce:cf:f7:76:a6:67:43:ce:da:9b:e8:f3:be:a8:e7:
                    08:dd:17:cd:d9:62:09:b7:80:fa:76:fa:1b:6a:ce:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0F:E4:5B:E3:C6:79:09:27:A9:E3:C1:66:87:BA:67:9C:D9:AE:AB
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:be40:b15a::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:da:55:28:58:62:ee:d6:ac:eb:98:a3:d6:eb:9f:ac:a7:31:
         47:c8:f2:0b:a5:f6:b3:71:bb:3f:07:9e:6e:07:02:b3:da:48:
         b1:b2:29:fa:35:71:3c:16:71:0c:c9:e8:d8:14:f4:c2:14:f6:
         7a:34:11:57:c8:b7:65:7b:c6:f6:90:9a:fa:f6:36:8c:7d:c9:
         52:ed:a7:47:c1:33:2b:d3:9d:b3:af:76:bc:c8:7c:43:84:d1:
         0d:31:28:99:79:48:21:e3:b2:df:a7:a3:e3:4c:2c:82:e7:68:
         73:a3:90:9a:62:d3:44:84:5a:4a:aa:49:6b:70:a4:af:a8:30:
         6d:26:04:c0:6e:81:df:ab:c9:93:5b:47:69:a5:c6:86:9b:ca:
         05:88:dc:ef:31:c7:34:e1:75:ae:46:7b:5c:b1:fa:e5:a1:ba:
         f7:98:03:4a:9c:6d:0a:c5:4d:c6:cd:9c:34:67:19:cf:07:af:
         da:49:82:ae:49:85:26:04:55:fd:49:d6:98:f1:c2:0e:38:ee:
         d3:55:59:0b:13:db:a4:8d:6e:7b:b8:a7:66:c4:62:8c:2f:5a:
         5b:14:8e:ed:44:6a:f5:84:84:f5:73:3f:f3:f0:d8:6c:20:b4:
         eb:f2:16:72:24:7c:b9:51:ab:2e:f1:1a:2f:04:df:cc:f0:b0:
         f3:1a:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:29 2024 by rpki-client on console-fra.rpki-client.org