Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa
File:                     323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier:          Wom6LDfbJy8F85mRDiIbJ5Ri1R4/nSARHD0lrYx9cIo=
Subject key identifier:   24:FE:61:E6:A1:90:34:C2:5F:E7:25:95:CB:BB:D4:36:54:68:7C:3B
Certificate issuer:       /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial:       0100F5EAEF93EFC58F429066B8F609CE9103A256
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa
Signing time:             Mon 12 Feb 2024 08:01:20 +0000
ROA not before:           Mon 12 Feb 2024 07:56:20 +0000
ROA not after:            Mon 10 Feb 2025 08:01:20 +0000
asID:                     139972
IP address blocks:        2405:c440:1399::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
                          rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:00:f5:ea:ef:93:ef:c5:8f:42:90:66:b8:f6:09:ce:91:03:a2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
        Validity
            Not Before: Feb 12 07:56:20 2024 GMT
            Not After : Feb 10 08:01:20 2025 GMT
        Subject: CN=24FE61E6A19034C25FE72595CBBBD43654687C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8a:14:39:65:98:13:de:b1:82:81:6f:7f:8e:
                    86:c9:9e:f0:1e:2e:46:e3:95:dc:ea:b9:f3:3f:85:
                    b3:3d:94:3e:ad:e7:2b:09:5c:20:8d:b6:ed:cf:79:
                    ba:cf:94:56:66:d3:b1:25:5d:e5:4b:dd:32:51:ed:
                    c0:b5:e8:cb:aa:b8:ff:6f:d2:43:13:f1:a7:82:84:
                    50:f0:a9:10:dc:ab:f7:3f:aa:3f:67:24:94:07:32:
                    d5:10:7c:22:b7:2f:c0:e0:d7:2a:74:1e:3b:d8:7d:
                    94:24:df:7c:44:ac:2c:20:73:0b:11:db:2c:04:6f:
                    67:a8:28:d6:6a:21:36:51:53:ba:87:77:db:98:ed:
                    35:15:de:06:0e:b2:49:b3:60:df:5e:9d:c1:92:31:
                    5f:2c:0f:20:71:eb:6e:c2:f1:7a:b5:29:18:37:9e:
                    5b:be:73:d6:0a:a8:9a:df:c6:e8:55:57:71:f3:f3:
                    09:ee:04:0f:2e:26:03:2e:65:d3:0d:ff:8c:51:30:
                    a0:65:15:c5:2b:b7:eb:c9:71:bc:d0:7d:b4:9f:c6:
                    65:26:70:79:05:b7:ad:28:a2:8f:fd:0e:8a:d7:ac:
                    dc:8f:84:64:79:32:5d:c2:93:c7:99:25:7d:84:8a:
                    48:8c:10:c9:83:c0:19:d4:d8:1a:c2:63:fc:f6:a6:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FE:61:E6:A1:90:34:C2:5F:E7:25:95:CB:BB:D4:36:54:68:7C:3B
            X509v3 Authority Key Identifier:
                keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c440:1399::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:f3:53:63:1e:ff:57:c0:de:2c:73:f4:55:e8:43:03:7a:
         fe:9d:23:9e:7d:35:1c:ec:74:be:d1:0a:5c:6a:97:38:04:7a:
         14:a7:75:4e:97:16:5f:c5:f3:34:8d:35:d0:bc:33:db:22:de:
         11:29:a2:73:cc:97:cc:bf:24:29:2c:b3:c7:23:c0:ce:68:59:
         73:a4:ea:ae:31:71:33:ec:e3:63:0e:ba:53:bd:fe:23:9b:cc:
         b9:d2:7d:7f:ca:94:a8:4b:c9:83:dd:f7:ac:98:16:f9:09:05:
         ea:75:d8:e3:13:e1:29:1e:58:5e:ab:6a:04:ae:4f:a7:d0:7f:
         e1:80:c8:6b:39:c9:68:df:3e:64:81:3e:54:7f:fb:54:e6:a3:
         09:b0:0b:7c:be:0a:19:e9:c5:a8:a7:b0:41:20:1a:ad:75:28:
         93:ac:e6:4c:1e:7c:0c:06:32:11:b7:cd:72:f4:05:f0:e9:9f:
         c8:20:18:fd:be:c8:ea:b9:a9:38:ec:56:9a:b2:fa:88:57:5c:
         00:72:69:6e:92:c8:49:39:c7:c3:20:f9:1d:cb:e0:0e:5e:38:
         3f:d1:8d:09:e3:8b:37:73:95:4c:1d:88:ce:b3:fc:eb:ea:31:
         c3:b2:97:f7:70:6d:a5:06:66:f9:be:2f:5c:01:3e:7a:75:46:
         40:c9:35:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org