Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa
File:                     323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier:          hBf+q6AdhiVq1tEu9krwVeJCdObfFxp+zFlxc5Fxa1c=
Subject key identifier:   05:76:8F:47:CA:6F:58:DD:AD:BC:18:6E:D2:ED:03:4D:67:9B:E8:F5
Certificate issuer:       /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial:       195BF3DD2A2995FEC310CB64CE31AEEE74239C5A
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa
Signing time:             Sun 28 Jan 2024 08:00:01 +0000
ROA not before:           Sun 28 Jan 2024 07:55:01 +0000
ROA not after:            Sun 26 Jan 2025 08:00:01 +0000
asID:                     139972
IP address blocks:        2405:c440:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
                          rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5b:f3:dd:2a:29:95:fe:c3:10:cb:64:ce:31:ae:ee:74:23:9c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
        Validity
            Not Before: Jan 28 07:55:01 2024 GMT
            Not After : Jan 26 08:00:01 2025 GMT
        Subject: CN=05768F47CA6F58DDADBC186ED2ED034D679BE8F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:25:2c:ce:18:0d:1c:74:72:06:50:79:90:
                    e8:a5:70:9c:0c:2c:7c:48:8e:27:5e:e5:95:9c:a1:
                    7a:2d:f9:ab:2e:e3:57:a4:97:b1:54:5b:d9:3c:ad:
                    82:8a:a9:65:a0:68:72:69:86:56:01:b9:c9:bc:b1:
                    53:e3:f2:2f:16:82:21:fc:4c:cf:5f:96:a5:78:28:
                    4e:8e:e6:43:3e:0a:f4:05:cd:ef:cd:f6:a1:c8:33:
                    bd:b1:66:48:56:4f:da:75:b3:0e:17:d3:14:9c:4c:
                    ce:7e:f4:63:67:53:7f:eb:9b:ee:66:fc:2f:e0:f5:
                    7f:ba:18:70:e5:e2:a2:97:89:3a:b5:69:ff:98:4f:
                    5e:04:ec:de:24:b5:94:06:e3:52:de:0b:a6:b7:fa:
                    25:aa:0b:c4:ed:d4:17:9a:69:8a:6e:b9:5d:0b:68:
                    99:0d:25:29:7f:28:99:23:97:23:c1:03:48:50:8d:
                    52:d0:9e:b5:40:4d:dc:81:13:85:06:3b:2d:1d:31:
                    cd:ea:b1:8b:17:82:8f:14:10:60:00:70:52:af:a6:
                    5c:87:b8:06:ba:43:02:83:79:48:2f:4e:b2:f0:47:
                    7a:11:df:73:31:9e:0a:eb:d2:5d:4d:c0:4f:86:54:
                    0d:46:47:9f:00:67:e0:74:57:0e:c1:f3:df:5b:60:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:76:8F:47:CA:6F:58:DD:AD:BC:18:6E:D2:ED:03:4D:67:9B:E8:F5
            X509v3 Authority Key Identifier:
                keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c440:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:19:39:39:7e:2f:12:dd:1d:38:46:93:af:68:57:e1:fd:b1:
         61:32:5f:15:40:fc:8f:57:1e:9e:ec:16:b5:ab:dc:cf:d0:42:
         08:be:32:bc:da:14:ae:f5:dd:b0:da:d0:cd:45:a3:25:d6:a2:
         2e:a0:33:fb:86:88:b2:2c:3a:f3:10:e1:44:4a:44:91:9a:3a:
         c3:63:0d:3e:ef:04:5c:8c:08:88:92:af:41:70:d1:2f:ab:78:
         4b:ee:60:2b:26:42:bd:99:52:f6:68:ea:36:87:33:31:34:57:
         a0:39:27:5c:e6:12:e2:6f:52:32:16:f0:0e:aa:55:b3:b1:4e:
         17:fc:9d:b1:b8:3b:87:ea:be:3a:5f:ef:97:e0:5a:51:53:69:
         bb:92:d6:da:63:bd:b6:65:11:ed:98:3f:f2:4c:a8:2b:7c:08:
         58:00:18:ee:68:4e:8b:e1:cd:7b:d6:64:13:98:da:31:21:0d:
         2e:09:cf:f2:84:b8:70:1c:5f:1e:ff:6c:82:e0:ae:03:7e:48:
         c8:40:3b:bf:48:37:35:c0:bd:29:33:61:0e:b3:a0:2d:45:d7:
         6a:00:a2:3d:13:d4:2f:e4:6c:7b:e8:19:99:e0:7f:36:f6:a0:
         f8:d7:f2:47:00:82:a0:3b:57:3b:ca:52:5a:44:33:c7:7f:cc:
         f1:b9:5c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:55 2024 by rpki-client on console-fra.rpki-client.org