Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a3a2f33322d3332203d3e20313339393732.roa
File:                     323430353a633434303a3a2f33322d3332203d3e20313339393732.roa (raw, json)
Hash identifier:          x8SEVHMfEGptdrZH4advWZ6Qy0OHhP2q66h1dHtrNag=
Subject key identifier:   78:9E:D7:8A:9B:5A:6A:16:7E:58:00:7A:66:B7:16:DA:16:BC:17:73
Certificate issuer:       /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial:       040CBFDCDCA0D9FA9570DD524D500891948911F3
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a3a2f33322d3332203d3e20313339393732.roa
Signing time:             Sat 09 Sep 2023 07:00:00 +0000
ROA not before:           Sat 09 Sep 2023 06:55:00 +0000
ROA not after:            Sat 07 Sep 2024 07:00:00 +0000
asID:                     139972
IP address blocks:        2405:c440::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
                          rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0c:bf:dc:dc:a0:d9:fa:95:70:dd:52:4d:50:08:91:94:89:11:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
        Validity
            Not Before: Sep  9 06:55:00 2023 GMT
            Not After : Sep  7 07:00:00 2024 GMT
        Subject: CN=789ED78A9B5A6A167E58007A66B716DA16BC1773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:8a:66:7f:86:48:53:e4:aa:9e:df:09:be:11:
                    f1:79:7b:b9:f3:35:ea:c3:44:20:21:06:a5:f2:33:
                    67:e5:ef:5a:06:d1:3f:7c:b1:df:b1:0b:4e:62:b9:
                    fd:fd:56:60:09:5c:63:27:db:93:00:42:a3:47:d4:
                    fe:bc:60:75:a7:4c:9e:78:89:b1:15:d5:be:c3:9c:
                    ac:e3:61:3f:29:e0:b9:ce:71:cd:df:3f:d1:4e:60:
                    d4:70:21:8d:c8:a8:b0:28:e6:65:57:e2:57:8f:90:
                    a9:56:b6:f3:1b:c8:62:b6:d1:28:a0:d6:13:14:ea:
                    45:79:1c:51:6c:a9:bf:d1:09:56:52:d6:04:57:30:
                    4a:c7:2b:d3:de:3a:64:e3:29:31:17:f5:7f:c6:bc:
                    9d:9d:5e:e1:6b:fe:81:ed:e4:7f:c3:4a:a1:77:40:
                    dc:d9:c1:8a:95:59:d5:fc:d1:5b:b6:a5:24:ee:ba:
                    d5:27:ae:c3:7a:5f:72:6d:48:2d:bb:e4:22:8a:cb:
                    10:83:a0:6b:38:7f:69:78:8a:8d:53:43:9b:6f:9f:
                    fc:cb:1b:a0:c4:70:dc:5d:35:31:8a:dd:fd:cb:5c:
                    d4:c4:87:ee:46:e0:a4:fd:9b:7a:b2:01:d6:28:37:
                    cb:46:6d:8f:fb:6a:75:a0:21:b3:f6:37:38:12:2c:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9E:D7:8A:9B:5A:6A:16:7E:58:00:7A:66:B7:16:DA:16:BC:17:73
            X509v3 Authority Key Identifier:
                keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a3a2f33322d3332203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c440::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:0e:b4:72:72:b1:2b:c4:2a:9f:5f:50:f1:ac:91:7a:d5:56:
         ed:63:38:6a:13:8d:4c:2c:e3:58:92:07:fb:c6:7a:57:ab:8c:
         52:4a:08:18:9d:65:f4:b6:9c:07:bc:fe:3b:e6:9f:78:b5:41:
         ff:2d:ac:f2:37:59:37:4a:09:35:f8:3e:13:4c:08:f3:4d:23:
         8e:ca:54:a0:13:26:3d:99:41:a5:3c:ec:71:33:d3:5b:b0:c2:
         5c:74:d1:7e:ff:0c:56:1f:f5:e5:91:2a:1c:61:05:50:38:d4:
         44:e5:a5:b1:3e:07:78:7a:26:4b:8e:11:38:04:ed:19:3f:bc:
         52:bb:ef:62:63:fe:93:71:78:3a:be:dd:ab:23:49:e7:7c:50:
         50:0f:c9:4f:fa:e7:8c:91:99:f6:f2:2b:39:bd:76:c6:83:ed:
         a6:dd:e2:a3:1a:e3:c6:4b:b8:32:e1:94:fa:fe:58:9f:bb:44:
         8c:b7:ed:59:8b:90:25:e4:4b:5f:4c:a0:24:d6:6e:33:81:ca:
         0b:47:63:ef:09:44:51:e4:2d:41:e0:90:0b:c8:21:61:e9:9a:
         1a:fb:82:f6:32:6f:c4:8c:d7:33:3d:2b:e0:c9:a5:17:36:27:
         68:70:8f:16:ec:e6:a9:51:a0:86:6f:52:0c:0c:f5:c0:3e:0f:
         18:37:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:16 2024 by rpki-client on console-ams.rpki-client.org