Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/323430363a316230303a3a2f33322d3438203d3e203435333137.roa
File:                     323430363a316230303a3a2f33322d3438203d3e203435333137.roa (raw, json)
Hash identifier:          dYmmOa8W9RdwU+QBE71FNk1MSkGLDQEe2yh783A8VCY=
Subject key identifier:   F3:C8:08:0E:57:22:0D:13:78:F0:55:8F:75:DD:4A:DA:C9:1F:5D:5B
Certificate issuer:       /CN=20566897603B029812606C25ABC972BAC5BF4AFB
Certificate serial:       19EEA16C30B218984CAA12740B8DA0C531FC18E0
Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/323430363a316230303a3a2f33322d3438203d3e203435333137.roa
Signing time:             Tue 25 Jul 2023 07:54:49 +0000
ROA not before:           Tue 25 Jul 2023 07:49:49 +0000
ROA not after:            Tue 23 Jul 2024 07:54:49 +0000
asID:                     45317
IP address blocks:        2406:1b00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl
                          rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 05:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ee:a1:6c:30:b2:18:98:4c:aa:12:74:0b:8d:a0:c5:31:fc:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB
        Validity
            Not Before: Jul 25 07:49:49 2023 GMT
            Not After : Jul 23 07:54:49 2024 GMT
        Subject: CN=F3C8080E57220D1378F0558F75DD4ADAC91F5D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c5:97:20:7e:88:fb:2d:12:fc:b8:da:8d:5e:
                    9d:a9:ca:c1:27:f7:76:b3:69:13:28:6e:7d:c7:12:
                    41:03:11:01:96:ca:e4:4d:d8:78:3f:21:f7:45:da:
                    57:33:66:ed:4b:39:2a:98:f2:7d:7a:2f:9e:b2:9c:
                    35:c8:83:5a:d8:b3:f1:85:2d:26:06:6e:f2:86:02:
                    31:1a:15:b7:27:c6:02:03:e4:df:a4:42:a1:35:ac:
                    bb:33:0f:ba:ac:a3:27:62:ab:1e:9a:6f:ea:9d:9a:
                    ab:0e:fe:dd:a8:ea:ce:58:72:73:b7:91:44:aa:f6:
                    aa:f5:0e:1f:81:a2:fd:0f:c4:6c:eb:00:e0:91:fd:
                    ae:1a:dc:ad:1c:5c:6e:68:c9:bc:49:46:64:95:b7:
                    93:1c:03:59:7f:6f:08:0a:dd:f4:d4:69:49:37:fd:
                    9f:95:ec:dd:22:74:ac:81:20:1a:8a:bc:4a:5e:5e:
                    62:2c:1d:98:ae:7b:6e:3d:ea:c3:ab:1e:50:fb:96:
                    b3:df:5e:af:b9:31:26:fc:4e:93:da:54:9c:42:92:
                    12:23:6a:49:fa:d1:84:3b:ff:44:b0:b5:7b:32:b3:
                    c0:c1:89:1c:6f:b8:41:28:8f:83:c1:cf:3b:c3:8a:
                    6b:e3:fc:ab:8e:c9:a0:e2:97:ff:27:49:4e:98:f8:
                    3d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C8:08:0E:57:22:0D:13:78:F0:55:8F:75:DD:4A:DA:C9:1F:5D:5B
            X509v3 Authority Key Identifier:
                keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/323430363a316230303a3a2f33322d3438203d3e203435333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:1b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ce:d1:5c:7f:35:8c:09:70:60:74:ab:fe:a7:19:bc:a3:7a:
         ec:28:a6:36:ab:af:49:e3:82:9d:c8:0b:04:17:aa:79:ce:13:
         4f:af:0e:4d:ed:7a:9d:fb:4f:31:10:65:6f:6d:08:27:8f:41:
         98:07:92:f2:52:97:09:a9:f0:7f:3c:aa:28:61:66:48:65:89:
         89:08:54:98:4e:4f:d8:d8:75:d0:39:30:8c:6c:c6:8c:66:29:
         5a:49:c7:57:04:c6:3f:3a:65:ff:d3:b5:bf:97:97:d4:95:dd:
         91:5c:d2:e2:89:57:53:d2:60:67:b2:88:b7:72:68:c5:f4:ac:
         56:da:78:50:11:fb:c8:d3:12:9d:6b:ba:96:63:09:7a:29:9c:
         04:d8:28:b7:32:d9:5a:0e:19:b8:7f:ec:d4:3b:e8:a8:16:e0:
         8a:a7:45:a2:e0:e7:7d:bf:ab:41:1f:8e:25:31:bd:2c:6f:00:
         59:de:22:7e:98:1e:ce:b4:0f:ef:e7:c9:2b:bc:8e:00:d0:1a:
         0e:cc:74:34:fc:ce:b5:66:97:6f:b5:71:84:58:0b:c3:b1:07:
         68:f1:e3:98:7d:18:2c:11:0e:be:a6:01:65:84:d0:83:c3:3e:
         1c:9b:84:f7:db:0d:6b:41:be:85:6b:38:b7:ba:af:80:d8:88:
         7b:ca:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 23:52:40 2024 by rpki-client on console-fra.rpki-client.org