Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa
File:                     323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier:          ihqjFgJAwb9LfW/zBsOncX8VFvZcjbpeA1UnCT45ZRo=
Subject key identifier:   08:AE:21:B8:43:A9:E8:12:F5:1D:9B:19:69:4E:1B:9D:52:9C:58:13
Certificate issuer:       /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Certificate serial:       3689A786B67105AFE175A38A44181CEED2D46508
Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa
Signing time:             Mon 27 Nov 2023 04:00:01 +0000
ROA not before:           Mon 27 Nov 2023 03:55:01 +0000
ROA not after:            Mon 25 Nov 2024 04:00:01 +0000
asID:                     141968
IP address blocks:        2407:6ac0:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl
                          rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 04:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:89:a7:86:b6:71:05:af:e1:75:a3:8a:44:18:1c:ee:d2:d4:65:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
        Validity
            Not Before: Nov 27 03:55:01 2023 GMT
            Not After : Nov 25 04:00:01 2024 GMT
        Subject: CN=08AE21B843A9E812F51D9B19694E1B9D529C5813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:a9:1c:79:f4:90:c5:a4:21:87:4d:df:27:
                    8a:0e:d0:bc:4f:d9:38:ac:35:48:8a:a5:99:36:7c:
                    9e:25:9f:69:da:cd:09:bc:21:64:73:84:20:cf:72:
                    18:f9:1e:f5:ad:37:ab:f1:2f:f9:00:3d:24:a5:64:
                    88:d1:14:ae:1c:77:72:9b:17:6b:b2:9c:22:e0:dd:
                    d9:65:b9:ae:55:00:65:ae:a9:e6:27:9b:35:b4:b8:
                    6f:55:29:62:0d:9d:80:c4:bf:a0:8d:88:3a:9f:50:
                    f1:10:c2:2f:4d:80:61:30:10:ef:13:80:b1:df:ef:
                    83:c5:ed:af:1f:75:80:35:96:e6:85:c3:27:4c:ce:
                    be:35:d1:a4:ae:5d:c5:02:c9:a6:c1:f4:68:e4:0f:
                    6e:ee:e7:98:f4:e9:e2:45:a6:3d:0f:c7:47:5d:e1:
                    1a:4c:6a:de:9b:5c:43:e1:05:72:0d:de:fa:a1:9c:
                    68:f8:66:05:11:53:c3:2b:f1:a3:97:1e:38:df:0f:
                    6e:80:7f:77:99:91:e6:a7:55:6e:74:76:c0:d8:66:
                    d3:12:95:23:dc:d6:73:b0:c3:14:13:65:b9:4e:67:
                    0f:9a:c2:6d:af:d2:d2:ca:60:d7:b2:6c:f4:d9:bb:
                    ba:95:38:a7:21:2d:e9:42:c6:bd:7c:17:26:52:49:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AE:21:B8:43:A9:E8:12:F5:1D:9B:19:69:4E:1B:9D:52:9C:58:13
            X509v3 Authority Key Identifier:
                keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6ac0:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:a9:b1:e3:16:8a:ca:9d:ba:2e:ee:15:ef:95:c8:31:6b:c3:
         71:14:04:0c:18:b4:11:39:75:39:33:99:e3:9e:65:88:b3:2e:
         77:b4:d9:f1:87:99:3d:d0:ea:ab:e3:cd:de:f5:67:eb:af:4a:
         10:b1:a7:a3:fb:09:78:7b:c1:7b:cc:0b:2a:a0:7b:5b:31:43:
         76:fc:97:95:0b:0c:a7:bc:f6:a2:3a:8f:3e:8b:39:cd:8c:41:
         3d:af:a0:c9:b0:80:45:8e:13:f6:e6:d5:03:4f:12:eb:fb:9f:
         29:75:43:25:77:dc:67:53:6a:1d:36:47:f8:26:2f:b5:77:90:
         c4:f1:ed:33:3b:30:1a:ae:8e:01:fd:92:dc:1c:4e:87:b4:ce:
         24:13:c6:42:03:89:ea:96:07:84:47:e4:94:7b:53:65:6e:5f:
         7a:6a:85:d7:62:e8:6f:56:db:75:da:1d:16:b0:ae:f8:6f:35:
         0b:69:f1:1e:9f:20:4a:f9:f4:04:50:9c:46:fb:bf:9e:d4:25:
         86:23:db:e8:d0:e8:a0:c0:ee:72:c2:57:58:ff:38:c5:b1:d2:
         80:a2:06:09:b2:c5:e9:b4:2e:3a:46:cb:78:c1:fc:31:67:da:
         96:68:39:6a:10:e7:e2:fb:68:3e:02:3e:e6:b7:c1:29:17:32:
         3a:bd:79:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 04:42:59 2024 by rpki-client on console-ams.rpki-client.org