Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa
File:                     323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa (raw, json)
Hash identifier:          FUk0jKLKYB14gKo560odDiZhlImJqnZyJUbjcU1pvBE=
Subject key identifier:   C8:41:B9:F3:C1:41:65:ED:F2:22:E3:4C:25:40:17:BF:8A:8D:86:BA
Certificate issuer:       /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Certificate serial:       5C1A0E2CA7F8042A374DB129AF185718678C8A90
Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa
Signing time:             Mon 27 Nov 2023 04:00:01 +0000
ROA not before:           Mon 27 Nov 2023 03:55:01 +0000
ROA not after:            Mon 25 Nov 2024 04:00:01 +0000
asID:                     141968
IP address blocks:        2407:6ac0:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl
                          rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 04:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1a:0e:2c:a7:f8:04:2a:37:4d:b1:29:af:18:57:18:67:8c:8a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
        Validity
            Not Before: Nov 27 03:55:01 2023 GMT
            Not After : Nov 25 04:00:01 2024 GMT
        Subject: CN=C841B9F3C14165EDF222E34C254017BF8A8D86BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:ff:de:31:0a:29:48:fd:af:80:fe:6b:bf:
                    79:fa:0a:ac:9f:a7:00:75:76:7a:8e:e2:7a:66:4e:
                    f3:cc:42:0c:f7:aa:b5:65:33:3a:43:42:18:28:42:
                    07:b2:5e:03:98:2f:06:f2:24:46:fd:3b:e0:d4:96:
                    22:19:5b:c4:76:f8:d9:a5:57:1a:b7:68:a6:a1:a2:
                    95:c5:79:c3:bd:5b:14:d8:cf:f2:4f:2d:cf:f9:41:
                    5c:1f:73:66:ec:ea:a5:40:61:93:be:84:47:f3:f9:
                    51:77:cd:7c:05:93:d5:f8:01:37:92:c0:56:cb:d9:
                    8a:47:43:8c:ee:40:e5:75:85:f2:5f:f7:90:91:bc:
                    fd:b1:37:54:f7:3a:b2:91:1e:27:af:70:95:f8:60:
                    fc:43:9b:02:58:32:e6:3c:4d:13:70:23:03:74:06:
                    e9:9c:70:50:49:a9:9e:3c:61:4c:bf:c8:8b:b0:64:
                    2c:56:ea:d1:89:37:10:e8:cd:91:b8:08:4a:5c:8e:
                    c7:54:fd:46:35:f9:fd:c0:35:f8:5b:8f:3d:a8:14:
                    82:67:5c:c8:72:37:ce:33:5e:cb:c3:37:d7:1a:72:
                    9c:c3:c0:67:8c:c2:fe:31:75:13:dc:7f:a2:19:1f:
                    ff:31:83:79:e3:b1:b6:2c:62:4a:a6:39:bb:a5:0a:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:41:B9:F3:C1:41:65:ED:F2:22:E3:4C:25:40:17:BF:8A:8D:86:BA
            X509v3 Authority Key Identifier:
                keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6ac0:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:3f:7b:62:c5:47:f3:0b:03:3c:fb:7a:01:8d:49:66:b4:3f:
         ba:08:c1:91:46:96:ec:d7:15:2e:ed:7b:1e:ed:68:cb:af:fa:
         c2:90:7f:09:d5:eb:4f:57:5b:bc:dd:74:e6:b0:8d:34:b5:81:
         ba:39:a1:53:74:d1:a4:cd:02:74:32:63:fa:2e:50:b3:85:e1:
         a2:24:f5:f1:f1:b3:6e:ba:27:fc:53:6f:bb:fa:42:b4:29:a6:
         ae:2c:d6:bd:91:a5:ad:80:eb:6f:a7:90:d0:b7:4f:3f:bf:34:
         df:69:c0:4d:2d:1e:dd:00:4a:9a:24:c1:36:39:55:ce:d4:4c:
         44:bf:46:d9:5a:4e:d8:9a:7b:19:51:80:25:b2:67:10:73:40:
         7f:67:a9:fb:af:a6:b0:e9:33:52:34:54:6f:0b:c5:d8:93:cd:
         86:b4:36:ac:7e:84:73:82:06:f1:31:47:20:e6:45:5f:b7:5c:
         36:41:e4:ea:15:ac:0e:6d:60:cf:4d:df:e7:ab:00:88:5e:3c:
         24:e5:4a:66:cf:bc:14:c8:4f:b2:c3:d2:d7:84:0c:e6:75:2a:
         b0:3b:4e:77:b9:1c:72:e2:0b:59:1a:a1:d1:1b:eb:4e:93:12:
         d1:62:da:af:6b:56:31:13:6a:03:7e:37:97:5d:fe:d6:e9:4c:
         e0:72:5c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 04:39:02 2024 by rpki-client on console-fra.rpki-client.org