Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa
File:                     323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (raw, json)
Hash identifier:          9H8WN2ev6lmK4SojAmFVs+iJbsTZqa4TXPxeNsz3ugU=
Subject key identifier:   51:3B:34:47:B6:69:7A:20:9A:26:41:D4:A7:86:91:23:7B:5C:1E:A1
Certificate issuer:       /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial:       146DA10F79C3616FDF9F6DB430612827D0B8B3CE
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa
Signing time:             Sat 15 Jun 2024 10:00:01 +0000
ROA not before:           Sat 15 Jun 2024 09:55:01 +0000
ROA not after:            Sat 14 Jun 2025 10:00:01 +0000
asID:                     142366
IP address blocks:        2407:b4c0:12::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
                          rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6d:a1:0f:79:c3:61:6f:df:9f:6d:b4:30:61:28:27:d0:b8:b3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
        Validity
            Not Before: Jun 15 09:55:01 2024 GMT
            Not After : Jun 14 10:00:01 2025 GMT
        Subject: CN=513B3447B6697A209A2641D4A78691237B5C1EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:e5:d6:38:50:83:25:33:c6:fe:74:49:30:
                    bc:cf:9a:cb:be:9b:bb:b0:b3:23:7a:03:21:03:5f:
                    5d:0f:b3:2b:ba:52:c1:bb:c6:aa:5f:6c:c4:32:51:
                    97:05:67:af:e3:f4:e8:51:9a:4c:25:54:94:29:e3:
                    aa:d0:98:22:b5:2c:23:7b:2e:9f:2c:ee:63:ae:16:
                    6a:b6:e5:52:b5:cb:8d:d7:8e:99:b7:18:75:67:2c:
                    88:3f:b3:e9:30:32:b4:33:13:c9:a8:66:4d:70:4b:
                    e7:fd:cd:e6:12:c2:26:44:65:f8:8d:4b:cb:51:3d:
                    71:9f:e9:7c:6f:fd:ae:1c:01:28:ef:12:6a:40:29:
                    ed:f9:b4:b7:80:4b:fd:a6:d4:c6:95:17:16:1b:1d:
                    1a:88:52:1b:b5:09:62:a0:f6:3c:38:33:9f:98:61:
                    83:57:62:6a:b6:bb:b2:62:86:4e:dd:32:83:53:dd:
                    e4:30:ed:4d:f5:35:7d:42:57:ad:e1:08:bd:47:2c:
                    2c:fe:33:5a:b4:12:7e:50:ed:d4:e3:e5:bf:de:f5:
                    c7:05:d2:d5:3f:63:02:83:67:bc:1e:12:89:74:7d:
                    f6:ec:08:3c:d5:9c:c3:8c:6e:52:dd:84:50:32:67:
                    e6:71:a0:97:f4:31:7f:2c:94:1e:aa:4a:bf:7d:f7:
                    18:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3B:34:47:B6:69:7A:20:9A:26:41:D4:A7:86:91:23:7B:5C:1E:A1
            X509v3 Authority Key Identifier:
                keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:b4c0:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:a8:98:d7:a9:85:d1:b2:a6:e6:ae:fa:27:56:eb:80:04:b6:
         7e:64:bd:e9:56:a6:96:ce:b3:a8:0a:46:8a:86:82:35:27:c0:
         4c:25:15:8b:71:2e:63:ce:e4:bc:b5:a6:79:eb:5a:cd:1e:d7:
         eb:96:c1:ad:97:eb:49:4e:74:d5:84:97:0f:00:28:c0:39:b7:
         66:62:02:bb:ad:00:bc:1e:6e:6e:20:d3:e4:52:d2:85:e2:a0:
         07:c9:9f:1a:ee:83:09:40:dc:8f:53:72:05:66:b3:7c:e8:00:
         8c:28:14:47:27:a7:18:9e:4f:49:bc:56:b2:2b:94:2d:17:31:
         54:76:b1:06:a4:45:62:81:17:c0:7a:65:d5:26:55:01:93:4a:
         85:3b:8c:4b:d0:c1:12:48:87:30:5d:aa:d6:32:72:82:8b:a9:
         b0:4b:d0:90:9c:51:0b:4f:6e:69:62:40:a2:aa:78:12:d4:5f:
         a1:17:d2:72:aa:0b:97:8d:c6:3a:93:f6:05:5b:c7:dc:cf:ea:
         a3:47:d6:ac:9e:a2:52:76:24:e8:89:e7:92:33:6d:6c:b2:7a:
         33:b9:0d:e6:9e:ab:33:a4:fe:1f:7b:0d:76:94:24:92:04:60:
         b9:1e:aa:7a:cc:83:f4:5a:35:3c:0b:d9:ad:50:33:27:84:6c:
         78:b0:15:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:53 2024 by rpki-client on console-ams.rpki-client.org