Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa
File:                     323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (raw, json)
Hash identifier:          hf05sx3KHiq0EmV0xomKGB6bGQWNqcACIyo69C+x6+4=
Subject key identifier:   B6:8E:E3:60:D6:2A:2B:E5:9F:00:DC:CD:15:90:6E:A9:64:8F:88:8F
Certificate issuer:       /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial:       0746D44A14B2CAD2B93CD056258C11ED2F43BB91
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa
Signing time:             Wed 26 Jun 2024 12:00:01 +0000
ROA not before:           Wed 26 Jun 2024 11:55:01 +0000
ROA not after:            Wed 25 Jun 2025 12:00:01 +0000
asID:                     142366
IP address blocks:        2407:b4c0:dd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
                          rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:46:d4:4a:14:b2:ca:d2:b9:3c:d0:56:25:8c:11:ed:2f:43:bb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
        Validity
            Not Before: Jun 26 11:55:01 2024 GMT
            Not After : Jun 25 12:00:01 2025 GMT
        Subject: CN=B68EE360D62A2BE59F00DCCD15906EA9648F888F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:0f:84:15:68:58:17:4a:05:e6:cc:b0:04:
                    c6:71:c5:94:1c:6c:4d:24:51:c7:77:e7:4c:dd:6f:
                    b7:50:0f:e1:61:50:84:5b:f1:2b:58:3e:08:24:ad:
                    1d:87:56:b5:6c:76:a6:bb:50:23:a2:98:48:2c:85:
                    ea:45:4b:4c:96:02:bb:0e:bb:b7:04:d7:04:a3:48:
                    ea:0f:96:9c:75:1e:5b:ae:ac:37:87:28:9c:d8:39:
                    a0:a4:54:64:74:9b:e1:79:de:8a:72:ca:40:e8:4c:
                    cb:9b:59:b0:2d:dd:47:45:3b:8b:da:c3:cc:17:46:
                    93:bf:30:d7:8e:3f:83:e0:0b:98:23:0b:7b:70:f2:
                    14:a1:e6:a2:d3:1c:b4:76:f4:a0:fb:47:87:77:b7:
                    88:23:91:0a:da:69:03:2f:f0:a9:36:e1:99:04:d5:
                    fd:1f:50:cb:62:8f:9b:52:d8:45:a2:80:79:81:f5:
                    f6:7f:de:81:6a:8a:37:78:c8:e5:3e:6f:99:02:c6:
                    83:78:1f:be:7b:d4:ea:39:95:70:ee:50:a5:f6:24:
                    6d:32:e5:3e:b2:89:96:a6:91:14:09:33:af:08:c6:
                    28:fb:08:ea:98:eb:45:1e:7b:fb:5f:04:fc:ff:84:
                    24:3a:f3:f0:d6:88:ea:8e:29:c7:49:f6:a5:c7:c5:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8E:E3:60:D6:2A:2B:E5:9F:00:DC:CD:15:90:6E:A9:64:8F:88:8F
            X509v3 Authority Key Identifier:
                keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:b4c0:dd::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:b7:48:13:25:b4:95:ff:af:48:c2:ab:93:73:71:22:9a:42:
         9d:20:fc:d4:e0:fb:97:fa:1a:31:fb:b3:53:e4:4f:5f:a4:57:
         54:7d:04:5c:9f:64:c1:43:32:0c:77:45:67:0f:47:49:60:08:
         03:b4:3f:85:9b:42:1f:2c:0f:d2:53:83:cb:b0:a4:6c:c8:fd:
         25:84:fb:e9:9a:b4:a4:5e:51:db:05:95:5b:5b:8d:aa:8b:c3:
         a9:ff:71:29:4a:51:b4:7c:89:37:3e:27:84:33:e9:97:13:2c:
         cd:63:6a:6c:ef:f5:67:01:ac:da:bd:3d:4a:f7:42:b5:6e:fa:
         62:73:58:3c:e5:0b:16:7e:c3:39:ac:ec:21:87:93:e3:dc:9b:
         ff:4e:77:a4:e0:d6:a4:9a:fe:44:79:32:1d:fb:83:12:e3:05:
         0e:2f:4c:af:3e:0c:f8:38:c7:28:00:e6:ab:08:3c:f7:88:ed:
         2d:28:62:ea:74:36:2b:9c:fc:a5:f3:11:ac:19:77:a5:0b:9f:
         b5:40:ff:29:bc:3a:6a:cf:fa:7a:53:57:16:28:e7:4e:06:5e:
         ff:a7:2a:ea:cf:c2:b7:b1:0c:f0:55:7a:b5:1c:34:e1:98:52:
         c3:22:62:07:d0:a9:c9:7b:27:1e:29:29:b6:d3:1f:b9:5f:2e:
         ae:f8:49:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:53 2024 by rpki-client on console-ams.rpki-client.org