Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/323430363a363230303a3a2f33322d3438203d3e203233373536.roa
File:                     323430363a363230303a3a2f33322d3438203d3e203233373536.roa (raw, json)
Hash identifier:          Kv+v1MZJFv8sLeLK5Osu0MIbXelnq6cGjDqcKbNgJdI=
Subject key identifier:   0A:63:F7:BD:74:6F:EB:1B:12:69:A8:9D:05:54:4F:D0:6F:7A:49:41
Certificate issuer:       /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282
Certificate serial:       5DFE7CAE0B359582A3F44E0B02159ECB7BE15B6D
Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/323430363a363230303a3a2f33322d3438203d3e203233373536.roa
Signing time:             Mon 31 Jul 2023 00:04:25 +0000
ROA not before:           Sun 30 Jul 2023 23:59:25 +0000
ROA not after:            Mon 29 Jul 2024 00:04:25 +0000
asID:                     23756
IP address blocks:        2406:6200::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl
                          rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fe:7c:ae:0b:35:95:82:a3:f4:4e:0b:02:15:9e:cb:7b:e1:5b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282
        Validity
            Not Before: Jul 30 23:59:25 2023 GMT
            Not After : Jul 29 00:04:25 2024 GMT
        Subject: CN=0A63F7BD746FEB1B1269A89D05544FD06F7A4941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5f:a2:06:00:60:0e:69:28:cf:2d:2f:06:8d:
                    b1:29:ce:e2:74:a0:d4:a1:dd:3b:58:61:3d:7a:cf:
                    ac:22:91:40:1a:03:19:ec:10:fd:ef:0f:45:32:c7:
                    c4:56:9a:b6:09:f9:53:22:54:3f:73:a7:4f:f8:fc:
                    a5:94:71:d2:07:fc:f5:2c:ac:fa:07:83:25:65:03:
                    9c:d0:52:46:17:b0:26:d6:0d:c8:b9:6e:b3:44:62:
                    8f:16:14:85:9d:98:d6:6d:06:79:17:cd:94:e9:7e:
                    9f:d5:a3:52:04:f8:ef:bc:0b:5e:70:9e:08:e8:32:
                    0f:de:90:53:2a:0e:5c:37:11:dd:95:6e:dc:9d:08:
                    21:a3:08:7f:75:93:d7:5d:20:de:b6:79:28:7b:67:
                    c0:0e:ab:32:03:52:8f:3d:d6:05:77:dd:6f:0d:90:
                    c1:4f:d9:40:d0:ec:2c:a2:23:f8:03:c6:1d:14:f5:
                    3c:91:c9:ff:fd:14:00:df:d8:84:85:ee:09:3e:68:
                    33:06:1c:d4:a6:e7:da:61:9d:91:48:44:ca:8e:3c:
                    15:ba:f6:14:b5:98:87:67:0a:b6:95:65:0d:03:54:
                    05:94:96:50:ba:ad:ef:a3:30:92:00:50:21:0b:f6:
                    a2:f1:e4:99:5b:12:b5:bf:3b:51:ef:05:a0:26:2d:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:63:F7:BD:74:6F:EB:1B:12:69:A8:9D:05:54:4F:D0:6F:7A:49:41
            X509v3 Authority Key Identifier:
                keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/323430363a363230303a3a2f33322d3438203d3e203233373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:6200::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:a4:2e:a4:56:f2:e1:c0:4b:32:b2:4b:4c:71:a1:e7:e6:08:
         c8:26:4f:7f:60:13:ba:d6:a9:00:32:9a:17:4d:e1:5e:e8:96:
         88:be:e6:a8:c0:b6:84:eb:8e:fc:55:bd:eb:72:2e:0c:f8:b9:
         21:6c:b6:c7:a1:6b:d4:31:d5:b9:2b:ed:8f:4b:b4:68:0e:66:
         cc:f4:42:37:11:36:ec:c4:c4:fe:ae:de:3d:e9:52:76:da:36:
         a0:12:e2:be:68:ad:fd:29:7a:be:d6:22:a8:86:f5:50:7e:ce:
         6c:6b:bf:cf:00:5e:a5:18:6a:94:f0:89:11:ad:3b:f8:60:30:
         7b:f0:11:91:b1:84:93:a8:3b:11:ce:d2:08:33:7c:3e:70:8d:
         71:1f:e3:d9:26:13:55:00:a5:8c:8e:60:eb:42:de:9b:11:b2:
         b2:56:35:4c:85:42:e8:2d:fc:b5:a3:b4:76:9f:e4:eb:80:a6:
         5b:10:86:0b:1f:d3:7f:50:45:c6:60:30:90:bb:f6:c4:8c:f0:
         12:dd:ac:d3:02:f6:a5:17:0c:f4:f0:75:e8:84:fd:3f:c9:d8:
         da:c0:9e:94:ab:ca:85:34:47:5c:53:9a:e4:01:eb:9f:b0:55:
         65:d9:b3:f4:7e:da:03:b9:1f:11:e9:bb:6b:e1:dc:06:1b:76:
         1b:31:4b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 13:19:05 2024 by rpki-client on console-ams.rpki-client.org