Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/323430363a373563303a3a2f33322d3332203d3e20313431303639.roa
File:                     323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (raw, json)
Hash identifier:          s9eoNDTbVeTa+Y1l7MWtlS2D6OwX4TeNODUwWev5U/w=
Subject key identifier:   50:34:69:04:DE:1B:CE:55:8F:FB:94:96:51:26:41:F0:95:49:D1:93
Certificate issuer:       /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA
Certificate serial:       1F2DCC7AF32371DE1CCD1FECED56CC2F24DF7C40
Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/323430363a373563303a3a2f33322d3332203d3e20313431303639.roa
Signing time:             Thu 16 May 2024 08:00:00 +0000
ROA not before:           Thu 16 May 2024 07:55:00 +0000
ROA not after:            Thu 15 May 2025 08:00:00 +0000
asID:                     141069
IP address blocks:        2406:75c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl
                          rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 02:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2d:cc:7a:f3:23:71:de:1c:cd:1f:ec:ed:56:cc:2f:24:df:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA
        Validity
            Not Before: May 16 07:55:00 2024 GMT
            Not After : May 15 08:00:00 2025 GMT
        Subject: CN=50346904DE1BCE558FFB9496512641F09549D193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:58:6f:3a:e1:84:c7:36:ed:4f:34:69:9a:
                    e7:c5:33:c7:1a:9d:e0:68:e8:36:8f:27:d6:33:22:
                    ac:a7:68:1c:3f:3a:0f:81:ef:35:06:76:5b:f0:8c:
                    a2:85:76:7d:78:b5:29:bd:f8:4a:b0:7d:7b:b9:42:
                    9b:d8:32:97:50:41:95:e3:8e:92:80:79:72:95:ee:
                    62:1f:bd:48:11:60:b1:68:e3:b0:c1:5f:1d:2e:16:
                    48:3c:08:3c:35:7b:80:da:64:57:fa:90:3d:c2:70:
                    01:90:a3:b3:c1:2c:29:4e:a6:16:88:b0:71:f7:59:
                    f0:24:53:67:ee:28:7f:77:cc:ba:f3:16:02:6e:4b:
                    cd:db:c9:e1:9d:f6:5e:30:e1:98:0c:ce:c4:51:f9:
                    71:a0:78:4d:d0:a4:c0:86:c9:a9:38:66:20:a0:56:
                    e5:a7:ad:0e:9f:53:82:6c:a6:23:fa:34:90:f4:74:
                    03:31:98:b3:03:e1:0b:32:24:c7:0e:6d:29:ff:97:
                    33:be:a2:09:33:5d:f6:6c:85:67:17:7a:e9:fd:e2:
                    40:37:43:0a:f4:81:4b:9f:61:db:97:62:de:b5:5d:
                    7f:89:5b:4f:83:cd:b6:9b:87:4f:e2:1c:1f:88:8a:
                    ff:fa:ed:dd:96:e2:4a:bb:97:1e:93:43:2e:5d:d7:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:34:69:04:DE:1B:CE:55:8F:FB:94:96:51:26:41:F0:95:49:D1:93
            X509v3 Authority Key Identifier:
                keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/323430363a373563303a3a2f33322d3332203d3e20313431303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:75c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:d1:ba:0b:4d:a5:3b:cf:77:51:80:45:99:96:5c:dc:f6:40:
         0a:92:91:90:34:f5:80:27:3a:07:a2:3c:66:60:db:98:3b:94:
         e8:60:f3:ed:52:5f:24:4e:f5:e9:e7:c1:57:86:20:f5:33:32:
         0b:83:c6:04:df:83:92:7d:81:51:e1:3f:36:15:20:e9:1d:e8:
         6a:3a:c2:6e:89:fa:60:2d:59:54:0b:c9:7e:4d:bf:3e:cf:5b:
         01:1b:c6:45:1c:19:40:35:27:ac:ea:c6:1a:97:9d:b9:09:03:
         8c:72:45:23:2f:2f:ae:d9:7f:b3:aa:db:de:34:f3:15:02:13:
         c0:d8:b3:64:ac:13:1e:08:fd:ee:8a:1c:ce:f7:e9:20:4c:63:
         91:51:c2:bc:51:e8:85:ae:5a:ac:dc:f5:63:b4:84:f0:6a:41:
         7b:d2:f7:17:a4:35:9c:88:c6:b2:4c:17:c8:fc:77:f4:4d:e1:
         9d:b5:da:6c:01:71:21:2c:5f:75:71:44:18:e3:a6:3c:2e:89:
         ec:98:76:14:d1:3a:ac:fa:76:b3:78:5d:d6:fc:16:6c:f0:f5:
         0d:77:d2:4a:0d:a4:69:45:c3:ed:10:f2:19:48:08:a0:75:1b:
         c7:25:21:05:2d:e1:ff:8b:cc:84:7f:66:ec:cc:69:dc:7a:db:
         6d:65:9d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:54:55 2024 by rpki-client on console-fra.rpki-client.org