Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/323430303a623038303a3a2f33322d3332203d3e203435323936.roa
File:                     323430303a623038303a3a2f33322d3332203d3e203435323936.roa (raw, json)
Hash identifier:          /9/xdwcs+kCWsTXH6/SBJuUINEh3WMXFFR2lTGVloS4=
Subject key identifier:   BA:59:5C:4E:F8:EF:A9:1F:AB:75:57:16:70:A0:A3:BD:1B:B7:3C:B1
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       517BC2BC044EF89CD1F067CE073712AB8DFE66CA
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/323430303a623038303a3a2f33322d3332203d3e203435323936.roa
Signing time:             Mon 27 May 2024 15:00:00 +0000
ROA not before:           Mon 27 May 2024 14:55:00 +0000
ROA not after:            Mon 26 May 2025 15:00:00 +0000
asID:                     45296
IP address blocks:        2400:b080::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
                          rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7b:c2:bc:04:4e:f8:9c:d1:f0:67:ce:07:37:12:ab:8d:fe:66:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: May 27 14:55:00 2024 GMT
            Not After : May 26 15:00:00 2025 GMT
        Subject: CN=BA595C4EF8EFA91FAB75571670A0A3BD1BB73CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0f:01:6e:d0:17:1e:a0:18:c6:e5:79:1b:99:
                    1a:5a:0b:b0:2e:db:88:46:c5:3d:41:c5:73:43:c6:
                    f7:b0:39:97:dd:c6:fd:f5:81:a1:11:9c:52:4a:a6:
                    e5:64:5e:ce:4c:fb:e6:00:af:aa:ad:da:0f:9e:da:
                    06:01:45:63:57:56:94:d6:2f:1c:0d:5f:0f:2c:2a:
                    84:86:e2:00:03:91:c2:2a:7b:60:93:f5:db:a1:d4:
                    b5:bc:0c:3f:f2:cb:81:ec:02:c3:ed:46:2f:28:f4:
                    7c:33:5e:a3:62:19:2d:54:cd:7e:c5:ff:0e:ce:73:
                    f3:34:39:db:9b:7e:86:4d:25:65:ea:f3:81:ec:5e:
                    3d:bc:85:77:d4:f6:3b:cd:54:86:6e:a9:50:14:b5:
                    3f:6c:51:d6:e7:b1:12:48:6d:87:94:9f:1f:1d:f9:
                    bd:62:48:72:8c:50:c8:0a:2d:2f:4d:e8:fa:16:a9:
                    e4:ae:df:9e:65:1c:04:8e:4d:fa:20:43:4d:13:6d:
                    86:d8:ff:bc:2d:28:b1:cf:a6:30:4f:74:ae:b7:9b:
                    cd:39:67:3c:7a:4b:e8:f7:55:3f:ae:46:97:7c:aa:
                    b9:04:bb:d5:f9:39:2a:af:d8:6a:b3:40:89:66:0d:
                    d1:39:cd:96:95:b8:5e:bd:61:69:be:56:c4:be:60:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:59:5C:4E:F8:EF:A9:1F:AB:75:57:16:70:A0:A3:BD:1B:B7:3C:B1
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/323430303a623038303a3a2f33322d3332203d3e203435323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b080::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:74:06:9e:e3:56:52:bd:d6:c0:06:9c:e3:eb:61:69:a3:
         22:af:79:3b:d6:35:42:ac:2e:fb:76:8a:ba:e5:98:11:f8:5b:
         33:f7:00:74:bc:c2:ae:ca:b4:8f:1f:e3:d4:60:1d:a1:5e:e4:
         f4:9a:82:2c:b4:f3:4f:67:96:23:cb:83:6f:19:c7:69:0a:5c:
         95:e3:dc:ac:8d:42:70:93:2e:1c:e1:f4:3e:44:b9:04:8e:22:
         57:78:d3:c9:90:cf:3e:ef:d9:96:a7:85:32:88:e6:1f:7c:d8:
         af:18:b1:3d:90:44:42:e4:b7:3d:91:1c:f4:cb:e0:c5:ac:40:
         e0:6c:e8:2f:2c:0a:4e:57:6e:13:8d:f1:c4:28:76:37:41:33:
         2b:37:5f:dc:89:b0:18:1b:f5:83:6a:6c:29:cf:43:53:e7:8c:
         2d:cc:0f:3b:57:32:56:e1:04:ab:05:57:95:2f:48:26:23:0f:
         54:31:cd:8f:75:db:22:50:0f:8c:65:b2:6d:60:6b:60:38:ce:
         32:f2:f0:e8:b3:69:bd:df:b5:ed:bc:b2:fc:a2:33:04:a9:b8:
         ce:dd:ca:4d:fe:83:71:d4:e4:92:71:3e:fa:23:7e:09:fe:8e:
         09:34:28:cf:2c:6d:89:e2:1a:5c:9b:1f:09:e1:c3:0b:fa:c1:
         5f:ff:33:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:37 2024 by rpki-client on console-ams.rpki-client.org