Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a363030303a3a2f33362d3336203d3e20313338383837.roa
File:                     323430353a6334303a363030303a3a2f33362d3336203d3e20313338383837.roa (raw, json)
Hash identifier:          j2ABLQHXGqaD3AKU/vcbG4Zzjt7tq3Cq90SyGFCtGWc=
Subject key identifier:   17:3D:F6:F0:51:6C:AC:54:AB:83:E0:BC:9C:83:27:8D:61:21:6D:6A
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       5020BAB06F793D56CEC16D01355A3000F61A9A2C
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a363030303a3a2f33362d3336203d3e20313338383837.roa
Signing time:             Thu 30 May 2024 11:00:01 +0000
ROA not before:           Thu 30 May 2024 10:55:01 +0000
ROA not after:            Thu 29 May 2025 11:00:01 +0000
asID:                     138887
IP address blocks:        2405:c40:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:20:ba:b0:6f:79:3d:56:ce:c1:6d:01:35:5a:30:00:f6:1a:9a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: May 30 10:55:01 2024 GMT
            Not After : May 29 11:00:01 2025 GMT
        Subject: CN=173DF6F0516CAC54AB83E0BC9C83278D61216D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:ab:03:4a:08:ac:98:84:32:79:22:ed:51:
                    e1:10:4a:05:41:cf:36:c7:5d:0f:59:83:c4:5d:97:
                    57:62:f4:fa:3b:58:88:0a:d0:27:5f:3b:9b:27:5c:
                    60:e6:02:35:4a:56:ee:7b:57:29:f1:1c:e4:e3:41:
                    2d:f7:36:fd:3c:17:f9:78:d8:17:6c:9c:ea:1e:62:
                    ad:d9:cd:46:38:f5:ec:17:28:5f:eb:40:d0:59:1a:
                    bc:8d:e5:c6:9c:c0:e3:65:c0:a1:3a:d6:ad:8a:e3:
                    08:a1:d0:ad:28:e3:44:3b:e7:5d:e9:c3:8e:48:cc:
                    e2:8a:a3:d5:82:3c:da:dd:9b:ab:91:0b:b9:da:15:
                    a5:f2:57:fd:78:d8:b0:f4:e4:ca:72:db:40:c7:3a:
                    bd:61:56:42:79:e4:e5:34:90:49:d1:54:c7:43:fa:
                    ad:e2:99:54:a0:01:63:19:22:56:93:ce:bf:10:1a:
                    60:1f:48:bb:bc:cc:fa:46:7c:4e:0d:34:a6:a8:6c:
                    f4:24:9e:14:2b:25:7f:a1:f8:a8:45:33:b9:76:6a:
                    0f:5b:e2:47:5e:9f:02:21:df:10:fb:a6:27:b6:c3:
                    f3:a1:b2:5d:0a:c3:ea:8f:70:6f:cd:64:a5:05:45:
                    2d:84:4e:c7:17:79:67:0e:89:ac:f6:57:83:36:22:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3D:F6:F0:51:6C:AC:54:AB:83:E0:BC:9C:83:27:8D:61:21:6D:6A
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a363030303a3a2f33362d3336203d3e20313338383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c40:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         16:b3:38:c4:94:c5:eb:d6:0f:d7:27:ea:68:b2:68:5a:7d:a8:
         0f:4b:ae:91:39:2b:ca:ee:95:7b:50:bf:ad:4c:fa:87:aa:2a:
         db:21:5e:db:34:f6:06:05:7d:b6:55:fd:4a:ff:02:26:92:62:
         a4:87:2a:9b:1e:81:32:2e:9b:ae:5e:24:a5:80:08:29:ad:bc:
         56:94:4a:41:0c:1e:5a:cd:fb:1e:95:e5:cd:b4:aa:9f:ef:a0:
         cc:c3:f7:08:09:fe:f6:29:8c:fa:ab:c7:1f:62:40:ef:f5:e8:
         1f:d7:9d:04:18:9e:e5:f7:10:43:b1:bb:4d:7f:dd:c0:2f:b1:
         08:6c:44:1e:fa:b1:a2:3e:a8:19:fd:56:b2:e8:7e:91:8e:3c:
         a5:a8:15:1e:3d:e0:90:22:1f:93:6f:07:e7:3b:bc:72:23:f1:
         9b:73:70:49:43:bb:b8:17:82:50:1a:e7:72:f6:ce:e3:71:24:
         51:a4:58:42:99:b0:9a:a8:a3:74:02:69:6d:c2:e0:6a:78:06:
         d8:cb:43:77:8b:9a:9f:bb:43:71:a8:86:62:62:7a:78:db:8c:
         e4:d9:1d:05:90:98:ca:f2:82:22:67:86:42:90:d3:13:a4:59:
         6e:7d:0b:64:9a:fe:1d:34:e2:47:0d:4a:5b:ae:fd:fe:66:92:
         ca:6b:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org