Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33322d3332203d3e20313338383837.roa
File:                     323430353a6334303a3a2f33322d3332203d3e20313338383837.roa (raw, json)
Hash identifier:          tsB/xqeylgKqjbXv3/HpPHf0cYw5tdd5DtBjruf7kOE=
Subject key identifier:   28:E4:43:1B:D2:4B:7B:93:CF:BC:98:06:29:EA:3E:B2:ED:E0:F7:F2
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       360A83899856A12594680AAD49A1C12D18CDF1EC
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33322d3332203d3e20313338383837.roa
Signing time:             Mon 01 Jul 2024 01:03:41 +0000
ROA not before:           Mon 01 Jul 2024 00:58:41 +0000
ROA not after:            Mon 30 Jun 2025 01:03:41 +0000
asID:                     138887
IP address blocks:        2405:c40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0a:83:89:98:56:a1:25:94:68:0a:ad:49:a1:c1:2d:18:cd:f1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: Jul  1 00:58:41 2024 GMT
            Not After : Jun 30 01:03:41 2025 GMT
        Subject: CN=28E4431BD24B7B93CFBC980629EA3EB2EDE0F7F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a6:40:e1:0b:e5:c0:7c:56:b3:68:1a:2b:d6:
                    1b:1f:23:10:ae:13:bb:f7:5f:4f:b6:24:4d:0c:e8:
                    b2:9b:c4:8a:de:82:58:e6:4d:77:6f:ba:e0:53:74:
                    4e:52:be:16:4f:f1:78:9e:3f:bc:a1:88:cd:89:66:
                    12:52:20:e0:a8:5b:04:c0:66:ad:91:e9:f0:79:23:
                    36:5f:59:fd:c4:8c:34:79:28:2b:b8:4b:26:3d:cb:
                    a4:34:d7:92:21:6e:ee:ad:7e:f8:e0:df:dd:9c:cf:
                    40:51:62:99:42:34:95:a4:67:ec:4c:05:16:9e:46:
                    17:67:7a:ae:b8:d5:a9:e2:e9:7d:68:97:56:2b:54:
                    cf:69:00:ec:31:cb:ec:e7:c3:f8:cf:d9:73:1a:80:
                    f4:22:3f:03:77:2c:60:e2:2c:b9:51:58:55:1f:9c:
                    fc:93:1a:e5:d9:d6:87:7a:dc:73:94:29:4e:6c:cf:
                    3b:fe:7f:39:72:7c:44:41:e5:f8:9b:7f:7f:de:ac:
                    b9:b2:2b:cf:72:de:96:e6:94:64:4f:9e:fe:8b:16:
                    95:08:9e:80:a9:f4:29:77:8a:55:54:cf:cb:73:ae:
                    11:81:ec:57:2a:54:bf:c7:9f:33:66:46:63:65:be:
                    fb:7b:ad:ee:19:98:bc:9c:63:e1:92:db:1c:f9:a7:
                    f7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E4:43:1B:D2:4B:7B:93:CF:BC:98:06:29:EA:3E:B2:ED:E0:F7:F2
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33322d3332203d3e20313338383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:b3:eb:08:90:82:a2:00:35:2f:cf:ef:02:4f:f1:78:03:c4:
         8b:1d:f4:15:76:66:29:7c:a6:38:1c:19:47:72:24:e4:a2:1a:
         6e:e5:71:df:52:07:c9:f2:b8:97:b3:00:26:2b:3b:73:56:cc:
         d9:ec:66:07:e7:88:0f:8b:5c:17:55:9a:20:e4:45:32:39:85:
         45:1c:16:4f:4d:e0:81:3a:d8:71:84:9a:96:29:37:76:70:75:
         a9:d0:1d:9c:22:00:1c:3e:75:69:ac:fc:b4:8c:be:f2:22:56:
         5d:be:88:93:a6:31:57:d0:a5:a4:61:df:b3:8b:99:e4:09:37:
         ef:13:27:6a:78:4f:56:96:3d:97:63:35:e4:07:75:63:6e:8d:
         6a:e0:a4:0a:31:86:97:cf:9f:f7:43:59:ba:f1:52:2f:5d:c7:
         e3:c2:03:19:35:73:1f:64:ab:89:f4:a6:73:1e:36:c7:cc:86:
         e8:90:cb:32:cf:ae:f7:27:42:81:35:1b:53:c9:43:42:7a:44:
         b5:80:3b:79:39:b0:ba:84:0e:eb:e6:b2:0c:3d:a7:96:51:e8:
         63:c4:35:0f:c1:7c:b2:66:06:df:bd:5e:67:28:04:67:32:f9:
         2c:ac:b8:d0:1f:79:27:ca:71:32:12:f3:54:96:5f:03:ea:f8:
         ec:41:a7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:20 2024 by rpki-client on console-ams.rpki-client.org