Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33332d3333203d3e20313338383837.roa
File:                     323430353a6334303a3a2f33332d3333203d3e20313338383837.roa (raw, json)
Hash identifier:          990T31GrQi0zN/yw56QbCuzg7CmXBM17dQEUhL4iSL4=
Subject key identifier:   CC:25:DD:9B:CD:58:FA:A1:EE:88:43:2F:17:43:78:14:88:0A:A9:D6
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       75F4A64EC4B4CB10EC01126D4FE57145FDFB4525
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33332d3333203d3e20313338383837.roa
Signing time:             Thu 30 May 2024 11:00:00 +0000
ROA not before:           Thu 30 May 2024 10:55:00 +0000
ROA not after:            Thu 29 May 2025 11:00:00 +0000
asID:                     138887
IP address blocks:        2405:c40::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f4:a6:4e:c4:b4:cb:10:ec:01:12:6d:4f:e5:71:45:fd:fb:45:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: May 30 10:55:00 2024 GMT
            Not After : May 29 11:00:00 2025 GMT
        Subject: CN=CC25DD9BCD58FAA1EE88432F17437814880AA9D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:68:40:68:cf:cd:1a:25:3c:a2:64:d6:a5:3c:
                    8d:f3:0c:92:27:29:a2:8f:b4:f8:0f:6c:7a:57:f7:
                    31:a8:04:5a:d2:54:29:7c:21:d4:a8:94:21:4a:40:
                    a5:32:f2:82:8e:99:a5:f7:2a:bb:21:83:0c:6a:2d:
                    89:82:97:74:3a:8b:f9:ae:97:fb:b4:24:c8:be:67:
                    c3:d0:05:61:8f:5d:53:5e:92:2a:0d:72:d1:53:97:
                    58:af:66:c0:e5:7c:3e:80:a9:83:46:c1:f9:cb:38:
                    cb:e8:8a:31:9d:c4:df:1b:43:f3:64:7b:ae:84:d8:
                    97:90:9f:03:75:01:00:ef:d9:09:d0:40:cc:d0:e2:
                    d5:dc:22:e4:d9:de:fd:d5:13:73:28:b1:28:e3:7e:
                    f0:5d:59:34:f5:54:9d:06:6d:d4:54:b1:7e:fd:87:
                    58:43:e4:60:9f:96:7b:66:74:92:b9:dc:98:82:06:
                    6d:69:b6:04:1e:35:50:0c:41:eb:2b:f0:65:33:b2:
                    38:d7:b7:b2:40:78:dd:8b:5b:0e:11:65:9c:bc:f2:
                    66:a9:95:14:b0:7b:bc:66:c6:f2:66:20:f6:52:52:
                    e0:63:d3:1f:ea:ba:33:3a:a0:4a:35:47:fe:29:aa:
                    cc:b9:48:89:ef:0e:37:e3:6e:a9:ee:30:dd:be:49:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:25:DD:9B:CD:58:FA:A1:EE:88:43:2F:17:43:78:14:88:0A:A9:D6
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33332d3333203d3e20313338383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c40::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:cf:c4:52:1a:f3:21:c8:03:f9:20:58:02:07:95:65:60:19:
         41:4c:d1:da:ed:ba:f3:2b:51:da:c7:8b:e6:6f:01:77:6a:ef:
         25:f1:e7:f5:d8:f6:d3:2b:a9:02:b2:ad:1d:57:53:7a:f3:be:
         37:63:5a:f0:cd:58:fe:5a:34:e1:ca:2b:15:be:f2:f4:c8:1c:
         3d:4e:95:d9:8b:df:99:d5:b8:88:00:6d:5a:57:3a:ea:62:62:
         f0:21:c7:70:0e:27:bb:a0:a8:0c:f8:a3:7c:c2:3f:10:5e:8c:
         8d:9a:44:76:d4:93:69:66:b6:3b:d1:f2:63:2b:29:12:c7:68:
         8f:3f:a3:4c:88:88:15:34:3a:93:02:99:9f:8d:b9:9f:4b:e8:
         23:7a:04:1e:c7:84:57:fe:2f:7a:c1:6c:40:23:21:ee:7d:90:
         c0:e2:9d:1a:26:91:97:ae:1d:c1:09:66:f9:aa:a4:a7:23:3c:
         ca:dd:4b:16:6e:02:4e:db:08:b6:07:6d:36:70:91:35:1d:13:
         63:9a:53:b6:27:51:8a:7d:f0:c7:9e:4f:36:7d:44:e7:fb:25:
         f3:ee:35:29:2a:5f:e4:7f:29:59:71:6e:55:4b:b2:89:87:8f:
         87:49:7f:69:8d:00:ac:05:c0:59:8b:36:75:36:f6:70:24:7d:
         4b:d1:10:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org