Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa
File:                     323430353a6334303a3a2f33362d3336203d3e20313338383837.roa (raw, json)
Hash identifier:          UAVzfI7e74Hd6Boti4JHMO2D5hIi2JOiuZIuwhXFyg8=
Subject key identifier:   99:AF:EC:A4:1A:81:0F:6B:DD:CB:4D:C7:93:96:C8:A4:AE:D4:1A:88
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       18008EA4E5FDF610157B9F59664E4BBD04612F41
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa
Signing time:             Thu 30 May 2024 11:00:01 +0000
ROA not before:           Thu 30 May 2024 10:55:01 +0000
ROA not after:            Thu 29 May 2025 11:00:01 +0000
asID:                     138887
IP address blocks:        2405:c40::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:00:8e:a4:e5:fd:f6:10:15:7b:9f:59:66:4e:4b:bd:04:61:2f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: May 30 10:55:01 2024 GMT
            Not After : May 29 11:00:01 2025 GMT
        Subject: CN=99AFECA41A810F6BDDCB4DC79396C8A4AED41A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:81:60:00:82:8c:8c:58:6c:7b:62:9e:eb:1b:
                    e0:5d:d3:00:8b:c7:8b:78:e0:db:a6:32:8f:48:64:
                    08:8c:5e:ce:fd:8c:86:15:35:c8:cd:ba:d6:45:58:
                    d3:63:6e:85:f5:1d:66:a9:34:8b:24:9d:ba:6e:38:
                    49:0a:36:b7:ed:03:82:a3:7f:23:c1:ba:d0:35:89:
                    74:83:3b:c6:da:d9:99:90:86:83:aa:b9:a0:af:45:
                    e0:f3:47:46:37:8a:9c:f0:97:c7:7b:77:7c:40:9c:
                    25:b3:1c:ac:0a:dd:d0:25:76:ab:f7:0a:8f:d6:24:
                    14:0a:90:28:76:00:c9:37:1f:cc:53:e6:bb:c2:e3:
                    65:07:fe:cc:b9:3b:31:72:44:19:d6:35:c8:77:10:
                    2f:e7:73:2c:19:94:8e:1d:47:59:ee:18:21:94:4e:
                    b8:c8:2e:0d:c5:0a:7a:78:72:ac:8c:8a:08:08:7e:
                    9f:b0:33:f3:c3:82:49:44:a2:f8:4e:43:2b:6c:61:
                    23:44:af:89:91:b9:a6:c9:c7:42:b4:7f:fe:b2:74:
                    22:96:2d:15:58:a2:23:aa:ea:17:74:99:d6:74:3d:
                    39:e6:d3:84:59:61:45:03:5f:a0:42:bb:3a:97:7e:
                    f8:2a:81:68:58:ce:77:fe:37:a9:cb:bc:69:f5:b2:
                    4a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AF:EC:A4:1A:81:0F:6B:DD:CB:4D:C7:93:96:C8:A4:AE:D4:1A:88
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c40::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:f5:49:be:be:99:69:80:cc:04:70:55:b0:15:3e:2a:8a:
         a6:f9:e1:c7:a2:c8:69:7c:2f:67:68:bb:02:10:ae:e3:21:5c:
         d4:20:d9:98:c0:4f:09:f0:78:94:c6:7a:63:b7:60:a5:52:83:
         40:a0:e0:2d:e6:8e:81:91:95:bc:05:50:38:95:61:6a:58:4c:
         ee:d5:41:54:25:f1:7d:7f:e5:4d:91:41:8a:36:d9:5f:06:e0:
         0f:94:70:84:82:c3:e2:c3:1d:45:13:c5:81:a0:f8:e4:d2:a4:
         d2:2d:b7:8d:1f:70:3e:74:b0:f9:49:b4:89:28:14:0c:b7:31:
         27:32:60:fc:40:de:f5:44:92:2d:a1:7e:28:48:5b:25:45:5a:
         8c:b7:85:7c:47:fa:58:ab:00:b6:2c:1f:ac:9b:01:56:ff:63:
         21:47:26:f0:24:5a:16:8a:ea:8a:00:e7:f6:11:15:c9:18:5f:
         3e:6e:41:60:aa:78:5d:58:85:52:f7:c2:5e:20:5d:24:9e:52:
         32:dc:4d:21:04:19:5b:fc:0c:d3:64:c3:eb:36:f7:4a:e2:b8:
         07:61:d3:b1:27:57:30:34:ec:aa:ed:23:86:6d:c9:ce:15:11:
         16:40:36:3c:a4:08:1b:f8:4f:66:0e:db:18:9a:73:5b:5a:0d:
         76:e0:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:20 2024 by rpki-client on console-ams.rpki-client.org