Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa
File:                     323430313a333234303a3a2f33322d3438203d3e203633343930.roa (raw, json)
Hash identifier:          YKtgnb5kKX8bPRqoLdO+lXtvjcZUmkJ3dEdtuow//ZM=
Subject key identifier:   51:8A:B3:69:AB:D6:20:D6:7A:15:D9:BB:0E:CC:C1:7C:88:EE:CE:EC
Certificate issuer:       /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
Certificate serial:       6B30B904D8B843B17F2C0FAB0F8450A563DDA7BA
Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa
Signing time:             Tue 07 May 2024 03:02:30 +0000
ROA not before:           Tue 07 May 2024 02:57:30 +0000
ROA not after:            Tue 06 May 2025 03:02:30 +0000
asID:                     63490
IP address blocks:        2401:3240::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl
                          rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:30:b9:04:d8:b8:43:b1:7f:2c:0f:ab:0f:84:50:a5:63:dd:a7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
        Validity
            Not Before: May  7 02:57:30 2024 GMT
            Not After : May  6 03:02:30 2025 GMT
        Subject: CN=518AB369ABD620D67A15D9BB0ECCC17C88EECEEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:87:86:5e:e4:01:fd:8e:8d:a2:85:1f:b7:
                    12:e7:c3:0b:69:51:45:9b:4b:21:86:c6:3c:dc:5d:
                    98:37:89:79:2d:d5:45:08:62:27:c5:f8:e0:c8:88:
                    f6:e9:ff:48:33:53:19:59:2b:1f:b0:c1:10:45:b3:
                    95:ac:9d:3a:bf:15:b4:9d:49:13:2d:9a:af:dc:91:
                    d3:11:99:45:d3:ed:81:40:4a:e7:01:2b:75:13:4e:
                    8f:a3:b4:b0:b4:e2:10:ac:06:b5:1f:41:5c:09:ea:
                    2a:8a:4f:6c:33:fa:5c:0c:7c:dc:9d:7c:76:1a:96:
                    58:55:3b:47:88:c4:78:10:6d:22:8c:03:ba:21:6c:
                    55:1a:f8:78:a7:93:6b:e6:6b:7c:a6:3f:70:1f:50:
                    fc:68:2f:82:76:a4:c9:66:d0:58:0d:8b:df:79:19:
                    57:6b:1b:d5:13:68:a8:2f:3f:40:de:e6:e4:3e:db:
                    08:81:9f:92:7e:4a:18:45:1d:8a:d2:58:36:cf:ee:
                    50:be:d0:9f:e6:e1:aa:61:e6:f1:32:a1:90:d0:9e:
                    10:5f:ca:fe:ee:e2:eb:3f:66:fe:e5:8b:55:5d:af:
                    5e:af:da:3e:36:40:5f:31:3a:1c:09:c1:3a:2f:c1:
                    1c:1d:77:dd:4d:f3:6d:b2:f2:f5:a7:c3:eb:bf:b0:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8A:B3:69:AB:D6:20:D6:7A:15:D9:BB:0E:CC:C1:7C:88:EE:CE:EC
            X509v3 Authority Key Identifier:
                keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/323430313a333234303a3a2f33322d3438203d3e203633343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3240::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:a8:0d:2b:85:15:85:c0:d3:c2:f3:99:d6:94:9e:a5:00:38:
         40:27:01:1e:6f:74:c2:3a:06:e2:da:9d:fe:41:4c:3b:73:77:
         65:77:d7:c7:e8:34:08:45:1a:48:69:05:4d:f4:48:d8:ba:d6:
         51:57:74:85:82:16:95:7f:38:5c:03:5d:05:6f:45:79:41:b2:
         f8:c3:d7:5e:d8:93:e3:7c:4d:37:05:ab:50:b3:6f:6b:21:6a:
         2a:a4:93:60:24:f2:7d:ec:8e:16:67:e7:2c:63:2e:0d:71:f1:
         76:66:5c:b1:eb:b2:f9:88:82:a0:59:d6:e0:c3:3f:e7:d5:2c:
         04:f7:5d:bb:e0:1e:07:da:f2:be:15:e7:91:d1:13:34:d1:ea:
         8e:d8:78:e7:c2:36:f5:86:75:94:f6:07:44:46:44:8a:b4:f2:
         d1:9f:e5:bd:9d:db:e6:dd:87:84:a4:91:4f:73:fb:fa:a2:c0:
         8c:b7:ec:a6:44:a6:6f:94:59:62:13:bf:31:80:4f:73:44:de:
         9a:f7:9c:bb:67:a2:20:72:04:83:71:1d:c1:01:17:a6:c8:78:
         1a:65:9a:d7:57:ef:3c:f7:4d:34:cf:c8:56:49:40:7c:74:f7:
         1a:25:59:d2:eb:eb:4e:5c:e2:d8:bb:c5:0a:f1:2e:85:eb:e9:
         a6:9d:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org