Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/323430363a656230303a3a2f33322d3438203d3e20313332363533.roa
File:                     323430363a656230303a3a2f33322d3438203d3e20313332363533.roa (raw, json)
Hash identifier:          3lG7+wZhzvpbun5IR0/9q8Q2CYmlr1gnlszLuH7C9+w=
Subject key identifier:   E0:72:7F:08:4C:72:C6:E7:2F:CF:25:BD:55:F1:B2:58:AF:53:50:1B
Certificate issuer:       /CN=A75550C54400A670523A712A4C8782FA740B4F07
Certificate serial:       6CFCC17FD8141FB4D76D4079EF3DAD01116264F1
Authority key identifier: A7:55:50:C5:44:00:A6:70:52:3A:71:2A:4C:87:82:FA:74:0B:4F:07
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/323430363a656230303a3a2f33322d3438203d3e20313332363533.roa
Signing time:             Mon 01 Jul 2024 01:04:28 +0000
ROA not before:           Mon 01 Jul 2024 00:59:28 +0000
ROA not after:            Mon 30 Jun 2025 01:04:28 +0000
asID:                     132653
IP address blocks:        2406:eb00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.crl
                          rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fc:c1:7f:d8:14:1f:b4:d7:6d:40:79:ef:3d:ad:01:11:62:64:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A75550C54400A670523A712A4C8782FA740B4F07
        Validity
            Not Before: Jul  1 00:59:28 2024 GMT
            Not After : Jun 30 01:04:28 2025 GMT
        Subject: CN=E0727F084C72C6E72FCF25BD55F1B258AF53501B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:2f:1d:07:93:3a:60:2b:2c:e7:49:a2:a4:
                    b2:9f:36:54:33:2f:1f:cd:c0:12:d9:df:76:8e:4d:
                    31:7b:ba:81:7f:b8:52:41:fe:1f:24:42:d7:f2:e9:
                    cf:6a:f6:59:38:92:21:6d:cc:20:eb:03:11:b9:f9:
                    68:1a:f6:28:fa:22:6b:a9:04:17:f2:c9:10:cf:39:
                    9b:fa:f2:c0:81:38:ad:2e:05:f5:ed:f6:24:ae:47:
                    05:e1:f5:0f:83:8c:2d:3a:26:5c:ed:af:04:24:e7:
                    e0:2a:d1:0d:41:c6:a9:45:89:83:50:4c:1a:fd:0a:
                    4d:66:3b:50:91:e1:f0:e4:34:d1:1f:c9:0a:f2:4a:
                    d1:aa:4d:66:0e:38:3b:9f:3d:63:0c:a2:cc:2a:7a:
                    14:2e:72:17:c2:36:f1:86:cf:e7:43:5e:62:4f:1a:
                    f8:74:42:b9:b1:c5:f0:67:b0:f4:3a:b4:82:39:dc:
                    dd:9a:12:fd:e8:54:44:b5:44:25:da:d4:e3:e6:84:
                    d3:64:a9:0a:bb:20:d8:3a:d2:ea:04:8d:ac:b1:ae:
                    8e:05:b5:16:31:10:f6:0a:48:68:af:5a:8b:39:36:
                    70:6d:a0:d2:18:58:21:30:cd:18:12:23:9b:a2:bd:
                    7c:45:4c:2c:7c:4f:be:19:75:f3:5c:fb:81:a6:4f:
                    f0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:72:7F:08:4C:72:C6:E7:2F:CF:25:BD:55:F1:B2:58:AF:53:50:1B
            X509v3 Authority Key Identifier:
                keyid:A7:55:50:C5:44:00:A6:70:52:3A:71:2A:4C:87:82:FA:74:0B:4F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/323430363a656230303a3a2f33322d3438203d3e20313332363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:eb00::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:27:db:9f:c9:44:9e:6a:63:6d:c2:30:12:76:6d:d7:9a:d5:
         75:c7:e9:32:f0:c0:67:7c:8a:80:86:10:fa:24:b9:b4:b0:a8:
         c4:ec:62:72:68:f7:5a:32:e6:80:a4:8d:99:9a:92:c6:b7:c3:
         99:e3:17:a6:6d:a0:89:10:68:70:46:bb:3f:ef:55:bc:69:b7:
         95:5a:c9:43:55:32:93:4f:8f:1f:d6:7e:59:54:3b:35:5f:a3:
         d4:a7:be:7b:4f:ab:71:35:4e:2f:dd:9b:12:7e:18:71:e2:e7:
         b8:1b:f4:d7:e1:c0:34:1b:6f:e9:8c:2a:bd:8a:db:f3:f2:b1:
         29:56:d2:0d:d3:5e:2c:15:ee:22:cd:e4:8d:27:b9:14:12:ba:
         ec:88:3d:a1:61:52:74:95:e2:25:c1:fd:e0:80:63:e1:4c:3c:
         68:98:9c:dd:8d:ef:2b:c2:5a:35:03:63:bc:b1:55:63:87:df:
         0b:9f:12:ff:84:a8:49:62:cf:28:7b:96:5c:ba:bc:19:04:69:
         45:43:eb:10:59:fd:f1:99:79:f6:ab:1e:83:3a:e0:ee:7d:1a:
         75:4f:61:a5:7c:3f:59:b5:55:13:c5:be:94:c4:a6:52:0a:41:
         bb:04:0e:da:a2:c7:45:1c:89:df:59:88:8a:d5:9f:c3:6e:24:
         de:57:ab:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:39 2024 by rpki-client on console-fra.rpki-client.org