Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/323430303a643734303a3a2f33322d3438203d3e20313336313036.roa
File:                     323430303a643734303a3a2f33322d3438203d3e20313336313036.roa (raw, json)
Hash identifier:          O3UX92NmMqmHLvkWq1Vn219NDUp1N+si3piGjXzAR7A=
Subject key identifier:   F3:14:3C:2B:AF:07:37:D9:F8:D6:17:6C:F9:55:B3:82:C5:96:63:13
Certificate issuer:       /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Certificate serial:       08F4772337CF2660C6BB2B8B0F5007C4FBBF5272
Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/323430303a643734303a3a2f33322d3438203d3e20313336313036.roa
Signing time:             Mon 31 Jul 2023 00:08:15 +0000
ROA not before:           Mon 31 Jul 2023 00:03:15 +0000
ROA not after:            Mon 29 Jul 2024 00:08:15 +0000
asID:                     136106
IP address blocks:        2400:d740::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
                          rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f4:77:23:37:cf:26:60:c6:bb:2b:8b:0f:50:07:c4:fb:bf:52:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
        Validity
            Not Before: Jul 31 00:03:15 2023 GMT
            Not After : Jul 29 00:08:15 2024 GMT
        Subject: CN=F3143C2BAF0737D9F8D6176CF955B382C5966313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:32:5f:a6:20:b5:54:1f:ca:7f:ec:06:8e:4f:
                    98:5f:ad:6a:de:02:de:db:09:78:39:1c:ec:b4:14:
                    44:1a:54:c4:a3:c1:29:73:7b:e2:c4:f1:90:cd:9b:
                    c4:2c:dc:ef:30:73:c7:a0:47:f6:dd:1e:e1:fc:a8:
                    60:32:cc:67:a3:15:73:dd:62:7c:d0:09:5a:d4:b0:
                    cf:45:61:e9:59:27:8b:d3:04:00:ef:cf:cd:9d:42:
                    0b:3e:ab:88:5d:25:e5:8d:16:b7:ce:e1:b0:8f:2a:
                    d6:61:e5:a7:56:b9:c1:b9:f9:c6:93:ef:0e:c8:4e:
                    70:e0:1a:89:aa:27:97:a3:de:0f:93:5b:db:0f:6f:
                    54:87:0d:ae:59:55:0b:f9:9a:5e:43:0a:d6:4c:fa:
                    cc:ab:e4:de:4e:9f:c2:c6:d5:a9:54:0d:9f:f7:dc:
                    f4:b8:ad:6c:2c:00:9e:04:00:2d:f4:6e:6e:c4:d7:
                    ce:27:74:65:5b:7f:1f:8e:55:41:ec:7f:f9:3d:dc:
                    e2:57:48:40:51:29:f2:b7:4e:ea:a6:c6:cc:a9:27:
                    6e:65:8f:dd:06:ee:46:8d:44:e8:d2:99:d6:60:ac:
                    9f:ce:71:6e:fc:f1:1f:ce:0d:27:d2:da:b1:15:cb:
                    9c:8e:3a:f2:28:10:17:6f:4d:c5:bc:42:0b:77:5f:
                    5e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:14:3C:2B:AF:07:37:D9:F8:D6:17:6C:F9:55:B3:82:C5:96:63:13
            X509v3 Authority Key Identifier:
                keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/323430303a643734303a3a2f33322d3438203d3e20313336313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d740::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:f7:b8:8c:44:09:d9:d8:38:cd:44:d6:5e:35:ed:6d:30:55:
         2c:23:c4:a5:32:6e:71:fd:93:30:81:1f:b2:b2:9c:b3:e5:5b:
         87:70:ec:66:b9:67:0f:a8:26:52:77:1a:d8:ba:e6:4f:e6:10:
         f4:e2:27:6e:4f:f6:37:32:22:c5:79:5f:4c:4f:ff:64:86:66:
         dc:12:77:6b:4c:f4:31:85:7b:19:db:64:56:58:37:56:6a:00:
         86:28:eb:4c:2c:ab:51:ba:53:98:41:bb:c2:00:b5:3c:7f:42:
         c0:46:0d:ac:bd:ec:7b:bd:81:2a:f1:13:00:b9:04:58:75:33:
         a5:45:10:3d:df:73:7f:18:2c:b4:26:1e:e0:01:c6:51:37:c3:
         c5:fb:8d:e6:d2:22:2b:38:ed:1c:58:2e:08:03:e1:87:b9:bb:
         c7:dc:da:b7:1a:56:30:d8:77:8a:c2:94:c1:5e:93:1c:8d:4c:
         45:19:e7:0f:e0:7a:ca:20:50:f9:98:31:81:7d:59:7e:d2:a9:
         57:aa:83:a7:3d:a3:c1:a6:11:63:77:c0:09:95:59:e2:ce:6f:
         ab:f7:fe:bd:0c:07:7f:b6:4e:70:a5:62:42:85:c0:8f:0d:28:
         c9:9c:5f:49:37:cc:57:db:40:be:51:51:f9:7b:33:5b:5a:b6:
         c5:d2:fb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:53:22 2024 by rpki-client on console-fra.rpki-client.org