Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/323430303a643734303a3a2f33322d3438203d3e20313336313036.roa
File:                     323430303a643734303a3a2f33322d3438203d3e20313336313036.roa (raw, json)
Hash identifier:          mBlqjGl9dwK44fL9A0EbXx+b7lY36Zw+A0Eca+sI0yw=
Subject key identifier:   4D:AC:01:1C:FD:4D:68:79:66:76:10:C3:AB:0A:6D:1F:9F:63:D1:B0
Certificate issuer:       /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Certificate serial:       0F61DBB770DAFA6D2409C3602FA7069325ACC18F
Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/323430303a643734303a3a2f33322d3438203d3e20313336313036.roa
Signing time:             Mon 01 Jul 2024 01:04:53 +0000
ROA not before:           Mon 01 Jul 2024 00:59:53 +0000
ROA not after:            Mon 30 Jun 2025 01:04:53 +0000
asID:                     136106
IP address blocks:        2400:d740::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
                          rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:61:db:b7:70:da:fa:6d:24:09:c3:60:2f:a7:06:93:25:ac:c1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
        Validity
            Not Before: Jul  1 00:59:53 2024 GMT
            Not After : Jun 30 01:04:53 2025 GMT
        Subject: CN=4DAC011CFD4D6879667610C3AB0A6D1F9F63D1B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:4e:da:e1:a8:66:7a:5a:43:43:29:63:a3:
                    d3:d2:58:05:36:9d:bc:38:72:a2:ab:54:4a:95:23:
                    37:87:50:86:80:a6:f9:03:b0:64:45:72:37:96:90:
                    92:72:d9:6b:93:8e:33:72:94:fd:03:76:28:0c:0c:
                    5e:33:93:46:f4:12:57:91:51:14:0b:1c:db:48:6d:
                    e3:b9:89:b3:66:2f:88:5c:1d:ee:a0:cd:5a:c0:5c:
                    53:05:e8:47:3c:81:c6:40:94:49:7a:39:1c:1a:cc:
                    6f:50:62:0b:e1:b3:7b:b9:78:90:6b:ca:e0:6a:4d:
                    bd:49:12:ec:77:47:71:59:ac:50:93:31:37:ce:6b:
                    72:9b:7e:cd:93:5d:9c:d7:51:b4:2a:98:f3:a3:37:
                    ab:77:6d:4a:d4:4b:d9:4e:2a:9f:8e:e1:41:da:8e:
                    82:ee:7b:fb:dc:ba:76:20:32:f7:24:40:d7:d2:25:
                    a0:df:c7:e1:f4:a7:a3:ca:68:c2:1a:c3:52:7e:bb:
                    0d:ab:21:bc:61:10:51:fd:c5:7d:71:e8:17:29:7d:
                    f3:1b:88:33:eb:83:20:e8:a2:09:17:9e:66:09:34:
                    2b:b5:a8:ae:b2:55:7d:fb:51:cd:22:db:9a:35:f9:
                    b3:91:a2:ec:ce:9a:0f:31:49:d4:4e:b3:6d:87:61:
                    36:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AC:01:1C:FD:4D:68:79:66:76:10:C3:AB:0A:6D:1F:9F:63:D1:B0
            X509v3 Authority Key Identifier:
                keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/323430303a643734303a3a2f33322d3438203d3e20313336313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d740::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:b1:9e:5d:1e:08:e6:5f:de:32:d0:c1:92:8b:0f:10:d9:2e:
         39:10:6c:25:22:e5:88:b4:eb:c2:6e:cf:1c:11:4e:25:a2:df:
         34:f2:90:d8:0d:fb:70:22:95:fa:b4:2a:40:56:1f:ff:68:2c:
         aa:ac:a1:17:d0:86:14:24:97:02:47:83:f7:94:ad:d5:5b:9a:
         8a:83:5b:63:5c:74:c6:5e:9e:70:fc:57:55:72:54:34:ca:ca:
         f9:45:76:e6:23:55:24:71:2c:5e:45:17:ae:b2:96:33:23:82:
         94:61:cf:e3:94:58:f4:5b:b5:9c:37:9a:f9:ef:e6:74:91:59:
         ed:f0:e9:14:e6:c7:cf:6b:cf:c7:19:5e:cc:5f:fe:c6:20:b5:
         29:1c:e2:b3:d5:6e:a2:2b:60:0a:65:f3:bf:58:c5:81:b1:7d:
         07:93:34:31:2e:1f:16:ef:05:50:ad:2b:92:50:1d:9a:04:ce:
         88:b7:63:b3:7f:34:34:71:68:ba:62:c2:6c:9b:a6:95:21:a3:
         1e:f3:56:cd:30:52:16:e9:27:ff:e4:1f:36:14:9f:82:05:6d:
         a8:08:8f:f9:c8:ce:cb:74:c1:d0:49:04:81:c1:73:cc:52:25:
         c5:43:58:d1:45:24:ad:ad:09:11:16:ef:79:e1:37:07:f7:39:
         f2:c0:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org