Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa
File:                     323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa (raw, json)
Hash identifier:          ZqY1pOoBMxtHwJgpKYIYXH9Etbpxlko/adYLvVWUcXQ=
Subject key identifier:   8E:1A:0E:A3:E5:75:6B:35:49:5E:C5:8C:B1:EA:DF:78:C4:65:2C:1F
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       627F78AEA2EC7307FF7801DD254A79E0D9EE0DC8
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa
Signing time:             Thu 04 Jul 2024 09:23:44 +0000
ROA not before:           Thu 04 Jul 2024 09:18:44 +0000
ROA not after:            Thu 03 Jul 2025 09:23:44 +0000
asID:                     137363
IP address blocks:        2402:fdc0:1373::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
                          rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7f:78:ae:a2:ec:73:07:ff:78:01:dd:25:4a:79:e0:d9:ee:0d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: Jul  4 09:18:44 2024 GMT
            Not After : Jul  3 09:23:44 2025 GMT
        Subject: CN=8E1A0EA3E5756B35495EC58CB1EADF78C4652C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:1d:d3:e4:64:42:24:c6:d2:bb:e7:67:a5:
                    bb:36:64:2d:0b:b0:06:5b:7d:26:88:c0:93:7a:5a:
                    1f:91:af:e4:11:77:4d:cc:5c:fd:c4:27:60:2a:2b:
                    bf:73:48:f2:66:16:01:7b:69:3a:49:bc:07:79:f1:
                    69:e4:6a:9f:06:0a:5f:7b:82:8f:76:de:b2:71:2c:
                    e6:cb:ef:cf:aa:90:e2:81:ca:03:61:d5:06:76:ad:
                    70:d6:e7:3c:3e:0b:40:c0:d2:c0:d3:92:f2:5a:b7:
                    4c:26:5a:51:d3:61:c0:b5:5a:76:d9:c4:38:15:fc:
                    d6:39:25:9b:95:5d:a1:5c:87:7f:ea:22:7a:d0:42:
                    5b:e6:41:3b:e9:1d:7a:e9:33:5e:b8:ce:1d:92:ce:
                    73:0f:d3:61:e4:00:a3:3e:1f:31:c8:e6:e3:af:a0:
                    eb:56:a9:44:69:ae:fc:36:72:47:21:17:d2:0c:43:
                    18:b7:dd:96:3a:19:78:4b:ce:bc:b4:63:51:3f:eb:
                    37:94:96:13:fe:af:3e:52:ae:30:a6:b4:bc:34:5d:
                    a8:96:77:30:4b:91:7a:a8:33:c5:b6:81:9c:cd:09:
                    b4:17:a6:ed:ae:24:c9:49:60:3e:7c:37:b0:88:cf:
                    a5:96:73:cd:3d:92:f1:c3:ec:81:03:b8:57:06:92:
                    58:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1A:0E:A3:E5:75:6B:35:49:5E:C5:8C:B1:EA:DF:78:C4:65:2C:1F
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:fdc0:1373::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:5c:5d:4a:01:d0:e6:e9:79:3c:a8:5c:08:58:21:f3:ff:ac:
         2a:85:6f:ca:50:65:9f:35:d5:d9:c9:b6:7d:bc:1f:37:00:20:
         4b:cd:38:ef:b9:4a:15:54:fc:77:93:c8:72:d8:74:bd:18:a8:
         6a:1e:a8:7a:d2:af:c1:2d:82:cf:78:a6:20:50:ec:bb:b7:23:
         c4:7d:d4:75:82:f4:a2:6a:94:b6:94:69:fe:7a:e7:59:68:02:
         91:fe:76:83:a3:8e:02:92:ba:ad:01:a3:ad:2e:41:d8:b8:a5:
         04:03:d5:52:0c:d0:ff:fc:7b:d3:9b:d8:78:ec:d3:40:be:94:
         9d:cf:b0:1c:c8:ca:39:0d:6f:67:b4:6a:58:31:f2:75:ef:09:
         df:dd:16:9e:52:c7:ee:f5:77:c6:3c:18:8d:87:cb:19:3f:aa:
         cf:f3:78:71:a8:ef:e0:c3:0a:75:0b:4e:c5:fd:75:30:09:4c:
         4c:37:c7:1c:a0:80:30:ef:f2:30:04:df:2e:3c:8f:07:74:87:
         db:bf:d0:db:03:0e:29:5d:a9:8c:2f:41:35:cb:ae:ad:fe:b8:
         9a:92:45:79:a9:04:7a:26:92:a9:ac:67:be:04:51:cc:8c:54:
         5c:0d:3a:93:62:36:55:82:c2:e6:91:8f:00:7a:de:76:96:87:
         5d:d6:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org