Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a313a3a2f34382d3438203d3e20313431363038.roa
File:                     323430363a616563303a313a3a2f34382d3438203d3e20313431363038.roa (raw, json)
Hash identifier:          sSus2VekFQqdP746C1Oba95E9RuoDE9lUaWdASz7ATQ=
Subject key identifier:   30:28:F3:73:A4:9A:9C:8C:EE:2B:C8:99:8F:15:BE:91:E1:4F:2A:72
Certificate issuer:       /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial:       77FBFDD7C120AE9DBC5E9F636292E8AB7D167F49
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a313a3a2f34382d3438203d3e20313431363038.roa
Signing time:             Thu 06 Jun 2024 03:00:01 +0000
ROA not before:           Thu 06 Jun 2024 02:55:01 +0000
ROA not after:            Thu 05 Jun 2025 03:00:01 +0000
asID:                     141608
IP address blocks:        2406:aec0:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
                          rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fb:fd:d7:c1:20:ae:9d:bc:5e:9f:63:62:92:e8:ab:7d:16:7f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
        Validity
            Not Before: Jun  6 02:55:01 2024 GMT
            Not After : Jun  5 03:00:01 2025 GMT
        Subject: CN=3028F373A49A9C8CEE2BC8998F15BE91E14F2A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:c4:53:0f:e8:a0:45:c5:26:1d:c0:a9:0d:
                    4c:6f:d0:a8:48:02:1b:41:eb:bd:da:1b:d6:84:be:
                    77:b0:22:a1:7d:c8:37:4d:77:f8:d5:c8:0b:4f:78:
                    83:65:0f:b3:27:e7:f2:ae:59:91:88:58:54:8f:08:
                    58:d4:f0:43:e4:1f:ef:9d:bd:4e:8b:87:44:9c:6b:
                    e7:92:ad:d9:67:cd:d2:d7:31:3a:04:06:07:f1:46:
                    25:84:55:99:d8:0b:f0:04:b9:de:9c:14:68:f0:72:
                    73:46:97:8d:60:de:72:4f:d2:dc:2b:95:12:88:9e:
                    e0:c9:b4:78:ba:eb:41:ca:04:95:07:b3:b4:6f:ed:
                    c1:e8:52:51:d0:5c:c7:c3:82:a2:32:9c:62:59:90:
                    39:2a:3a:f5:38:d0:fc:99:fd:2f:3a:21:47:24:e4:
                    71:75:cd:90:e0:e2:83:aa:cc:94:d9:bb:92:0f:e7:
                    83:96:36:83:4d:91:ae:33:3b:63:e2:dd:3e:a8:01:
                    5d:15:1e:29:19:3e:b6:54:99:b1:0b:fb:58:12:62:
                    18:3d:18:41:a3:b6:85:a4:d7:88:b0:7f:a2:02:85:
                    2c:54:d3:86:ab:97:4c:fa:39:46:bc:2e:87:3d:cd:
                    a4:53:fd:5e:f8:b2:75:cc:e8:df:bd:63:21:c7:c2:
                    18:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:28:F3:73:A4:9A:9C:8C:EE:2B:C8:99:8F:15:BE:91:E1:4F:2A:72
            X509v3 Authority Key Identifier:
                keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a313a3a2f34382d3438203d3e20313431363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:aec0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:5f:d7:bd:6d:cd:e8:45:cb:bc:b2:18:c8:93:9d:0b:1d:17:
         65:b7:dd:7c:5a:d1:e8:b3:4d:33:84:15:80:dd:cd:96:6f:8a:
         08:c4:94:4b:6b:14:f2:33:8c:90:63:10:0b:66:82:9b:c3:1b:
         30:39:89:24:0b:95:b4:c1:a8:13:58:4d:eb:c4:b3:3e:64:e3:
         e4:84:d8:4b:ce:8e:48:7e:77:8b:7b:bc:da:76:ab:f9:98:28:
         91:c8:43:bf:4e:08:41:5c:4d:56:0a:84:6f:7b:54:31:f2:ab:
         8e:1f:1c:e0:3d:6f:69:d0:fc:03:68:ab:88:37:34:b7:91:7d:
         5d:67:7c:3b:18:2c:e2:24:a2:47:d5:06:0b:c0:59:41:56:88:
         3c:25:f0:a1:9a:32:11:72:b2:5e:50:f6:dc:f1:73:4d:73:2a:
         6a:4d:fd:fe:15:e6:ec:17:45:b6:e7:23:42:83:4e:f2:68:48:
         3a:0f:45:01:3d:94:09:b2:39:1b:b8:79:b9:79:4e:6e:6c:8c:
         f1:f6:32:95:e3:6f:9e:15:31:d8:b5:14:00:43:15:96:9b:11:
         8a:ca:4a:14:e6:49:aa:b9:8c:14:f4:f9:85:88:a6:15:4e:83:
         e4:4b:fe:d4:2c:ab:16:4a:42:38:06:f7:80:30:74:a6:ba:69:
         3d:35:0a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org