Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a323a3a2f34382d3438203d3e20313431363038.roa
File:                     323430363a616563303a323a3a2f34382d3438203d3e20313431363038.roa (raw, json)
Hash identifier:          f8rx+3fGUF07mbvTmIC7Ix6cj8JJ+4l3RQuywZkG++Q=
Subject key identifier:   F3:7B:B4:A6:DC:6D:B6:E3:48:2E:90:B3:2D:1E:E5:38:F8:6F:7C:23
Certificate issuer:       /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial:       250226AD7D33DD47A357814252055ABA197318B6
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a323a3a2f34382d3438203d3e20313431363038.roa
Signing time:             Thu 06 Jun 2024 03:00:01 +0000
ROA not before:           Thu 06 Jun 2024 02:55:01 +0000
ROA not after:            Thu 05 Jun 2025 03:00:01 +0000
asID:                     141608
IP address blocks:        2406:aec0:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
                          rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:02:26:ad:7d:33:dd:47:a3:57:81:42:52:05:5a:ba:19:73:18:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
        Validity
            Not Before: Jun  6 02:55:01 2024 GMT
            Not After : Jun  5 03:00:01 2025 GMT
        Subject: CN=F37BB4A6DC6DB6E3482E90B32D1EE538F86F7C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:95:eb:c4:3f:94:1c:91:87:8f:0a:82:6c:
                    2e:2d:a1:f8:b2:fc:23:2f:ba:c5:94:9c:4d:bb:8c:
                    c9:34:e9:bd:73:c1:d3:37:ae:e2:95:7d:77:f0:55:
                    81:95:54:5b:9f:e3:a5:ab:4a:2c:fb:5d:ee:d3:e7:
                    37:50:43:b0:5b:2a:aa:08:2e:80:36:f2:1c:f1:63:
                    f0:49:b8:ac:88:d7:bf:0c:a5:82:6f:49:5b:94:51:
                    e3:4b:5b:80:91:82:94:01:85:8b:aa:aa:79:4d:7c:
                    a6:ed:22:99:28:24:91:7e:9d:83:0f:6b:4e:9d:69:
                    44:25:3c:0e:f3:59:db:79:d3:88:87:51:fb:a7:15:
                    16:5b:07:ab:5a:36:29:3e:3a:44:3d:30:63:56:f9:
                    e4:a3:ea:e3:96:bf:f9:4e:86:b7:9e:27:e4:99:3a:
                    aa:87:24:b2:bb:fc:d6:9a:eb:0a:0d:f1:76:5e:7a:
                    31:e3:47:92:db:45:2e:be:08:d3:e2:b0:19:fc:df:
                    b1:a0:83:e3:a1:19:c7:f2:c4:cd:2e:c6:f9:bc:b6:
                    7f:c5:04:09:31:85:68:a5:72:3b:6c:a3:6d:30:e3:
                    b5:89:d3:41:92:47:c6:1e:68:88:b4:10:2d:8a:c3:
                    c5:86:96:1f:ef:c9:43:0b:73:ed:72:b3:89:99:2f:
                    e6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7B:B4:A6:DC:6D:B6:E3:48:2E:90:B3:2D:1E:E5:38:F8:6F:7C:23
            X509v3 Authority Key Identifier:
                keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a323a3a2f34382d3438203d3e20313431363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:aec0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:99:d1:02:f3:65:60:55:1c:96:e4:31:5e:15:7a:05:f0:fd:
         13:e6:ab:c2:4f:6a:30:86:f8:f1:93:7b:07:67:ca:f6:78:74:
         88:6c:fd:51:59:95:d1:81:d6:c1:70:82:bd:92:4f:67:a3:dd:
         c7:b5:df:75:bc:cb:bc:8a:47:64:d7:5e:02:3e:5b:d3:81:70:
         af:85:34:31:ca:48:f8:80:60:80:b7:d0:59:ab:a9:04:50:49:
         0a:2b:bb:ac:53:fc:34:d5:07:23:91:cd:95:50:ca:dc:62:89:
         75:19:19:89:a1:85:74:8a:c2:76:11:9d:ae:fb:e0:5c:35:df:
         61:ce:fe:a7:37:c4:bd:e3:36:e3:34:74:a2:ea:3c:ba:7b:a9:
         81:bb:8d:a9:91:dc:50:bd:29:95:36:cc:02:1b:e1:1a:3c:f8:
         d7:86:3b:6a:47:0b:c6:df:3b:36:c9:2a:ca:ac:ac:f4:cc:e8:
         c8:84:60:1c:1e:3d:82:99:ed:9c:d2:91:50:bf:1a:e5:85:ef:
         c3:d0:a4:35:ae:01:5c:8a:89:19:8d:69:96:55:6d:4c:01:cd:
         5b:b2:10:f5:38:44:4a:d8:bd:e3:19:80:7f:ed:14:f3:56:a7:
         9b:2d:4c:39:1f:35:16:3f:f1:97:c2:46:9e:b4:0c:d2:f8:3c:
         78:7a:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org