Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/323430343a6563303a3a2f33322d3332203d3e20313338313132.roa
File:                     323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (raw, json)
Hash identifier:          wB8cIPzXQ9LIImsEDpW6J4o7tPX0govGViUMbV41brs=
Subject key identifier:   15:B7:25:34:20:10:D4:85:CB:3B:BC:8B:2F:D9:C9:6F:B9:99:47:81
Certificate issuer:       /CN=255AA179563123A815C2B4073AD84B69F0967F4D
Certificate serial:       73E907426AE1A5CF87E7589D0E08227D3D692530
Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/323430343a6563303a3a2f33322d3332203d3e20313338313132.roa
Signing time:             Sun 03 Sep 2023 06:00:02 +0000
ROA not before:           Sun 03 Sep 2023 05:55:02 +0000
ROA not after:            Sun 01 Sep 2024 06:00:02 +0000
asID:                     138112
IP address blocks:        2404:ec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl
                          rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 02:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e9:07:42:6a:e1:a5:cf:87:e7:58:9d:0e:08:22:7d:3d:69:25:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D
        Validity
            Not Before: Sep  3 05:55:02 2023 GMT
            Not After : Sep  1 06:00:02 2024 GMT
        Subject: CN=15B725342010D485CB3BBC8B2FD9C96FB9994781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:60:13:e4:ab:b8:b9:3b:4c:62:16:c8:79:
                    ed:9a:78:31:99:eb:1f:68:71:44:a4:19:79:35:f3:
                    20:c7:ad:97:24:f4:44:c5:2e:bc:8e:66:9b:3c:3e:
                    28:a4:fc:e3:c6:13:09:bf:9a:0b:8d:77:8a:e1:9d:
                    f4:46:c3:df:eb:99:bb:4a:38:61:c6:d2:10:b8:8f:
                    98:8a:b1:b9:92:ea:38:b6:7f:85:95:d3:9d:a5:bf:
                    c7:3a:2f:34:42:e7:9e:1d:18:26:34:c2:35:85:12:
                    9d:38:5e:cc:3d:b2:db:e4:25:61:c5:95:06:c9:54:
                    92:47:70:81:f3:a3:d2:52:b0:ca:0e:cd:ef:08:92:
                    ef:ac:01:65:01:71:2d:e1:48:44:78:d6:90:5c:88:
                    7b:a1:32:10:d2:b8:b7:a5:86:08:e7:a1:97:ef:ae:
                    10:83:1c:4a:20:8f:82:04:89:70:06:c0:4f:5e:c6:
                    e4:d0:77:f6:f1:e7:32:dc:e5:21:ad:a3:84:14:3e:
                    d3:a8:a1:df:73:6b:cc:f6:77:76:8d:8b:61:6b:6f:
                    7b:d5:c5:e6:01:99:17:e3:04:10:7a:12:c3:52:ea:
                    dd:2b:78:5a:c9:27:02:7d:3a:c0:f3:f5:eb:32:76:
                    ba:aa:b8:2c:a7:95:d1:23:f8:29:36:b1:a1:c0:d6:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B7:25:34:20:10:D4:85:CB:3B:BC:8B:2F:D9:C9:6F:B9:99:47:81
            X509v3 Authority Key Identifier:
                keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/323430343a6563303a3a2f33322d3332203d3e20313338313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:9c:d6:72:e7:4a:2e:d8:23:74:8a:9a:17:66:9a:fe:40:60:
         46:cf:6b:e0:2d:7d:d1:d6:fb:dc:33:f9:ad:8e:91:05:b0:64:
         d8:15:21:cb:67:12:2c:98:56:20:d2:dd:e7:ec:7d:39:83:46:
         d2:2a:3c:7b:f0:05:1c:09:da:0d:7f:9c:d0:78:be:dd:5f:b1:
         dc:ef:1d:1d:47:d1:f9:0b:7e:a6:06:2c:3b:78:98:b0:d4:e1:
         c5:21:21:87:ee:5b:a6:bb:ec:d0:d2:42:07:2f:6d:35:3f:02:
         ea:ec:6d:2b:40:ce:ff:ee:40:b4:66:b3:12:62:34:33:9e:6a:
         81:3d:02:bb:98:74:6b:e2:d6:1b:59:7c:6e:07:a5:b2:2e:40:
         4d:07:77:a2:e2:23:34:c5:e4:c8:6e:77:b9:eb:7f:4a:11:eb:
         09:9c:42:85:ac:e6:ad:df:a3:f6:f3:8a:2b:9b:34:cf:73:e2:
         01:31:76:f9:32:17:29:6d:7f:81:14:08:43:f3:96:0d:f6:77:
         9c:71:32:7d:1d:41:1e:58:4a:fc:46:50:99:23:71:1b:75:8c:
         cd:7c:c3:02:a9:fb:7a:dc:aa:fc:62:ad:1d:bb:9c:65:4d:80:
         9e:25:97:9d:4f:bf:07:2e:dc:4e:cd:4e:6d:3a:78:93:5d:af:
         25:15:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:12:11 2024 by rpki-client on console-ams.rpki-client.org