Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa
File:                     323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (raw, json)
Hash identifier:          HgT0zWqGsVo/A44wtsD2sn4SQOnXdiq4EqXeX3vHjlc=
Subject key identifier:   19:35:F3:2B:DC:F4:71:E6:AA:68:99:03:A4:BE:CD:07:E4:FA:A8:88
Certificate issuer:       /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Certificate serial:       6346BF35EAAA05AB1922BB51E61A3BF86991E779
Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa
Signing time:             Tue 27 Feb 2024 16:32:05 +0000
ROA not before:           Tue 27 Feb 2024 16:27:05 +0000
ROA not after:            Tue 25 Feb 2025 16:32:05 +0000
asID:                     24429
IP address blocks:        2405:1640:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl
                          rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:46:bf:35:ea:aa:05:ab:19:22:bb:51:e6:1a:3b:f8:69:91:e7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
        Validity
            Not Before: Feb 27 16:27:05 2024 GMT
            Not After : Feb 25 16:32:05 2025 GMT
        Subject: CN=1935F32BDCF471E6AA689903A4BECD07E4FAA888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ad:1c:cb:ab:b0:30:0c:aa:59:d1:66:5d:c1:
                    0a:e5:70:3a:55:9e:62:43:08:4c:4c:3d:a9:6c:db:
                    29:07:ff:eb:ed:14:a0:38:df:1e:3a:11:8b:d7:84:
                    21:79:41:75:72:72:b8:03:52:ad:87:bb:5a:19:0b:
                    59:08:8e:4f:1f:55:f4:41:78:f3:73:9a:7c:94:e1:
                    9a:fa:ee:e8:8e:05:ea:81:a9:b6:e0:00:ad:e7:8e:
                    94:4c:73:4b:68:2c:04:e3:b7:02:61:c2:59:88:7e:
                    23:c8:ab:0c:a9:78:54:33:25:a4:37:5b:e5:b3:fc:
                    96:73:09:d3:a9:22:e1:46:c8:be:df:73:41:d0:13:
                    4e:52:c8:30:1f:1a:05:87:36:79:1b:08:b2:7b:a9:
                    27:22:b2:b8:e6:42:fc:15:43:eb:5a:b3:38:db:6c:
                    5e:a5:9e:a2:ab:05:d4:1c:27:26:e9:a8:b6:98:6d:
                    4a:bc:8c:13:71:9b:b7:9c:c5:bb:80:54:de:27:96:
                    4f:b1:ac:59:21:10:03:39:4d:e7:69:3d:00:21:63:
                    74:79:14:ad:cf:e5:5a:cb:51:51:be:79:0e:bd:e3:
                    20:89:51:7e:c9:e4:44:dc:30:2f:f9:ed:5d:c6:c5:
                    33:4b:20:b6:0f:d6:c6:b9:6a:90:fd:bf:6b:1a:36:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:35:F3:2B:DC:F4:71:E6:AA:68:99:03:A4:BE:CD:07:E4:FA:A8:88
            X509v3 Authority Key Identifier:
                keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:1640:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:85:c1:92:1c:1d:66:e1:eb:d6:05:5b:ee:3e:52:6e:6c:
         17:86:b5:24:d6:f3:a1:9e:cf:90:12:c1:1b:74:73:03:38:9f:
         a1:9e:2d:36:be:73:62:52:d8:93:c9:d8:93:be:f0:a5:47:51:
         d6:9b:60:11:07:6c:42:76:81:cd:b4:06:8c:97:cc:cc:71:b7:
         48:c3:d7:fd:4b:c8:5d:06:66:e7:65:25:51:fe:11:d9:9a:37:
         ac:d3:4d:fe:01:23:01:d8:d0:ab:f6:5a:25:d0:ae:93:8f:7f:
         7f:85:2b:76:55:b6:3c:96:31:d6:1a:e1:00:98:20:22:cb:2f:
         ca:2a:bb:7d:10:e8:1d:5e:d3:f8:25:11:eb:76:66:e8:1f:63:
         d7:7c:cd:6a:c4:ad:a7:fe:66:c9:88:71:d7:c2:01:e4:90:9b:
         99:38:97:f6:bf:35:fd:e7:cc:61:82:b0:4e:02:84:f8:74:d3:
         d6:d0:6a:91:3b:cb:b4:d0:a3:6c:03:db:ad:0b:88:89:68:f4:
         6f:db:a9:f5:10:7c:b3:78:54:3b:de:f2:2c:4b:aa:10:e4:c8:
         fe:91:8e:ab:5a:ed:e5:ea:dd:6c:f5:73:02:30:fa:8a:d8:64:
         96:2f:da:0b:87:75:5a:64:6d:6e:88:e5:fe:78:64:7f:36:ac:
         e0:45:6b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:17 2024 by rpki-client on console-ams.rpki-client.org