Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a3a2f33322d3438203d3e20313338383836.roa
File:                     323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (raw, json)
Hash identifier:          5VRPE5NvB9NxOUBuh5YhZOJPUJ8aRVBGpA5WRzgcvh4=
Subject key identifier:   5D:73:87:14:11:5A:3B:4E:E1:10:7E:5C:03:3A:61:58:96:E2:78:CF
Certificate issuer:       /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Certificate serial:       5CA0F7ACDD8CCACBE4CA34B5447D6AD742510DB5
Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a3a2f33322d3438203d3e20313338383836.roa
Signing time:             Mon 18 Sep 2023 03:02:31 +0000
ROA not before:           Mon 18 Sep 2023 02:57:31 +0000
ROA not after:            Mon 16 Sep 2024 03:02:31 +0000
asID:                     138886
IP address blocks:        2405:1640::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl
                          rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a0:f7:ac:dd:8c:ca:cb:e4:ca:34:b5:44:7d:6a:d7:42:51:0d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
        Validity
            Not Before: Sep 18 02:57:31 2023 GMT
            Not After : Sep 16 03:02:31 2024 GMT
        Subject: CN=5D738714115A3B4EE1107E5C033A615896E278CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:26:f1:98:68:0d:67:38:c7:d9:f2:b7:b0:
                    bc:5f:5e:df:06:48:fb:1b:40:86:77:bd:a0:51:5b:
                    bc:a5:1b:7c:85:9e:e8:8f:f9:2e:d1:ee:a7:19:f3:
                    5b:d4:9c:e9:22:a2:54:2a:8c:30:8a:dd:97:95:f5:
                    3c:dc:6a:2b:5e:4d:d9:7a:c5:6b:bf:ab:5e:b9:2b:
                    2a:7a:ee:d5:91:9e:ac:b4:a6:c8:dc:35:da:f2:ad:
                    d0:5b:40:22:66:60:90:ad:bb:fd:19:b9:19:25:23:
                    62:e6:6f:6b:78:1e:fe:1f:30:6f:24:cb:a9:f8:5f:
                    89:69:f7:30:ca:7a:65:f8:a7:4f:19:c0:12:4b:51:
                    f2:e3:a2:57:a2:35:cd:96:67:55:1b:86:96:29:7a:
                    b2:ba:57:6e:59:3a:38:8b:c6:63:1e:07:de:0f:ad:
                    0f:a1:87:a9:0c:44:20:89:54:af:b5:ac:75:96:c4:
                    1a:69:4f:91:22:cd:02:2f:22:16:52:6b:77:5d:ee:
                    49:1f:ae:29:b3:4d:a2:e3:a6:13:5a:96:2e:14:27:
                    79:a9:28:37:be:4d:9c:bc:26:82:03:59:f1:02:c3:
                    b0:22:e4:23:0b:45:19:2c:09:07:7b:10:a7:82:ab:
                    1c:2c:e3:a0:15:9f:e4:89:1c:73:25:65:00:22:c2:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:73:87:14:11:5A:3B:4E:E1:10:7E:5C:03:3A:61:58:96:E2:78:CF
            X509v3 Authority Key Identifier:
                keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a3a2f33322d3438203d3e20313338383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:1640::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:4a:9f:b9:47:4d:99:17:ac:03:a2:81:b9:e3:3e:3d:ec:97:
         cd:b4:a2:b1:a9:c0:e8:bd:48:f8:b3:5c:31:b6:26:bd:6f:05:
         aa:f1:0e:69:91:c4:36:f6:47:78:da:40:c5:36:01:0b:d5:76:
         06:66:78:99:80:84:a3:a7:37:5e:07:43:15:09:60:d7:b8:05:
         bc:4e:eb:e2:fc:a5:e5:12:65:3e:8f:12:91:9d:f9:0f:af:25:
         f1:1a:c2:6b:2b:df:2f:44:b4:52:79:1b:e6:c3:74:71:85:0d:
         d7:f5:7f:eb:e0:3a:53:7d:d7:56:c9:01:6d:15:4b:ef:41:4d:
         91:45:ff:23:79:d3:06:39:2b:73:5f:14:fc:b9:a0:9b:58:28:
         80:39:01:5c:8d:c1:ce:57:b1:63:df:be:56:ec:6d:5a:4c:33:
         89:4d:aa:b2:69:ed:88:77:ac:e9:4a:06:14:4d:2a:0e:a5:dd:
         c6:01:11:a0:4a:ce:11:e7:cb:a1:7f:c2:5f:87:40:83:22:74:
         00:51:5f:ae:e7:dc:74:5f:94:3e:73:0d:b5:60:ac:81:27:aa:
         3b:aa:e0:72:17:25:cf:07:88:1b:a6:ba:b1:66:95:4d:06:09:
         c5:10:a0:49:b9:6d:cb:a9:f6:bb:cc:31:06:68:bf:de:3f:6c:
         99:28:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:17 2024 by rpki-client on console-ams.rpki-client.org