Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa
File:                     323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (raw, json)
Hash identifier:          Y92n8kI4o/dXH3j9WlXaL/z49fQAIto/aImu35/UD/c=
Subject key identifier:   56:AE:E4:A4:7E:F8:04:86:F1:DD:46:14:C4:F7:85:6C:48:CD:9D:E9
Certificate issuer:       /CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
Certificate serial:       1F660160C2F7B4E360CA90804E43D20806AAA9AD
Authority key identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa
Signing time:             Mon 01 Jul 2024 01:04:54 +0000
ROA not before:           Mon 01 Jul 2024 00:59:54 +0000
ROA not after:            Mon 30 Jun 2025 01:04:54 +0000
asID:                     64300
IP address blocks:        2406:45c0:8000::/33 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl
                          rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:66:01:60:c2:f7:b4:e3:60:ca:90:80:4e:43:d2:08:06:aa:a9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
        Validity
            Not Before: Jul  1 00:59:54 2024 GMT
            Not After : Jun 30 01:04:54 2025 GMT
        Subject: CN=56AEE4A47EF80486F1DD4614C4F7856C48CD9DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:91:1c:92:c4:34:3a:00:7d:1a:92:f7:d4:
                    38:e2:09:e2:c8:bd:49:d6:66:6d:11:27:26:0b:ba:
                    c1:6a:73:96:4f:5a:45:29:e1:d3:05:b9:4d:76:19:
                    6c:2e:f0:b5:30:d8:87:ae:6b:83:70:a6:38:ad:b6:
                    5c:25:43:7c:8a:84:b9:56:24:53:93:9b:3b:96:be:
                    80:66:b8:40:ee:3a:13:1c:6d:f5:91:37:2d:6a:74:
                    ad:61:13:0d:82:94:fe:2a:31:cc:8a:bf:b0:d0:23:
                    13:4f:d7:2b:63:1b:6c:18:bf:53:63:a5:00:ed:7f:
                    5b:4f:0b:c5:8b:bf:84:61:f4:4e:75:51:ee:e9:35:
                    ac:fb:dd:ac:4b:78:a6:45:b5:6d:4e:75:d1:2f:5c:
                    3d:4c:71:74:04:8b:c2:a2:5a:67:67:cc:a5:dc:8c:
                    8b:7b:cd:55:57:0b:56:44:a9:1c:7f:c8:dc:9f:6d:
                    9e:db:46:3d:ef:20:df:91:12:26:51:e7:df:bd:34:
                    f4:86:78:b4:42:73:6d:b5:70:9d:3a:04:f9:04:c7:
                    54:15:f8:69:80:e5:75:56:ee:3c:da:97:6e:d0:ee:
                    78:9c:ac:2b:c8:9e:f6:25:a3:8b:6b:25:a4:62:75:
                    50:5a:ab:04:e2:fd:3b:22:1d:98:bd:71:5c:55:63:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AE:E4:A4:7E:F8:04:86:F1:DD:46:14:C4:F7:85:6C:48:CD:9D:E9
            X509v3 Authority Key Identifier:
                keyid:92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:45c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3e:da:4b:0f:d6:7c:70:49:f3:bc:b8:70:4b:7b:80:95:9e:84:
         ff:d0:8c:8b:b8:fb:94:78:13:a0:b6:12:9e:94:79:9c:c7:48:
         a6:33:48:00:66:1d:68:d3:eb:bf:75:63:2b:4c:29:99:d0:c8:
         34:94:1a:87:d8:49:81:7b:a9:98:97:b4:69:ff:00:44:af:d0:
         53:19:a5:fa:72:7f:c7:e8:bc:1f:44:ba:e2:16:b8:d7:de:89:
         56:af:ef:81:d7:0a:da:8c:0b:30:04:51:3e:cd:1b:f9:f5:ca:
         e8:0f:16:41:67:d0:7d:e9:a4:85:58:10:18:67:72:44:8f:4c:
         bb:30:bc:a0:75:eb:23:13:32:af:b4:e1:23:52:fa:ba:4c:f4:
         16:24:dc:8a:40:b4:0e:22:33:ac:e5:a8:04:ac:66:8d:6f:17:
         27:46:16:e4:e4:3a:f9:81:b6:79:01:dc:e1:67:c1:f0:ec:8b:
         45:7d:c7:52:d0:95:e9:50:14:97:dc:77:53:3c:3e:7f:47:b6:
         5a:9b:8d:66:b5:ec:da:51:a4:80:d6:7e:b0:9e:42:c7:23:25:
         60:12:e7:15:06:64:10:b3:24:d2:40:ef:4e:89:c4:49:77:d2:
         99:50:35:28:aa:4c:0e:aa:17:14:82:9b:1f:01:1b:c2:23:09:
         b1:07:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:23 2024 by rpki-client on console-fra.rpki-client.org