Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a3a2f33332d3438203d3e203634333030.roa
File:                     323430363a343563303a3a2f33332d3438203d3e203634333030.roa (raw, json)
Hash identifier:          XquPbz3g3Ep5Ha8/mTO/9YwY+xxCsOYiSz93lsrulwc=
Subject key identifier:   9D:8B:32:07:EA:06:6F:62:90:3C:D2:C0:E0:9B:39:39:03:E7:D5:2E
Certificate issuer:       /CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
Certificate serial:       568DE317325B2198F0E834363AF168025A095C92
Authority key identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a3a2f33332d3438203d3e203634333030.roa
Signing time:             Mon 01 Jul 2024 01:04:54 +0000
ROA not before:           Mon 01 Jul 2024 00:59:54 +0000
ROA not after:            Mon 30 Jun 2025 01:04:54 +0000
asID:                     64300
IP address blocks:        2406:45c0::/33 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl
                          rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8d:e3:17:32:5b:21:98:f0:e8:34:36:3a:f1:68:02:5a:09:5c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
        Validity
            Not Before: Jul  1 00:59:54 2024 GMT
            Not After : Jun 30 01:04:54 2025 GMT
        Subject: CN=9D8B3207EA066F62903CD2C0E09B393903E7D52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:5b:da:b2:0e:54:91:52:64:3f:8f:4c:75:
                    5a:d7:fc:01:9f:6c:d3:b5:d9:17:1f:2b:ea:42:3e:
                    34:2f:87:a8:35:0a:04:2e:37:1f:55:7c:8b:37:3f:
                    95:1e:f9:e2:77:c4:78:99:f3:53:65:03:61:97:b3:
                    d5:2f:f2:3f:ab:a5:20:eb:fa:e8:57:b7:25:ef:5c:
                    63:24:95:eb:d4:ba:e4:62:a3:bf:9e:58:80:27:47:
                    c7:b9:a3:4f:a1:7f:eb:e7:3c:33:2a:6e:23:a2:b5:
                    47:f5:56:9a:5b:4a:37:04:fd:ec:70:cf:ee:19:28:
                    8f:32:48:6d:92:e3:a2:43:80:50:b2:b0:6f:e6:1f:
                    80:cd:ae:57:ef:aa:cc:e2:b1:cb:c5:01:50:1f:87:
                    40:b3:e8:42:41:01:76:ed:14:15:55:37:e4:55:52:
                    72:ee:b1:02:0f:f5:62:84:db:3a:b3:05:0a:91:50:
                    93:00:35:b0:79:3c:16:52:00:70:a7:e9:c0:e8:ec:
                    f3:53:27:b1:81:e5:77:a5:a0:97:5a:7a:d0:58:4f:
                    a6:e2:b3:46:3b:87:de:0d:66:6a:4b:18:a6:25:b4:
                    b0:b8:85:37:8d:d5:b5:3f:14:4c:e3:07:c4:fc:1b:
                    2b:2b:2d:b5:5f:6f:2d:92:58:a6:16:0f:25:93:9f:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8B:32:07:EA:06:6F:62:90:3C:D2:C0:E0:9B:39:39:03:E7:D5:2E
            X509v3 Authority Key Identifier:
                keyid:92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/323430363a343563303a3a2f33332d3438203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:45c0::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:81:a5:ed:fe:8d:cd:a2:75:b4:ea:f6:d4:ed:5c:02:bf:f2:
         65:e8:2c:ce:92:aa:19:36:8f:98:50:7f:1e:56:fd:70:9a:4a:
         53:33:e0:85:1e:15:78:98:24:69:e4:3f:32:ea:e9:89:13:f1:
         0c:98:5c:87:35:44:82:87:dc:62:23:2a:de:19:ec:7f:67:d4:
         63:90:21:55:e9:64:f8:cc:91:4b:d1:e0:af:15:17:ac:b2:33:
         85:ec:60:c4:1c:0e:18:3f:3a:ae:06:cf:a9:95:a8:62:68:f2:
         0b:0a:4f:41:fe:b4:5b:5d:f4:d4:0f:11:98:62:be:06:ce:5d:
         90:c0:86:7b:93:68:98:7a:fd:ac:05:1c:5c:f7:79:98:57:22:
         e0:e8:0a:25:f0:7c:b0:ff:97:93:8a:70:2b:8e:e1:32:0d:6f:
         59:9a:e4:5c:16:7d:a9:ee:6d:b7:07:2e:cd:20:78:11:c9:ef:
         e6:bf:b0:ae:9e:95:5b:3d:38:23:a2:c6:2d:7c:9b:58:8c:41:
         01:b2:13:a0:f6:09:4e:f1:9b:d0:52:8e:dc:79:f7:1f:52:d9:
         bc:cd:33:9a:70:79:32:28:5b:b2:37:34:8d:f7:8f:23:ed:f4:
         9a:d2:e1:6e:43:27:34:64:0a:81:e0:24:58:6c:9a:ef:6d:ee:
         dc:82:cd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:23 2024 by rpki-client on console-fra.rpki-client.org