Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          gGwx76Fb5x/DeuewCi0Yjv31nZLQUDfBSTTTakHAoKU=
Subject key identifier:   E7:E8:F1:25:3D:B0:B1:16:3A:01:63:9E:C7:69:A0:FD:94:4E:9C:E9
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       3BF5D21C204D076CFD22FD1050A1F78E074A87F8
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 18 Sep 2024 03:01:07 +0000
ROA not before:           Wed 18 Sep 2024 02:56:07 +0000
ROA not after:            Wed 17 Sep 2025 03:01:07 +0000
asID:                     38526
IP address blocks:        2405:3740:8005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f5:d2:1c:20:4d:07:6c:fd:22:fd:10:50:a1:f7:8e:07:4a:87:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Sep 18 02:56:07 2024 GMT
            Not After : Sep 17 03:01:07 2025 GMT
        Subject: CN=E7E8F1253DB0B1163A01639EC769A0FD944E9CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:92:25:34:89:bf:46:c5:99:f8:0a:a9:de:3b:
                    af:a3:c1:d2:ef:82:d8:bd:8f:23:d7:18:15:2c:1d:
                    b4:8f:77:74:76:ed:11:b7:e1:51:97:16:ed:16:ca:
                    bd:3e:7e:bd:4b:ca:09:43:b7:b5:b1:30:e7:75:1f:
                    d8:38:3f:de:aa:4e:8c:71:71:ab:54:da:a2:e4:f8:
                    7c:67:52:11:2f:2b:87:6e:a5:19:a2:59:a2:ca:92:
                    d5:d8:91:5c:7a:2d:da:63:1d:4d:bb:ca:bc:77:a2:
                    ad:dd:3b:01:27:26:9d:88:91:1d:6e:cc:cf:ee:22:
                    f6:66:bd:32:fa:b6:a1:cb:48:4f:a1:1f:53:09:6b:
                    24:0a:2e:9e:55:6d:b9:50:a8:62:89:be:f9:fa:ad:
                    d9:43:44:72:df:90:ee:2e:d0:52:9a:a4:e2:20:17:
                    99:f1:cb:1a:4c:f4:b0:f7:d7:d4:ca:e6:63:19:98:
                    1c:59:53:e0:99:2a:24:b2:a0:91:8c:0d:87:3a:b4:
                    55:a8:a7:7e:65:4d:ab:e3:cb:b5:fb:39:6b:9c:bc:
                    a8:18:2c:d1:52:26:89:5e:75:84:16:3b:5e:de:92:
                    98:7a:5a:1d:aa:90:d8:28:2f:7b:5f:01:50:e6:7b:
                    a0:f3:62:1b:20:be:a3:be:10:a6:26:1d:f0:37:a6:
                    9c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E8:F1:25:3D:B0:B1:16:3A:01:63:9E:C7:69:A0:FD:94:4E:9C:E9
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030353a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:97:1b:a7:f7:a6:09:cc:c6:89:38:b9:05:1a:08:f5:7b:3b:
         59:b1:a2:57:b2:35:de:2b:ea:29:d9:ff:23:ac:19:fe:b4:1d:
         28:c3:57:74:46:e9:4d:a2:57:4c:b0:1e:c9:b6:76:4e:75:31:
         33:8c:6b:2f:f7:a7:be:87:e6:a4:34:55:3a:3c:e0:24:c4:a4:
         cd:56:a6:91:15:3d:db:9b:9c:3e:ab:18:2b:cd:77:b1:51:01:
         f8:f3:0f:20:21:a3:ce:76:07:84:be:4b:8b:87:73:2a:91:5e:
         4b:8a:1d:16:15:ff:34:38:c6:31:8e:2b:b0:72:76:bf:65:9f:
         eb:bd:4e:24:17:94:05:c0:62:99:3a:f9:31:92:cf:f1:63:cc:
         79:cd:b5:a7:aa:b7:b1:bf:ee:82:f0:9e:00:74:14:2a:f3:6b:
         f5:e2:bd:a7:d0:b6:34:84:68:e5:f4:76:98:a2:79:86:48:f6:
         89:ee:bb:94:33:14:0d:cc:66:38:0e:70:e8:09:cd:b4:51:d6:
         a8:b4:a1:e3:70:50:b5:ac:78:b6:bc:f1:6c:69:25:22:7f:24:
         14:6a:c3:47:5b:dd:e9:8f:0d:89:ab:26:8b:d8:33:ff:17:8e:
         0e:b0:c6:22:ee:4b:12:e1:36:63:a2:8e:bc:06:87:e0:0d:9f:
         0d:7f:b3:bb
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUO/XSHCBNB2z9Iv0QUKH3jgdKh/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx
MzIyNTIwRDAeFw0yNDA5MTgwMjU2MDdaFw0yNTA5MTcwMzAxMDdaMDMxMTAvBgNV
BAMTKEU3RThGMTI1M0RCMEIxMTYzQTAxNjM5RUM3NjlBMEZEOTQ0RTlDRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkiU0ib9GxZn4CqneO6+jwdLv
gti9jyPXGBUsHbSPd3R27RG34VGXFu0Wyr0+fr1LyglDt7WxMOd1H9g4P96qToxx
catU2qLk+HxnUhEvK4dupRmiWaLKktXYkVx6LdpjHU27yrx3oq3dOwEnJp2IkR1u
zM/uIvZmvTL6tqHLSE+hH1MJayQKLp5VbblQqGKJvvn6rdlDRHLfkO4u0FKapOIg
F5nxyxpM9LD319TK5mMZmBxZU+CZKiSyoJGMDYc6tFWop35lTavjy7X7OWucvKgY
LNFSJoledYQWO17ekph6Wh2qkNgoL3tfAVDme6DzYhsgvqO+EKYmHfA3ppwLAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU5+jxJT2wsRY6AWOex2mg/ZROnOkwHwYDVR0j
BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy
MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy
NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzgzMDMwMzUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3
QIAFMA0GCSqGSIb3DQEBCwUAA4IBAQATlxun96YJzMaJOLkFGgj1eztZsaJXsjXe
K+op2f8jrBn+tB0ow1d0RulNoldMsB7JtnZOdTEzjGsv96e+h+akNFU6POAkxKTN
VqaRFT3bm5w+qxgrzXexUQH48w8gIaPOdgeEvkuLh3MqkV5Lih0WFf80OMYxjiuw
cna/ZZ/rvU4kF5QFwGKZOvkxks/xY8x5zbWnqrexv+6C8J4AdBQq82v14r2n0LY0
hGjl9HaYonmGSPaJ7ruUMxQNzGY4DnDoCc20UdaotKHjcFC1rHi2vPFsaSUifyQU
asNHW93pjw2JqyaL2DP/F44OsMYi7ksS4TZjoo68BofgDZ8Nf7O7
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org