Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030383a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a383030383a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          4TDZZEUKLXgIUmCz073i2QNNwTNM61EASW4expbRVOo=
Subject key identifier:   B8:DB:47:FD:8A:B3:CC:30:2C:1E:F9:8B:98:80:FD:7F:44:8C:27:FD
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       6E048CDA6FB9BDB08AE40FAC642B138EEE8E7C8F
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030383a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 28 Feb 2024 06:01:24 +0000
ROA not before:           Wed 28 Feb 2024 05:56:24 +0000
ROA not after:            Wed 26 Feb 2025 06:01:24 +0000
asID:                     38526
IP address blocks:        2405:3740:8008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:04:8c:da:6f:b9:bd:b0:8a:e4:0f:ac:64:2b:13:8e:ee:8e:7c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Feb 28 05:56:24 2024 GMT
            Not After : Feb 26 06:01:24 2025 GMT
        Subject: CN=B8DB47FD8AB3CC302C1EF98B9880FD7F448C27FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:04:4b:93:d6:5e:ac:61:c7:fb:66:fa:a6:74:
                    9b:79:4f:c0:fb:69:09:68:03:e6:ec:24:29:18:9b:
                    d8:98:7d:77:45:c9:5c:b6:3b:a7:14:cd:2d:cc:6d:
                    a6:cf:2d:15:8b:d6:4f:93:f5:30:be:d4:c7:75:4f:
                    45:58:67:6a:da:ca:d2:03:0c:aa:d8:73:be:28:4d:
                    3d:b9:4b:ca:fb:67:f9:fe:84:28:d2:31:43:03:d7:
                    98:12:e1:29:20:d4:f1:a1:f3:9e:4d:9f:c4:eb:d9:
                    3e:64:5c:0c:e2:84:4e:7c:1b:9c:eb:4b:48:c3:81:
                    7b:ea:d3:36:5b:f3:48:b6:b2:b2:9a:33:7f:a7:30:
                    8d:e1:64:c3:ab:dc:ac:38:f2:48:af:aa:4a:2b:f9:
                    e9:63:b0:ab:ce:d3:af:f3:0b:83:56:19:21:53:35:
                    86:23:24:c9:dd:e7:62:38:40:42:2f:57:f8:f1:38:
                    06:24:53:2b:75:ce:45:b9:65:e1:20:f7:4f:3e:b2:
                    a1:ae:ff:31:cb:74:f2:d2:82:88:3e:9c:c7:66:d8:
                    e1:3a:cc:2e:d7:f4:d6:51:e2:fd:d3:25:b4:4c:7a:
                    3a:72:cb:b7:60:b5:80:a7:d2:cb:28:50:60:ff:76:
                    45:dc:a1:ef:07:35:46:d7:7b:f3:13:ff:5d:bf:e5:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DB:47:FD:8A:B3:CC:30:2C:1E:F9:8B:98:80:FD:7F:44:8C:27:FD
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030383a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:8008::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:a2:8f:8f:83:3e:27:26:ee:69:7e:fb:f1:2f:13:1e:74:
         01:61:df:7c:a0:f2:63:21:5e:57:24:52:13:91:4f:14:ec:60:
         90:17:64:32:c6:fe:7f:24:ff:70:92:9e:98:1c:64:d8:76:be:
         26:97:20:c5:7f:81:3e:24:ee:94:14:e3:ef:08:72:45:e8:fa:
         17:28:01:4b:c9:66:2a:26:fd:4b:d6:ce:75:bc:78:75:4f:36:
         4f:2b:b7:e8:6e:45:3f:22:ac:99:a0:1c:5b:c8:9a:d4:5a:6b:
         d0:d3:b1:10:d2:5b:6f:d5:06:d4:55:73:e3:d3:25:9c:cf:bb:
         24:57:e0:52:10:d6:a7:6d:30:a7:de:1e:f6:35:23:0a:80:38:
         82:8c:94:12:dc:d3:87:b6:cd:6f:8a:20:b6:19:eb:fc:76:3f:
         04:85:a3:6d:0c:cf:d1:cd:8d:2a:6b:a2:5c:68:28:60:c7:6d:
         e3:48:41:cc:7d:a6:6d:d5:44:70:f6:e5:31:e9:ca:ee:48:ca:
         b8:0f:3c:7c:ea:e1:f7:db:b5:cd:b4:08:fe:52:b6:1c:7c:ff:
         f8:c9:8f:b6:87:98:de:ee:64:0e:fc:36:e1:88:86:bc:6f:d9:
         d0:f8:5f:ff:a5:17:4f:c9:9b:da:63:df:8d:de:9b:e6:21:55:
         29:e7:89:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org