Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030353a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393030353a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          GWfJ+RbN60SdsJo3ZaWFrLh40sgCJfwdIbGB6dq9IOY=
Subject key identifier:   8E:14:06:3F:01:98:C7:CE:8E:28:47:35:A2:25:2B:DB:00:36:21:E0
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       787EAFAC2D2168046901098B4E0F446319593DA0
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030353a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 01:36:09 +0000
ROA not before:           Wed 27 Mar 2024 01:31:09 +0000
ROA not after:            Wed 26 Mar 2025 01:36:09 +0000
asID:                     38526
IP address blocks:        2405:3740:9005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7e:af:ac:2d:21:68:04:69:01:09:8b:4e:0f:44:63:19:59:3d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 01:31:09 2024 GMT
            Not After : Mar 26 01:36:09 2025 GMT
        Subject: CN=8E14063F0198C7CE8E284735A2252BDB003621E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:11:1f:f1:da:8c:e6:24:51:bd:47:15:c4:
                    ec:09:60:03:cd:c6:8e:70:76:06:a9:b1:50:11:0d:
                    63:fb:9d:18:74:2a:de:31:1d:23:19:19:be:e9:90:
                    09:b1:47:b8:3e:b9:d1:1e:b1:11:8c:ef:7e:d6:a8:
                    ac:4c:c6:d1:ee:61:7f:ae:02:47:f5:7b:f8:65:fb:
                    5c:f8:c6:8a:ac:ce:05:fe:dc:45:69:9f:19:66:27:
                    c7:8d:93:de:04:8a:30:21:d7:22:24:53:54:fa:76:
                    e8:5e:94:9c:1c:5d:ce:57:74:7d:af:71:48:46:b7:
                    77:e9:f4:42:ea:d2:90:24:02:42:91:ed:d8:40:aa:
                    95:fa:d5:ab:5e:40:79:15:5e:c5:56:b0:da:12:d4:
                    67:68:90:6b:b8:4a:ff:2a:bf:0e:0b:3a:3f:13:1d:
                    24:34:e5:49:87:42:ee:70:5a:f2:83:92:6d:bb:4b:
                    10:94:df:7e:f8:48:e9:6e:9c:89:ce:36:2d:68:eb:
                    24:00:0e:c9:58:f4:6d:63:3b:e2:d4:16:3d:aa:de:
                    b2:46:6a:b7:d6:b3:f6:de:3f:b5:8b:03:02:c6:df:
                    01:73:f2:4c:29:b3:45:5e:da:b4:7b:94:07:0b:ce:
                    b7:3f:e3:03:70:8f:94:ee:4e:16:b4:90:e1:ae:e0:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:14:06:3F:01:98:C7:CE:8E:28:47:35:A2:25:2B:DB:00:36:21:E0
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030353a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9005::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:98:cb:e4:6c:dc:6d:a4:81:ec:f5:08:00:39:41:1e:d8:bf:
         0c:a1:af:32:f1:47:bb:1e:cd:b5:93:f1:aa:49:19:7d:74:f5:
         70:af:2f:c4:1a:ef:68:07:7b:80:56:3a:a8:e6:8d:b7:18:90:
         eb:15:4a:c7:89:66:fa:62:31:94:03:1d:2c:8b:35:2f:08:38:
         dc:d9:f5:de:5d:e5:63:de:97:3b:25:f9:c8:3f:f0:a3:d4:bc:
         39:a7:8b:14:68:2e:e4:f8:63:b3:1d:51:ed:0a:5d:52:8f:c0:
         b1:de:22:c6:66:cf:f7:e6:a6:f0:85:7e:cf:80:f3:28:57:60:
         6a:aa:ad:eb:85:56:cf:1b:09:2a:26:83:2b:7d:a9:4a:d6:7a:
         8f:f4:d3:83:db:d7:4b:0a:b5:4d:8a:b6:06:fb:da:76:02:f5:
         bc:1f:43:53:27:0e:2e:92:7f:e8:0e:c3:bb:9f:b3:03:d5:5f:
         fd:fa:1c:b2:6e:2f:aa:92:01:fb:56:05:f6:1a:45:c9:32:2c:
         32:b8:78:2c:94:b1:4a:d6:3f:07:7d:e2:47:2f:c2:f9:6e:53:
         26:b2:e9:aa:67:b7:bd:15:ec:44:f1:f6:30:6a:79:f8:95:db:
         46:f6:48:d0:04:53:3a:48:ce:19:03:b2:89:db:0f:69:4a:da:
         23:b3:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:30 2024 by rpki-client on console-ams.rpki-client.org