Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030363a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393030363a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          UO1PSe9qxW55AuMP8iWXEV4RktIj8ZR6B2rjsnkT6dY=
Subject key identifier:   34:51:6E:F0:8F:91:D7:45:A0:E4:E8:87:1B:C1:8D:49:E9:82:87:7F
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       697A7F93532EA4522B768C5AFD922770A40D7C66
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030363a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 01:36:20 +0000
ROA not before:           Wed 27 Mar 2024 01:31:20 +0000
ROA not after:            Wed 26 Mar 2025 01:36:20 +0000
asID:                     38526
IP address blocks:        2405:3740:9006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7a:7f:93:53:2e:a4:52:2b:76:8c:5a:fd:92:27:70:a4:0d:7c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 01:31:20 2024 GMT
            Not After : Mar 26 01:36:20 2025 GMT
        Subject: CN=34516EF08F91D745A0E4E8871BC18D49E982877F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:78:0c:de:70:cd:8f:59:f6:a2:97:70:b2:
                    78:4d:8c:ff:87:62:bf:7e:82:07:2d:be:58:2a:e4:
                    fb:9d:e1:59:02:61:65:6d:0a:c5:8c:1f:90:91:32:
                    d2:6c:50:1a:76:a6:8d:af:c1:af:7a:1a:59:25:47:
                    2c:1b:7a:65:b9:98:c8:de:85:a9:83:32:ad:86:01:
                    20:f7:2e:70:a9:1b:66:0e:9d:75:15:1e:72:1f:b1:
                    56:85:ce:ff:a0:d1:ab:f2:d2:bd:24:80:12:ab:fb:
                    f5:9e:0c:0f:12:b8:c6:69:02:c9:73:98:41:ee:42:
                    3a:1a:20:1a:be:5b:42:18:0c:f6:86:46:f2:cb:6b:
                    75:0b:33:8b:74:6a:86:1f:16:04:04:36:a0:92:0c:
                    b9:79:d4:74:dc:7a:83:b0:44:61:ba:50:f8:de:73:
                    a1:2f:45:86:95:4b:d1:52:45:b0:18:34:ef:77:0d:
                    f3:7b:cd:47:af:5d:ae:c8:72:0e:5e:c5:ea:f2:6c:
                    2c:cb:cc:3e:d4:7e:eb:7a:98:39:99:2d:5a:dd:d8:
                    85:81:30:dc:0d:41:67:66:ba:d1:77:44:b8:49:dc:
                    0f:b6:59:04:33:51:94:8f:ec:f2:da:dd:8b:ec:13:
                    5f:ef:36:6b:29:0a:02:41:d5:eb:70:1a:0e:c0:e1:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:51:6E:F0:8F:91:D7:45:A0:E4:E8:87:1B:C1:8D:49:E9:82:87:7F
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030363a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9006::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:20:a7:e9:1c:d6:61:56:b7:19:94:aa:4f:fb:3e:67:73:b9:
         1d:a4:0d:41:e5:82:ec:8f:92:82:cb:77:d8:2f:71:df:95:0b:
         c6:33:fe:e4:ac:7f:6b:04:8a:a6:94:c7:0d:f3:17:2a:32:d8:
         8e:ec:ef:f1:f2:2d:95:ab:d3:31:ec:a1:ad:de:56:95:24:1b:
         d0:85:6b:8d:1c:f7:c8:98:35:a0:53:a4:d5:10:70:58:70:89:
         49:df:55:89:fb:13:5a:52:a3:50:cb:36:f0:52:8d:16:c9:d3:
         ce:79:a7:22:0f:29:53:8e:9e:1b:56:4c:60:07:70:75:72:f9:
         8e:28:86:20:57:f7:aa:d7:74:7c:b0:c1:9d:70:b9:d1:01:70:
         3e:57:f6:d4:a5:03:25:f7:2a:bd:d7:a2:aa:8b:a1:a4:48:1b:
         1f:d5:c6:ed:b6:b0:16:32:c1:f6:94:7b:a5:e6:31:3e:0e:44:
         ba:88:17:ae:2e:7b:63:43:6c:17:a6:87:33:e9:01:3d:15:5a:
         b8:fe:39:e5:22:a6:d6:e4:c4:70:12:01:9a:38:61:c3:cb:c5:
         2d:46:01:e0:7a:f5:85:a3:52:05:3f:4a:20:43:88:ca:52:36:
         d3:30:96:db:ce:83:db:83:8a:e2:08:3b:39:e7:a2:02:1d:7f:
         63:c9:ed:78
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUaXp/k1MupFIrdoxa/ZIncKQNfGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx
MzIyNTIwRDAeFw0yNDAzMjcwMTMxMjBaFw0yNTAzMjYwMTM2MjBaMDMxMTAvBgNV
BAMTKDM0NTE2RUYwOEY5MUQ3NDVBMEU0RTg4NzFCQzE4RDQ5RTk4Mjg3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22ngM3nDNj1n2opdwsnhNjP+H
Yr9+ggctvlgq5Pud4VkCYWVtCsWMH5CRMtJsUBp2po2vwa96GlklRywbemW5mMje
hamDMq2GASD3LnCpG2YOnXUVHnIfsVaFzv+g0avy0r0kgBKr+/WeDA8SuMZpAslz
mEHuQjoaIBq+W0IYDPaGRvLLa3ULM4t0aoYfFgQENqCSDLl51HTceoOwRGG6UPje
c6EvRYaVS9FSRbAYNO93DfN7zUevXa7Icg5exerybCzLzD7Ufut6mDmZLVrd2IWB
MNwNQWdmutF3RLhJ3A+2WQQzUZSP7PLa3YvsE1/vNmspCgJB1etwGg7A4fMlAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUNFFu8I+R10Wg5OiHG8GNSemCh38wHwYDVR0j
BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy
MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy
NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzkzMDMwMzYz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3
QJAGMA0GCSqGSIb3DQEBCwUAA4IBAQCLIKfpHNZhVrcZlKpP+z5nc7kdpA1B5YLs
j5KCy3fYL3HflQvGM/7krH9rBIqmlMcN8xcqMtiO7O/x8i2Vq9Mx7KGt3laVJBvQ
hWuNHPfImDWgU6TVEHBYcIlJ31WJ+xNaUqNQyzbwUo0WydPOeaciDylTjp4bVkxg
B3B1cvmOKIYgV/eq13R8sMGdcLnRAXA+V/bUpQMl9yq916Kqi6GkSBsf1cbttrAW
MsH2lHul5jE+DkS6iBeuLntjQ2wXpocz6QE9FVq4/jnlIqbW5MRwEgGaOGHDy8Ut
RgHgevWFo1IFP0ogQ4jKUjbTMJbbzoPbg4riCDs556ICHX9jye14
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org