Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030373a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393030373a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          DH6pmRvt4j/3JRqx9sM59roSlMzh7YO4TrjS7y9BlxU=
Subject key identifier:   B7:55:D9:0D:3E:C1:44:8A:C2:5E:FE:E8:C9:C1:E4:AE:3C:FA:A1:B5
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       31CDA908E19D53596050A59E965457F82A91A1D6
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030373a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 01:54:12 +0000
ROA not before:           Wed 27 Mar 2024 01:49:12 +0000
ROA not after:            Wed 26 Mar 2025 01:54:12 +0000
asID:                     38526
IP address blocks:        2405:3740:9007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cd:a9:08:e1:9d:53:59:60:50:a5:9e:96:54:57:f8:2a:91:a1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 01:49:12 2024 GMT
            Not After : Mar 26 01:54:12 2025 GMT
        Subject: CN=B755D90D3EC1448AC25EFEE8C9C1E4AE3CFAA1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:67:9b:8e:1d:a4:89:c0:81:70:44:95:fd:e8:
                    14:31:76:e8:3d:6e:bd:13:b7:90:72:f9:14:9b:c8:
                    af:80:ff:c8:1e:e4:9e:3c:d3:51:f3:ac:4d:6f:5c:
                    3c:96:44:69:6e:b2:a7:e1:7b:55:96:df:1d:0c:6c:
                    5f:aa:e8:2e:1e:e9:66:12:59:c1:2d:26:78:71:a1:
                    d1:cb:6c:cc:33:f8:f2:6c:c2:61:b6:45:8e:93:1d:
                    dc:5c:c6:e0:4a:7d:60:13:54:4f:8d:5b:aa:a1:f3:
                    4a:76:0b:9b:e5:00:f7:f6:89:96:93:e0:05:f7:32:
                    21:f1:a1:d5:cf:b1:0d:d2:8d:69:d4:5f:97:fc:ab:
                    b6:ba:85:b1:99:9b:1c:fa:e8:7f:8f:3b:93:7d:0a:
                    9c:cf:d4:14:d3:b6:8e:96:7b:bc:a1:c8:0c:55:46:
                    19:76:49:c7:dc:76:5b:4b:ba:e0:8d:33:73:b7:4a:
                    b6:b5:b7:ce:f4:d5:79:a4:79:17:16:1d:0a:ba:5b:
                    de:40:48:00:05:b4:df:eb:52:ad:22:c6:b9:1d:d2:
                    57:de:64:b6:75:cb:1a:4b:47:a7:c1:70:10:82:1d:
                    d6:bc:8b:c7:4f:6a:b4:0b:f4:f5:9d:be:50:85:df:
                    14:6c:8f:a6:03:89:b7:c6:65:9e:52:cc:67:0e:e8:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:55:D9:0D:3E:C1:44:8A:C2:5E:FE:E8:C9:C1:E4:AE:3C:FA:A1:B5
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030373a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9007::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:43:af:0e:43:8a:3c:e1:49:6f:21:2f:f0:90:94:fb:f4:e9:
         d4:ac:d4:bc:08:ca:5d:2c:d8:08:eb:bd:24:a3:07:43:82:45:
         8e:1a:ae:c1:b2:9f:4a:72:27:02:2e:5e:f5:04:c1:27:72:9b:
         64:4c:85:62:3d:cc:8e:3d:54:93:33:5c:5f:aa:b8:4a:ef:e0:
         6c:35:64:7e:43:b7:59:60:e7:ed:68:bd:70:91:05:bb:50:21:
         f7:26:bc:64:e8:79:30:9f:9c:6b:83:1a:d2:ad:44:85:2b:f6:
         12:21:98:56:a2:4b:9a:7d:2d:f3:01:c6:38:28:7f:32:fb:2d:
         96:d2:07:c1:3c:3f:84:1a:a0:2c:aa:02:3c:bf:e9:a4:47:25:
         cd:24:73:53:26:79:de:3a:08:37:5c:40:2c:56:cc:a2:52:b0:
         f5:b8:3a:25:34:ce:48:17:05:db:d8:3a:8e:79:2c:ae:9c:0d:
         53:3f:86:05:58:f6:69:7a:91:a1:ce:2c:37:fc:48:a8:e1:64:
         eb:e7:1a:c4:03:a0:00:88:cc:4e:ad:71:09:39:b7:1f:bf:2e:
         86:b2:89:68:6a:03:a1:fc:32:1b:b6:d9:7b:5e:06:6b:0e:ad:
         15:74:69:f2:dc:ee:63:5c:e0:dc:36:82:a3:54:4b:a5:93:46:
         f0:b3:5b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org