Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030383a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393030383a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          EtXLUNQ0dAUXDq4aCoeB54VCl96xUrWi9cXJYfCCgU4=
Subject key identifier:   BA:B2:19:CA:A2:38:F4:0E:1E:E0:46:B3:19:65:A5:C9:81:0D:B6:8F
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       198625EBF0CD921EC214403C9FD9971E6D6F4601
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030383a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 01:54:21 +0000
ROA not before:           Wed 27 Mar 2024 01:49:21 +0000
ROA not after:            Wed 26 Mar 2025 01:54:21 +0000
asID:                     38526
IP address blocks:        2405:3740:9008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:86:25:eb:f0:cd:92:1e:c2:14:40:3c:9f:d9:97:1e:6d:6f:46:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 01:49:21 2024 GMT
            Not After : Mar 26 01:54:21 2025 GMT
        Subject: CN=BAB219CAA238F40E1EE046B31965A5C9810DB68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:60:b4:c5:f8:bf:d2:e5:c5:6b:d8:18:20:
                    53:30:1f:f6:19:fe:ca:78:9b:ad:7c:0c:d4:46:bf:
                    c9:6d:ec:8d:92:90:c9:34:0b:67:fd:3b:ed:29:29:
                    20:b0:69:b2:49:3c:81:b0:1d:ac:8a:4b:2c:57:18:
                    4f:7e:f1:11:e0:2f:58:81:6a:b7:d4:55:f0:66:8e:
                    6d:2e:72:e5:bd:79:30:78:05:16:a9:a5:43:1c:d3:
                    31:95:f7:55:4c:52:0a:70:d1:e7:09:9e:c0:22:a5:
                    df:ff:d6:64:76:bc:b1:c4:9a:df:1b:1f:a5:e7:bc:
                    a2:6b:f4:fe:9f:50:97:da:c7:8a:7c:37:b0:14:94:
                    64:44:e4:f1:88:5b:76:a9:0e:45:a2:34:4e:b3:45:
                    8b:96:7c:69:98:88:58:d3:e0:51:a2:33:ef:0d:df:
                    08:d6:8c:67:b1:a9:20:31:4c:71:d9:85:08:9e:bf:
                    7b:85:ca:e5:c2:67:ff:c8:f0:2a:65:98:b5:8c:35:
                    41:38:a8:39:13:ec:b7:9f:65:d8:be:7b:91:ca:54:
                    74:67:1c:62:49:a4:de:ff:a7:df:76:c2:72:d4:b7:
                    f6:11:52:a7:08:7f:79:0f:da:e3:18:92:d8:24:c6:
                    f7:4b:7a:d2:87:0d:93:5d:d2:95:f5:f8:f8:75:9f:
                    c8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B2:19:CA:A2:38:F4:0E:1E:E0:46:B3:19:65:A5:C9:81:0D:B6:8F
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030383a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9008::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:42:69:ff:bf:b4:a8:e4:4b:9d:02:85:c1:5c:55:56:d9:04:
         f9:44:1c:b3:fb:12:b5:88:d3:32:15:00:18:05:8a:cc:78:cc:
         69:79:bc:b0:57:18:a8:43:ac:5f:e7:e8:05:17:ec:a4:e0:85:
         04:2b:6c:5c:64:da:95:c1:52:17:35:ce:cf:f7:8b:0b:ff:c7:
         f4:b5:f1:99:32:52:a4:79:b3:25:da:e7:7f:c3:73:c3:49:a5:
         36:ca:17:f6:c0:23:a4:9b:74:6b:05:79:98:30:b1:d6:a7:2e:
         04:41:97:8e:8c:04:f7:30:f0:54:4f:34:83:de:2d:1a:90:db:
         94:57:ae:52:2d:9a:37:4d:50:4f:7c:18:2a:d1:cf:22:d9:b8:
         56:69:88:78:5a:1f:52:6f:f0:ba:46:9f:3c:b6:b6:7f:8d:b2:
         d1:d1:f9:69:1a:93:f7:8a:72:af:5b:08:58:fe:ad:50:ec:60:
         84:85:e0:7a:9b:62:2a:96:54:22:ae:2a:c9:39:23:9a:a5:4a:
         4b:02:30:f6:d2:b1:f8:de:d9:0b:2c:de:b9:10:b0:ca:6b:6d:
         87:04:39:3b:8d:9b:a6:1b:a3:58:cb:6c:e1:5c:c3:8c:65:09:
         ea:ba:3a:6a:d6:5e:6b:a3:1a:62:4a:53:14:10:14:13:5f:b3:
         86:dc:6b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org