Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030613a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393030613a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          8DMS1TlnlJpHqxbMwcaCOFfE0PjdvaJHMYQ2wnDBi0A=
Subject key identifier:   56:8E:0B:BD:18:3C:58:11:66:DE:7A:83:72:AE:3E:5F:A4:96:94:AB
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       70F58D5172579BA8B4888750BD95A27FD5F37775
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030613a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 01:55:31 +0000
ROA not before:           Wed 27 Mar 2024 01:50:31 +0000
ROA not after:            Wed 26 Mar 2025 01:55:31 +0000
asID:                     38526
IP address blocks:        2405:3740:900a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f5:8d:51:72:57:9b:a8:b4:88:87:50:bd:95:a2:7f:d5:f3:77:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 01:50:31 2024 GMT
            Not After : Mar 26 01:55:31 2025 GMT
        Subject: CN=568E0BBD183C581166DE7A8372AE3E5FA49694AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:08:cb:c1:f7:b6:bc:f4:5b:12:da:94:6b:05:
                    cd:99:f2:f1:ae:16:d7:4f:fc:11:5d:34:f9:a1:8f:
                    f6:c4:be:af:7b:6b:b2:c2:a3:43:f4:09:bc:5c:68:
                    0a:4f:79:dc:35:09:cf:7b:92:5e:98:d5:37:e2:84:
                    6a:97:7c:d1:18:72:8a:f8:bc:ad:9e:ad:15:a0:aa:
                    18:35:b8:97:27:f4:f5:23:c2:a2:2a:f8:4b:50:c5:
                    d8:f9:20:ad:62:76:46:7f:74:20:bb:21:2c:f6:c5:
                    c8:7b:db:c4:fa:f0:6c:1c:c8:cb:6d:37:e6:f9:f4:
                    94:3a:10:fb:b6:63:4c:86:7e:72:23:bc:09:3f:a4:
                    89:86:92:6b:09:69:14:1a:e0:26:7c:00:95:44:8a:
                    35:5c:46:d2:c5:2b:60:01:f6:a4:ae:df:af:12:da:
                    6c:76:ff:84:ee:8f:a8:c2:a5:d0:07:13:13:03:63:
                    2f:b4:fc:26:8b:6d:d5:77:d6:5b:15:17:eb:ce:0f:
                    78:8b:6e:b3:10:19:dd:45:85:b6:4d:4c:13:1b:92:
                    fd:53:03:fb:c6:74:58:6e:be:88:38:7d:20:96:70:
                    4e:80:80:64:ca:97:db:91:53:75:d0:92:b8:c5:2b:
                    9b:0a:44:90:3b:5c:90:f2:ad:74:37:30:5f:54:fe:
                    eb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8E:0B:BD:18:3C:58:11:66:DE:7A:83:72:AE:3E:5F:A4:96:94:AB
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393030613a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:900a::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:93:07:17:b3:4e:32:76:98:fe:8f:84:a1:a4:eb:d8:9e:a7:
         3e:8d:2c:6e:20:df:e5:e6:61:b6:17:6e:a5:92:0c:3f:08:4d:
         bf:e5:0b:c6:22:e5:f7:3b:00:cd:c4:8e:3b:7a:0e:04:79:61:
         23:15:d4:14:6b:5c:17:f5:12:ca:db:cf:a7:f4:d9:c3:ee:65:
         30:2f:d1:9d:72:ed:fc:d1:48:d2:86:67:18:c8:20:42:07:93:
         50:74:38:23:c5:d2:d0:83:c7:77:69:73:00:c7:5a:e3:ea:6b:
         16:49:a4:f8:01:33:60:fc:7f:4f:ee:8e:6a:8e:8b:1d:f8:fe:
         e2:22:d3:e3:48:6d:2c:f5:7c:b0:b7:ca:e0:36:b3:33:91:67:
         93:c9:94:8c:ee:c2:5b:4f:6b:68:19:5c:03:9a:96:71:45:31:
         26:d1:15:f3:2f:06:5a:f7:3a:15:48:2e:34:f1:09:b2:53:c5:
         6c:53:d1:8c:a2:31:db:63:3a:26:38:ba:37:52:da:00:51:90:
         ea:d3:35:bd:ba:ce:f5:f2:47:77:7c:12:e4:2c:fb:f9:85:c8:
         3e:7b:bb:b6:f6:bd:26:7e:97:71:66:18:56:bd:81:21:79:ac:
         3d:37:26:39:5d:9d:97:4e:44:d5:6e:b6:0f:86:c2:8d:76:1a:
         b7:ff:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org