Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031313a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031313a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          qZwSFX8jXhYLprfsANlJaCLTfq/eH/7CknLxW2uqgiw=
Subject key identifier:   15:CA:46:42:96:9E:EC:92:B0:86:08:43:E5:19:6A:4D:05:D7:94:36
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       191111536CE2504E3708C7B3E115E4F401A983E2
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031313a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 01:58:38 +0000
ROA not before:           Wed 27 Mar 2024 01:53:38 +0000
ROA not after:            Wed 26 Mar 2025 01:58:38 +0000
asID:                     38526
IP address blocks:        2405:3740:9011::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:11:11:53:6c:e2:50:4e:37:08:c7:b3:e1:15:e4:f4:01:a9:83:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 01:53:38 2024 GMT
            Not After : Mar 26 01:58:38 2025 GMT
        Subject: CN=15CA4642969EEC92B0860843E5196A4D05D79436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:98:43:17:35:a3:00:2a:d1:7e:e6:e4:19:21:
                    3b:e8:8c:ae:dd:8a:dd:76:77:4b:10:4f:54:1d:59:
                    9b:cd:ae:0f:ea:d8:32:40:d2:33:1f:eb:28:54:c0:
                    1e:43:c6:3e:58:49:05:98:a4:34:97:29:e5:be:1e:
                    76:e3:12:ed:6c:b2:a0:aa:56:23:a4:32:60:6f:e4:
                    24:d2:5e:8a:de:d4:e3:5c:84:44:a7:77:41:60:b0:
                    d3:3d:86:1f:b2:f3:40:33:f4:b5:2d:45:2b:c0:01:
                    9f:c6:d1:8d:54:b0:00:76:03:ef:f9:4a:08:fd:3d:
                    fb:89:32:7c:24:e0:41:51:45:38:aa:67:ee:e7:08:
                    b9:0e:c1:75:a7:95:89:0f:70:3b:bd:a4:59:ae:4e:
                    24:04:2d:9b:70:56:06:34:97:0c:71:32:c3:1b:11:
                    ad:75:01:3a:d5:29:9b:21:4f:23:ac:ff:1b:fd:15:
                    25:82:b4:cb:ba:4b:cf:b5:0b:d5:ad:8c:76:e5:37:
                    80:fd:18:f9:d8:d2:f1:74:50:8e:37:6e:cd:1c:d2:
                    57:c1:2f:ff:cb:89:e7:8f:54:a2:e2:f4:99:bb:ad:
                    78:97:cc:d7:3c:9c:06:b3:e5:da:49:1e:f8:d7:c5:
                    06:d3:a6:1a:cf:e0:67:26:6d:2d:fd:4f:c9:54:94:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CA:46:42:96:9E:EC:92:B0:86:08:43:E5:19:6A:4D:05:D7:94:36
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031313a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9011::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:08:a5:31:18:6d:8a:33:52:55:d1:7c:44:51:68:3b:27:72:
         ed:a7:00:e6:57:ef:1e:8d:1b:15:9f:2d:30:f4:cc:79:b2:1a:
         5f:e8:5f:10:1c:e8:5f:9f:ef:3a:8c:56:8f:d9:06:28:84:f1:
         4e:a7:b2:a0:36:06:6c:30:58:4b:c5:f1:1c:6b:a5:ff:ba:be:
         d4:26:24:a8:9b:17:a8:48:85:40:55:c9:2c:42:01:29:0a:a5:
         8b:a2:58:ce:7c:2c:48:44:49:20:0b:fa:95:a0:9e:f2:05:b9:
         99:00:45:1d:be:07:74:1f:a7:ba:bf:7b:70:17:a0:7c:a9:95:
         3b:75:8a:db:3b:39:d6:c0:c2:eb:10:36:63:25:08:c4:9b:69:
         0f:2b:c7:c9:ae:56:21:db:4e:41:62:53:a6:9c:04:b0:1d:2b:
         0a:48:14:50:93:95:dc:ea:a6:7c:9a:ec:18:b5:60:56:f5:ad:
         1e:1e:da:ae:a7:e2:22:cc:b3:2f:1e:4f:84:17:2a:8e:c4:cf:
         d0:62:9d:d1:bd:58:11:e4:cb:1c:d6:dc:bb:62:3a:41:f2:61:
         e9:2e:3a:8d:f9:1c:fd:41:d0:61:7c:24:26:e7:e0:f1:a3:e8:
         31:6a:b9:74:dc:f6:b6:08:bb:68:30:fa:3e:af:5e:1b:77:08:
         5b:27:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org