Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031333a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031333a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          gDRqlVUl2KqJJRDD1ycJMnwr6is+7WD8zFMvZMi+rzE=
Subject key identifier:   B5:C2:6B:F2:9A:9F:BE:F5:73:60:A5:CB:22:67:71:90:AA:70:0F:71
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       7BE98CF01FF4081665DF1B512801FDA60B4D10C6
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031333a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 02:00:16 +0000
ROA not before:           Wed 27 Mar 2024 01:55:16 +0000
ROA not after:            Wed 26 Mar 2025 02:00:16 +0000
asID:                     38526
IP address blocks:        2405:3740:9013::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e9:8c:f0:1f:f4:08:16:65:df:1b:51:28:01:fd:a6:0b:4d:10:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 01:55:16 2024 GMT
            Not After : Mar 26 02:00:16 2025 GMT
        Subject: CN=B5C26BF29A9FBEF57360A5CB22677190AA700F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:ba:9a:a0:39:a2:ea:6a:ae:02:10:3c:cc:
                    a5:f8:61:ac:e4:7e:b2:f0:27:cf:b3:6b:17:f7:1c:
                    cd:63:13:b3:ad:4f:4a:c6:35:87:42:39:27:3d:5d:
                    08:42:c4:f8:2e:2d:57:de:de:11:58:80:dc:1b:4c:
                    2a:b2:e7:a4:89:37:9c:9c:c5:cd:47:9b:7a:b3:52:
                    3a:20:bc:43:90:c7:f8:6f:8c:16:11:6f:40:f9:cc:
                    b2:77:2f:49:02:9f:8d:47:d3:12:b6:15:5e:03:72:
                    d0:32:fd:7b:2a:18:6d:59:82:f4:3f:f9:d5:4e:9b:
                    c5:e8:e9:df:98:6e:08:ca:5d:32:d6:40:8e:94:d7:
                    22:e4:e2:b5:e2:25:fe:82:1e:f5:06:aa:c2:0b:e3:
                    6a:1a:a4:40:5f:5d:c1:50:d5:43:ee:54:5e:83:25:
                    4b:4a:69:58:75:fd:6f:3a:06:b9:5e:91:1f:fe:ee:
                    d1:2c:d4:7d:47:77:b0:bf:59:64:44:48:f4:6b:ce:
                    5c:1c:29:1d:63:f0:14:ca:c0:3d:17:5f:1f:be:db:
                    68:33:59:9f:e3:0a:4e:11:6c:fd:a8:4d:79:2b:67:
                    97:ac:8b:10:ff:c3:bc:3d:10:41:79:53:92:cf:76:
                    fc:81:f9:f7:31:1c:97:5f:6e:0b:74:19:7c:19:c9:
                    cf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:6B:F2:9A:9F:BE:F5:73:60:A5:CB:22:67:71:90:AA:70:0F:71
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031333a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9013::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:01:13:78:d3:5d:8c:11:50:8c:74:50:63:a2:1c:36:e8:a7:
         5f:65:61:a3:a3:34:80:82:f1:91:7c:78:b7:fc:b0:09:04:c3:
         81:da:9f:98:50:2e:c3:9e:16:7a:af:61:d5:4d:cf:e4:e2:82:
         62:f6:fe:93:c0:04:c2:5f:75:3a:82:77:f6:b3:e1:4f:9d:7e:
         da:48:5b:b2:c4:68:46:b1:ff:1c:55:35:71:ab:28:71:4d:74:
         f2:8f:a0:66:9e:4d:85:71:7a:f4:74:26:a9:60:09:79:8c:42:
         ba:a0:84:1d:b4:6a:3f:ea:34:12:ec:2c:38:71:35:dd:dc:e7:
         48:71:22:9c:58:e0:63:69:06:5e:41:83:9e:d7:90:0d:82:ec:
         66:f0:a5:1e:ae:65:0a:08:66:95:7d:d4:6c:7b:44:90:75:d2:
         c4:e4:46:c4:d4:3f:b7:dd:88:43:7c:09:6f:0c:52:8a:d9:b1:
         95:34:d3:d3:ac:4f:8a:af:dc:eb:49:90:f8:17:b5:a6:a7:04:
         b5:55:e7:7f:a7:e0:2d:7a:f1:6c:b1:f7:5d:91:51:78:9e:d1:
         38:d5:5f:f8:e3:53:1e:6d:31:45:a3:15:d4:6c:e6:15:ec:1a:
         27:0b:d6:d4:ed:6f:ca:9e:81:76:7f:83:3d:bc:48:0b:fb:73:
         e6:c5:4e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org