Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031353a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031353a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          5IO0V6G44V1onoZHjneQdvqjIS/GKmK7RuJOw5QPZOU=
Subject key identifier:   C5:A2:D7:E0:48:76:88:4C:BF:51:9D:C7:E6:6B:1E:12:B1:C4:B2:D3
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       5DACC3F9F8A315CA22D79442E65583648E3D59B8
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031353a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 02:23:02 +0000
ROA not before:           Wed 27 Mar 2024 02:18:02 +0000
ROA not after:            Wed 26 Mar 2025 02:23:02 +0000
asID:                     38526
IP address blocks:        2405:3740:9015::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ac:c3:f9:f8:a3:15:ca:22:d7:94:42:e6:55:83:64:8e:3d:59:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 02:18:02 2024 GMT
            Not After : Mar 26 02:23:02 2025 GMT
        Subject: CN=C5A2D7E04876884CBF519DC7E66B1E12B1C4B2D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:53:e7:5d:21:80:eb:52:d9:4e:4c:a9:a3:
                    09:a0:f7:27:b4:0b:fc:38:60:7b:71:ae:aa:a9:15:
                    3b:dd:db:71:e4:fb:42:1b:e8:25:ac:e3:55:02:18:
                    43:3e:63:60:dd:f5:4b:aa:d3:ec:a7:19:7f:ed:71:
                    82:9e:45:6f:7e:2a:dd:5e:8f:43:b2:e1:d6:d8:0f:
                    a3:f9:e7:f2:bc:ff:2a:0c:f3:99:3d:87:f5:67:02:
                    87:01:3a:25:39:fa:7c:38:92:9a:bf:45:ae:0f:a6:
                    b8:53:c6:69:05:be:2d:e9:e9:bf:f8:17:04:85:ad:
                    e4:e8:19:81:de:f2:63:c6:ca:09:30:86:41:d3:89:
                    03:90:89:4a:c3:c8:ab:18:66:95:5e:89:5b:bb:1f:
                    7a:a2:26:92:b6:92:f4:e7:bf:6b:b1:6a:a6:38:ac:
                    3a:72:94:6b:31:3d:a6:58:5b:1d:bc:e7:62:68:27:
                    ca:ea:d7:22:67:5f:76:95:45:8c:b5:d6:50:11:e4:
                    fa:84:11:91:bb:a7:dd:92:44:99:77:c8:bc:18:31:
                    35:6f:12:7b:20:4e:f1:15:67:13:bc:31:d7:20:93:
                    43:ad:cd:e4:6a:63:b1:22:4b:a0:6a:ab:20:cc:e0:
                    06:d1:c0:3f:6d:bc:30:52:b9:a2:9a:aa:bb:6b:74:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A2:D7:E0:48:76:88:4C:BF:51:9D:C7:E6:6B:1E:12:B1:C4:B2:D3
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031353a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9015::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:7d:66:f9:11:43:76:64:b1:10:ca:f1:4a:d3:37:40:fc:20:
         bf:91:4d:a9:64:7a:24:7b:de:df:40:10:ee:2b:6e:35:b2:f2:
         4e:65:c5:3c:63:4c:fe:87:2e:0f:69:a1:4c:56:1a:5d:7e:56:
         0d:52:6b:5b:01:cf:44:2f:e2:c5:a6:b6:82:84:f9:57:1a:fa:
         fe:29:d3:ba:2f:7a:c3:f0:77:d6:28:0d:12:37:ff:e1:e1:80:
         45:a7:c6:48:16:35:ce:63:eb:0a:fe:32:d3:74:8e:0c:43:43:
         8f:6d:3d:e4:e2:71:e8:84:ca:ed:2e:0c:22:fb:44:8b:df:b9:
         98:cd:2c:55:e8:d6:90:0b:98:34:32:bc:c1:41:95:27:95:30:
         fc:ce:d0:8f:c0:45:83:26:a4:d5:04:e3:d1:00:ea:ac:57:6b:
         86:23:08:c6:a7:ad:73:55:83:9d:cc:70:c5:93:a3:3e:91:af:
         22:72:d3:40:02:2b:3b:00:30:b6:c4:8b:0d:ff:c6:db:15:5e:
         ee:14:3f:f5:4a:ea:ea:c9:1e:f2:4f:45:fb:df:33:ac:46:18:
         21:a8:16:c2:fa:b7:eb:1e:a7:81:4e:b1:de:70:f7:47:cd:d6:
         1c:47:ee:7e:1d:b9:bb:ec:40:8b:99:2d:26:62:7f:fc:90:68:
         06:4b:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org