Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031373a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031373a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          Vpnp6bkxYteGCO6kzSI/wGEZtKA6MK6pP7R+Rl0Lcd4=
Subject key identifier:   15:AF:38:35:24:C5:F7:3C:8F:DB:8E:04:61:79:F6:48:49:EB:61:6B
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       6A23BC07FB563F8CD5683F0906BCD84BE07318E2
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031373a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 02:23:35 +0000
ROA not before:           Wed 27 Mar 2024 02:18:35 +0000
ROA not after:            Wed 26 Mar 2025 02:23:35 +0000
asID:                     38526
IP address blocks:        2405:3740:9017::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:23:bc:07:fb:56:3f:8c:d5:68:3f:09:06:bc:d8:4b:e0:73:18:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 02:18:35 2024 GMT
            Not After : Mar 26 02:23:35 2025 GMT
        Subject: CN=15AF383524C5F73C8FDB8E046179F64849EB616B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:d5:d8:96:a9:6b:93:d2:55:99:3c:bd:c6:
                    fb:50:e7:50:d6:51:bb:d8:ef:5b:9a:4e:cd:de:4e:
                    fe:75:bc:ef:e6:bf:3d:3f:1e:2d:44:ee:c0:b9:b7:
                    67:32:5b:6b:40:2b:22:ab:db:a6:05:f2:b3:62:6c:
                    26:ef:22:62:18:a5:ef:04:61:94:94:f6:b9:78:c1:
                    01:83:26:2e:39:55:d0:69:e9:db:09:11:eb:68:b9:
                    1d:3f:41:8b:22:e2:51:34:ce:06:e7:3a:a1:14:a3:
                    8a:38:b5:4d:ab:2b:bf:27:15:0c:73:85:a6:4f:17:
                    88:03:25:8c:84:07:a7:e9:a1:af:2e:5b:95:4c:dd:
                    1e:77:79:95:de:da:d1:23:03:68:d6:ee:41:d2:f6:
                    66:01:6b:a1:6f:51:00:19:93:54:57:a9:d2:37:c5:
                    72:4c:aa:13:ce:21:d5:e7:de:76:49:fc:97:8c:0f:
                    92:be:4d:d8:32:d4:25:48:8e:ae:b9:ad:07:91:f2:
                    a5:e8:5b:2a:da:05:1a:39:62:76:7f:6f:05:00:ed:
                    ff:4e:3c:e9:48:6e:a4:2d:cc:d5:20:7d:04:7f:7f:
                    5d:30:40:bc:33:7c:86:6d:b0:f8:a4:e5:c0:eb:fc:
                    4c:2c:21:c0:28:75:ad:0a:2d:cd:14:37:8e:de:53:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AF:38:35:24:C5:F7:3C:8F:DB:8E:04:61:79:F6:48:49:EB:61:6B
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031373a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:9017::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:7e:f1:74:f7:ba:2c:df:46:91:02:bc:ad:49:cc:b9:c4:e9:
         cd:f1:58:58:f9:08:8e:d9:c5:e2:e5:12:1d:cb:6a:74:c4:58:
         76:d1:b2:7c:a8:9f:65:e4:5a:46:ee:a2:45:d8:f9:76:6f:25:
         72:7e:5a:48:74:31:0e:57:01:45:ec:03:ea:57:6d:c8:fe:51:
         1b:61:bd:a5:dd:a1:d1:86:f6:3f:1a:9c:38:db:c1:62:ef:47:
         86:b3:44:4a:82:5b:22:0a:53:06:6d:0f:ab:87:ca:38:12:61:
         e9:90:a2:fc:02:a2:a3:00:43:16:38:ef:91:db:b9:a1:e3:42:
         0b:f6:55:7e:9d:0b:cd:56:39:d0:f4:eb:e3:d2:37:87:35:29:
         54:6e:87:6a:05:da:c5:ee:14:a5:7a:05:c4:ca:2f:de:f5:4e:
         11:6c:d3:19:41:59:56:3d:89:1e:e6:d9:51:aa:f4:f1:af:70:
         6f:6e:29:51:a6:7b:d1:9a:46:8e:ab:13:08:92:85:a8:db:7a:
         e1:09:82:2d:3e:06:2d:91:85:df:d0:2e:16:c9:e1:d0:64:e1:
         19:8b:92:07:44:29:dd:da:c4:4b:1e:59:f4:f4:09:b1:87:47:
         20:6a:9b:15:75:ec:f4:c1:88:3c:f4:29:a4:ff:de:69:38:b5:
         ba:15:1f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org