Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          NZUBkhQt+eGXYD2+gyzEzOWtYMXlG5BwRmaGymN8lpY=
Subject key identifier:   A8:77:2B:86:35:03:2B:67:38:1E:1C:00:67:66:67:13:BA:41:2E:EB
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       233987AD64B3528DCC8A064333A36D06E783F61E
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 02:25:10 +0000
ROA not before:           Wed 27 Mar 2024 02:20:10 +0000
ROA not after:            Wed 26 Mar 2025 02:25:10 +0000
asID:                     38526
IP address blocks:        2405:3740:901b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:39:87:ad:64:b3:52:8d:cc:8a:06:43:33:a3:6d:06:e7:83:f6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 02:20:10 2024 GMT
            Not After : Mar 26 02:25:10 2025 GMT
        Subject: CN=A8772B8635032B67381E1C0067666713BA412EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6e:2a:e4:9b:8c:03:92:e1:a6:40:e0:b6:8b:
                    d8:f1:fb:98:78:17:1b:a5:3d:6b:d2:8d:38:d1:b8:
                    77:75:e3:d0:e9:1d:f4:bc:53:53:c4:bf:9a:72:a7:
                    09:b7:5e:da:36:a8:f3:00:51:d2:a7:d3:c0:b1:c1:
                    20:b9:e1:ec:17:1d:61:2e:7c:89:cb:3f:6e:76:0e:
                    de:4e:3d:c1:bd:d6:90:db:dd:ee:a9:02:c0:9b:81:
                    02:eb:c9:e6:77:e7:87:0f:2c:fd:ba:84:d8:00:33:
                    60:ee:b6:97:b4:56:31:15:f9:1b:84:05:80:06:73:
                    16:0e:5c:96:7b:ce:1b:d6:f1:4f:2e:f6:01:67:e6:
                    63:81:95:4d:69:42:4a:86:de:ac:57:75:89:b8:84:
                    aa:40:e3:6b:3f:ae:d1:93:c5:19:9b:5f:9f:41:81:
                    f7:d6:03:21:10:a3:43:60:46:7f:34:e3:8f:fa:26:
                    b2:04:31:bb:e4:f0:19:da:3d:e8:cf:8e:73:38:e0:
                    83:97:47:dd:c5:5b:8e:a3:de:25:f3:7d:9d:54:91:
                    97:d4:eb:12:b3:99:c4:43:b4:42:27:4b:64:2a:b0:
                    40:0e:b3:8b:9c:0e:e7:9c:6a:73:2d:f2:2f:6b:42:
                    69:1c:0b:17:49:0f:53:a5:4a:9a:8c:90:ba:6a:f3:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:77:2B:86:35:03:2B:67:38:1E:1C:00:67:66:67:13:BA:41:2E:EB
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031623a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:901b::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:db:91:34:7e:1f:2d:68:3b:dc:8b:37:15:98:14:b7:32:40:
         07:f9:ca:1a:25:6d:cf:14:b6:b2:36:ae:dc:50:55:d8:98:92:
         fd:b9:ec:36:1d:14:da:7b:49:29:83:91:43:d9:c4:5b:4e:69:
         a8:17:11:c8:04:75:95:73:5f:c3:20:bf:89:b9:f4:55:f5:89:
         53:99:93:8a:43:21:17:67:df:40:3c:9e:43:c2:6b:e1:a1:d8:
         73:4a:fc:f5:df:f6:73:11:91:d1:64:db:35:2c:01:6e:66:ca:
         c8:23:46:51:15:9d:4c:48:c2:75:69:21:7b:d4:4f:41:c2:1e:
         d3:74:df:57:3f:39:0a:79:ba:c1:67:90:bc:6e:27:d6:6c:dc:
         d9:01:c3:68:3d:93:65:12:12:da:e3:e2:b4:9e:0a:7a:c2:67:
         82:5c:c8:15:ad:bf:dd:77:4f:7a:00:7b:84:58:e7:5e:99:2b:
         02:95:9b:9a:1a:e7:0d:1e:8c:84:66:af:35:8d:3a:9d:0c:c3:
         0d:d1:5c:07:94:b9:7a:65:70:c9:eb:43:78:27:8b:54:4a:ea:
         ed:81:97:d6:10:82:84:d7:3e:e9:2e:4d:b0:37:5f:87:1e:5d:
         2f:62:23:23:ba:43:93:fe:30:1d:45:24:26:c2:c8:fb:67:55:
         8f:5f:c7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org