Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          39PSf1h5qRacmkCvqWYAEMYHC/xzM4e1J+fDK58Wj/o=
Subject key identifier:   B8:A1:EF:92:A7:73:6B:AA:75:B1:61:45:43:A2:E2:B5:D1:CD:ED:2C
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       2E196B9F5A0D941F7C13BF17675B60DB51C09A8F
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 02:26:25 +0000
ROA not before:           Wed 27 Mar 2024 02:21:25 +0000
ROA not after:            Wed 26 Mar 2025 02:26:25 +0000
asID:                     38526
IP address blocks:        2405:3740:901e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:19:6b:9f:5a:0d:94:1f:7c:13:bf:17:67:5b:60:db:51:c0:9a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 02:21:25 2024 GMT
            Not After : Mar 26 02:26:25 2025 GMT
        Subject: CN=B8A1EF92A7736BAA75B1614543A2E2B5D1CDED2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:6f:87:75:b9:e5:02:36:13:ca:a0:72:53:
                    ab:33:10:b2:40:6f:b7:cd:93:b6:87:e8:3a:c6:1c:
                    0f:8e:c8:67:36:99:a7:33:8d:63:00:7c:2e:e1:c6:
                    04:7c:e4:bf:b3:54:4c:d1:7f:6c:14:68:6a:a3:19:
                    73:0c:d1:4c:f0:e8:97:8b:f9:aa:33:36:fd:0a:4a:
                    b7:64:38:0c:92:7b:57:f3:bd:95:fb:7d:01:98:e9:
                    9f:a6:34:48:7b:56:57:07:29:ad:02:98:15:7f:50:
                    c2:70:cd:82:93:d1:be:74:01:ba:64:03:fc:14:a1:
                    c2:88:e0:af:9f:44:59:e9:b8:5b:90:34:a5:53:7c:
                    c8:85:ab:7f:58:0d:5d:e3:fc:33:eb:a7:9b:cb:c5:
                    a9:39:c4:81:66:3f:29:c4:15:31:9d:82:8f:e1:c9:
                    a4:1c:74:48:92:4f:27:26:cd:9f:f1:2f:c9:07:f3:
                    2c:8c:5d:74:7b:98:ef:b3:83:3e:2a:2e:54:35:46:
                    2c:e9:0a:a3:2a:2c:99:e0:36:ab:8e:be:f3:d1:b2:
                    eb:f7:46:06:64:85:c7:78:fe:ba:00:f3:6f:db:c4:
                    72:cf:b7:1e:30:19:eb:37:a4:7a:cc:38:89:e1:0e:
                    24:21:84:6c:35:e7:3a:ad:2d:79:02:dd:0d:88:27:
                    61:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A1:EF:92:A7:73:6B:AA:75:B1:61:45:43:A2:E2:B5:D1:CD:ED:2C
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031653a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:901e::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:1d:90:e3:e3:df:55:1c:41:d8:c2:f1:46:73:97:98:5d:ee:
         bd:ee:a5:96:bd:64:96:a2:d1:7d:a9:29:44:cf:7c:8f:1b:32:
         1d:84:9f:7a:f2:f2:5a:4e:15:41:7f:b1:f0:49:6a:ef:b9:46:
         c5:0b:12:2c:b1:83:fc:35:39:96:29:e9:8d:c3:dc:69:a1:2b:
         7d:04:d5:5c:83:fd:5b:b3:e9:0c:24:d3:fc:53:7a:3a:ec:60:
         24:33:b9:b5:69:89:ce:7f:3e:7d:05:c2:80:bf:0b:c0:fb:8a:
         20:1f:36:0d:65:0e:2b:c1:44:ac:60:6c:04:c3:30:f3:96:59:
         2b:6b:cc:ab:49:41:3f:cf:09:53:c3:3c:4a:a0:1a:45:05:a4:
         47:cf:5a:55:08:c3:f2:d3:97:08:df:e4:ca:3d:c3:53:bc:ec:
         9d:f6:ab:37:15:1e:68:19:e7:a1:25:c1:40:30:ef:fa:95:9a:
         f9:8b:10:e1:c0:c1:bc:e0:37:d1:f0:5c:15:5d:41:f2:74:20:
         08:16:53:93:41:f0:cf:85:70:9d:eb:f8:e7:6a:d8:33:33:e7:
         4f:f5:82:9e:5e:c7:57:22:7a:ab:f2:e5:2c:0b:12:59:d7:86:
         6d:70:8d:78:4d:17:11:d6:bf:5b:d5:9e:3a:56:39:80:c6:43:
         d3:7a:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org