Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa
File:                     323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier:          sQraATDZnie6kxbN4G4shLZkX5cS5EM+KKX+QTx1e10=
Subject key identifier:   47:D3:03:79:74:CD:A1:5A:E3:A5:DF:E6:1E:54:8E:2C:F7:94:74:FF
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       4AB3ADA4E1579776C2A46ACC77B4F56B09AF493E
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa
Signing time:             Wed 27 Mar 2024 02:26:40 +0000
ROA not before:           Wed 27 Mar 2024 02:21:40 +0000
ROA not after:            Wed 26 Mar 2025 02:26:40 +0000
asID:                     38526
IP address blocks:        2405:3740:901f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b3:ad:a4:e1:57:97:76:c2:a4:6a:cc:77:b4:f5:6b:09:af:49:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Mar 27 02:21:40 2024 GMT
            Not After : Mar 26 02:26:40 2025 GMT
        Subject: CN=47D3037974CDA15AE3A5DFE61E548E2CF79474FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:41:3c:69:1f:59:e4:0b:86:57:50:43:76:
                    2e:b4:d7:27:0c:9e:e4:98:aa:f2:78:64:68:64:3f:
                    b9:40:a0:33:91:71:a8:e1:d9:a1:ce:68:97:04:4b:
                    52:1d:6b:d6:ce:a4:45:18:57:58:76:81:3b:4e:e5:
                    f1:79:32:f6:e8:34:e4:0b:9b:95:1b:3d:09:d1:32:
                    36:3c:e0:9b:6f:91:e3:e7:d4:38:54:e9:41:f5:0d:
                    37:7d:f6:24:67:c2:35:e5:1c:4e:12:53:c8:c8:16:
                    e8:16:a9:f3:80:14:29:98:f8:9e:7d:a5:f6:20:50:
                    72:5c:9d:fe:f2:e8:6c:3c:9b:81:06:75:91:5c:b5:
                    71:56:62:cf:c5:bf:36:be:e4:5e:e4:a5:a3:f8:96:
                    4c:65:81:04:39:66:d2:fd:47:7e:a0:12:6a:42:da:
                    ce:e9:9f:a6:3a:03:54:a7:39:ad:8c:ba:3e:55:c2:
                    bd:53:43:ca:ce:69:ed:0c:ef:a3:e4:98:26:4d:06:
                    9a:7f:67:e3:a9:60:1b:e7:13:78:b6:9d:da:27:43:
                    be:06:bf:c2:f0:3b:e2:0d:7d:38:a5:37:e9:76:7c:
                    49:68:80:63:74:28:12:52:26:22:4c:b3:14:60:96:
                    3b:a4:db:f2:e3:58:3c:95:22:dd:ac:c9:d6:b0:02:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D3:03:79:74:CD:A1:5A:E3:A5:DF:E6:1E:54:8E:2C:F7:94:74:FF
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a393031663a3a2f34382d3438203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740:901f::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:a8:56:2b:90:f5:c1:96:c0:b0:2d:56:9a:05:b2:ab:ee:11:
         dd:3e:d3:3b:ac:06:f1:98:47:fd:c1:c5:89:a3:4b:a8:2d:41:
         a4:04:72:7f:de:49:3a:04:8e:6e:47:24:8d:ae:9c:29:34:43:
         3b:26:bd:b1:70:b2:17:c8:63:9b:f6:fb:79:b1:ab:4e:a6:91:
         6f:7b:25:45:8c:94:0e:a8:c2:59:76:50:db:d9:e7:ee:79:53:
         46:dd:ae:32:98:c3:68:ac:8d:85:7e:66:4a:3a:39:b8:cf:27:
         1a:fa:ef:90:a3:55:8d:5a:0b:62:71:70:fe:77:f4:51:de:a3:
         4a:af:c0:3a:33:b6:b0:1d:86:3d:8a:72:ca:76:3b:cd:79:89:
         36:e6:97:44:1b:95:be:28:e4:4c:b8:6d:b8:b3:ee:64:29:66:
         73:3f:70:63:3d:18:4d:29:16:8b:93:cf:af:fb:e9:8f:84:d6:
         28:95:44:dc:f1:ef:c1:e2:ba:87:7d:b2:da:1b:54:a4:cf:45:
         bf:a3:19:be:25:ea:7b:04:33:56:47:46:a7:82:ef:93:08:93:
         2a:5d:e5:84:64:3b:b7:59:c9:ec:75:b3:21:44:ad:6c:5c:f4:
         13:c5:91:cf:07:fa:b6:1b:94:06:59:48:22:78:0a:c0:93:85:
         34:b2:8a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org