Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3332203d3e203338353236.roa
File:                     323430353a333734303a3a2f33322d3332203d3e203338353236.roa (raw, json)
Hash identifier:          Ht9OxUH+v6uRkJyl5SxI3W8KUS3ILMSeX83AFafVAVw=
Subject key identifier:   D4:99:3E:36:31:4B:1E:B7:6D:6A:BC:A8:3A:EB:33:53:75:18:74:B3
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       2C73202948A931C350309A667A302F629D0855B3
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3332203d3e203338353236.roa
Signing time:             Wed 28 Feb 2024 06:01:24 +0000
ROA not before:           Wed 28 Feb 2024 05:56:24 +0000
ROA not after:            Wed 26 Feb 2025 06:01:24 +0000
asID:                     38526
IP address blocks:        2405:3740::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:73:20:29:48:a9:31:c3:50:30:9a:66:7a:30:2f:62:9d:08:55:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Feb 28 05:56:24 2024 GMT
            Not After : Feb 26 06:01:24 2025 GMT
        Subject: CN=D4993E36314B1EB76D6ABCA83AEB3353751874B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:fe:a9:21:0f:3f:aa:00:18:ac:4c:af:b8:
                    d5:8e:37:6d:91:25:9f:dd:ea:01:84:b3:6f:79:35:
                    96:ac:8d:e7:e9:0e:fc:21:56:ee:71:29:ef:7d:2d:
                    88:ec:4b:b5:e7:c1:48:21:5d:7c:2f:8d:47:26:0a:
                    d2:a2:43:f2:c1:6c:3e:55:04:da:9d:83:fb:35:ae:
                    1c:2f:c3:0f:c0:ff:58:42:94:d2:3b:f5:f3:78:ac:
                    c6:96:bb:45:67:c9:95:b4:1d:df:b1:23:8a:0d:fe:
                    32:0a:a3:14:da:8b:b4:98:b4:b3:21:56:cc:dd:f7:
                    12:d7:0c:e1:73:38:6e:53:a0:07:92:67:53:cf:f9:
                    cf:97:c0:47:71:b8:a0:a1:9c:72:1e:5a:51:7f:8a:
                    cc:f6:bf:4c:b5:f5:f5:b0:e6:0e:4d:b4:61:0f:22:
                    a6:be:6b:24:4b:5a:1b:ad:a0:76:15:0c:fe:8f:f2:
                    bf:cf:cf:57:36:66:1b:5b:f9:76:53:1d:90:13:3c:
                    92:91:43:b2:ff:66:f9:19:40:7c:e3:e0:33:fc:3f:
                    30:84:ff:7b:ef:90:35:92:2e:e6:73:af:d4:00:e2:
                    a2:3f:95:82:35:88:86:f1:e8:19:43:a5:9b:41:93:
                    f7:be:13:a6:6c:86:05:27:03:1d:2a:a8:1d:a9:c0:
                    79:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:99:3E:36:31:4B:1E:B7:6D:6A:BC:A8:3A:EB:33:53:75:18:74:B3
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3332203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3740::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:93:16:e7:32:4f:2f:b4:4e:47:c6:e2:52:21:c1:39:c4:e7:
         74:49:4d:99:58:23:e7:6f:bf:b3:c1:cc:a0:52:23:dc:98:6c:
         4a:25:07:89:81:af:9d:63:ca:7f:c2:15:23:67:d6:d4:fe:8a:
         18:ab:86:0b:61:26:7c:1b:8f:ba:b2:ee:3b:07:45:b0:aa:d2:
         f5:32:56:2d:ce:92:56:b3:20:4e:10:3e:40:6f:22:d0:7d:0a:
         a1:48:12:dc:27:73:f4:38:65:af:43:a3:9e:65:5e:0c:f7:3a:
         17:90:5c:73:c7:0b:27:8c:78:26:7f:e9:e5:d7:a4:f3:a9:8f:
         ea:4b:2b:03:1a:e9:aa:e5:85:83:26:28:31:16:5e:1f:15:28:
         00:42:43:d1:08:20:11:bd:a8:b5:d5:0d:4c:5c:6a:c1:b1:46:
         f9:69:2e:5a:a4:81:79:07:c1:0a:95:9e:54:49:b3:ad:ec:74:
         56:d2:3b:5f:c9:30:44:fd:3f:c6:87:7b:0c:44:e7:7d:66:4a:
         01:4f:79:a7:4e:de:26:13:8d:f1:82:d7:1b:b9:c9:77:ab:a3:
         e1:85:a4:d5:91:27:03:2c:ee:39:a1:92:d4:b4:7e:7b:bb:92:
         d1:c9:19:cf:32:ce:77:4b:ee:64:76:42:a3:a3:aa:85:78:cc:
         07:2d:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org