Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132322e35322e302f32322d3234203d3e20313335343438.roa
File:                     34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (raw, json)
Hash identifier:          G3lDOQuhDVvaJSSvGT7Swy+sYKcjIOuI/eGGpBi/PGY=
Subject key identifier:   21:A8:B3:DC:30:B0:97:39:C5:1C:7E:96:DB:BC:C3:05:B1:B7:50:A7
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       60E0E62CB8695147CFD9685892E5AFB59F84C554
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132322e35322e302f32322d3234203d3e20313335343438.roa
Signing time:             Mon 31 Jul 2023 00:07:37 +0000
ROA not before:           Mon 31 Jul 2023 00:02:37 +0000
ROA not after:            Mon 29 Jul 2024 00:07:37 +0000
asID:                     135448
IP address blocks:        45.122.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e0:e6:2c:b8:69:51:47:cf:d9:68:58:92:e5:af:b5:9f:84:c5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Jul 31 00:02:37 2023 GMT
            Not After : Jul 29 00:07:37 2024 GMT
        Subject: CN=21A8B3DC30B09739C51C7E96DBBCC305B1B750A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:41:30:8d:c9:05:cb:c0:9f:67:6c:5f:e0:
                    7d:61:d4:26:42:2c:f5:11:15:db:07:8e:47:35:e1:
                    ed:07:70:41:60:2d:a8:43:51:0d:2e:fb:48:1e:80:
                    4a:04:05:df:0f:2f:ed:14:c3:c5:6e:2b:88:91:ca:
                    1f:a6:55:11:38:29:79:b1:f2:5e:f4:ec:b1:ba:92:
                    eb:89:b3:12:3a:58:9a:c4:59:71:f9:5c:8d:fc:99:
                    27:93:e0:3b:45:52:8c:0d:a8:73:db:9a:62:7d:a8:
                    69:a8:48:c5:83:02:9a:0f:83:f9:5e:7d:10:ed:c5:
                    a8:3a:81:ae:3c:a0:61:ee:8c:c6:94:a4:65:c1:ba:
                    0f:94:50:1d:10:60:55:a5:40:d4:6a:02:86:db:48:
                    7e:32:6d:9d:0a:8a:2d:b2:99:b7:78:af:a9:dc:4b:
                    02:d8:4d:e6:7b:8c:86:d5:c0:0c:ee:1c:24:bd:4b:
                    6e:ef:d9:9a:a5:ac:01:09:3d:47:61:2d:2f:92:ed:
                    52:77:c3:1c:20:9d:8a:3f:f4:b9:1e:7a:b0:0b:bd:
                    95:0c:8b:e5:37:d1:c9:aa:77:a7:1f:b4:a4:4b:96:
                    a7:75:e4:16:21:3c:a1:4d:f8:79:b3:5e:15:a5:4f:
                    8f:3b:3a:a9:89:d2:ae:6d:22:eb:06:e0:1f:a1:f9:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A8:B3:DC:30:B0:97:39:C5:1C:7E:96:DB:BC:C3:05:B1:B7:50:A7
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132322e35322e302f32322d3234203d3e20313335343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.122.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:a4:f0:dd:83:11:d9:6b:c3:9d:0c:ac:6a:76:61:e7:0e:cc:
         1c:b1:81:2f:ed:ea:e7:d3:0c:40:c8:f3:57:99:9a:92:63:ad:
         15:2c:e4:0b:94:3f:ec:61:a5:be:5c:8b:d4:f6:a1:eb:2b:8d:
         4e:55:b5:a2:79:3e:60:1c:7c:77:12:73:25:46:40:ac:2b:06:
         19:4f:e1:26:23:fe:12:aa:a1:b8:3c:90:66:9e:e0:fa:2e:ea:
         3c:d4:37:af:b6:1c:eb:90:d8:85:1c:3a:6d:01:ab:78:33:fa:
         90:8b:ab:7b:8a:ba:6a:11:92:19:5a:3d:e9:44:a8:13:99:31:
         99:c6:41:39:a5:e3:15:8a:31:89:da:29:13:71:5f:68:b7:70:
         2a:01:ad:12:70:2f:bc:70:48:d4:ac:c7:32:8e:22:8b:44:a8:
         81:aa:f5:80:fb:9b:45:c5:24:20:a8:02:29:d7:1a:6e:c5:e1:
         6d:2b:a2:13:dc:84:69:05:bd:2d:0a:4b:36:f1:d2:90:bb:10:
         9e:44:f9:1b:fc:73:33:e1:d6:e8:d6:cd:d4:f2:d3:23:83:53:
         51:20:11:1c:79:a0:cc:45:57:f6:1d:05:c7:d5:f8:2d:fc:ed:
         7f:00:82:1b:cd:80:b5:45:27:25:9b:9c:8e:8a:7a:ac:ff:f2:
         63:06:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org