Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132352e37322e302f32322d3234203d3e20313335343438.roa
File:                     34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (raw, json)
Hash identifier:          bSOGlYa+kn/dlN3ZcyNvsYT8fNcQbRpQE/pKzLUv2Fo=
Subject key identifier:   8B:64:02:86:F3:93:D0:71:D2:BA:B4:A8:AE:9A:38:41:A1:5B:0D:36
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       7223294E09232998E1449CA55FBA4C18E8E8F757
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132352e37322e302f32322d3234203d3e20313335343438.roa
Signing time:             Mon 31 Jul 2023 00:07:37 +0000
ROA not before:           Mon 31 Jul 2023 00:02:37 +0000
ROA not after:            Mon 29 Jul 2024 00:07:37 +0000
asID:                     135448
IP address blocks:        45.125.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 07:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:23:29:4e:09:23:29:98:e1:44:9c:a5:5f:ba:4c:18:e8:e8:f7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Jul 31 00:02:37 2023 GMT
            Not After : Jul 29 00:07:37 2024 GMT
        Subject: CN=8B640286F393D071D2BAB4A8AE9A3841A15B0D36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:c8:48:e5:81:61:90:da:fa:75:c8:92:75:
                    91:fa:01:dd:42:1b:72:f8:ff:08:51:4b:48:c9:62:
                    3e:78:c5:17:15:70:47:31:bb:ec:7f:62:24:21:fc:
                    dc:05:80:b5:4f:20:bd:39:06:d7:71:c7:37:8b:da:
                    c0:5e:1e:af:0a:bb:de:40:86:20:dd:6f:90:49:18:
                    7d:6c:12:09:26:52:fd:3b:49:c8:98:7a:d5:6d:ff:
                    73:2c:4e:c1:b1:1b:d1:c2:27:f7:85:5a:20:74:17:
                    da:88:84:13:4f:ed:50:3b:84:a8:73:c9:a9:aa:59:
                    37:1f:20:ac:26:ab:97:df:f1:84:55:31:fd:6f:5c:
                    18:7d:ae:e9:35:5f:9f:1f:13:d4:50:8c:a9:eb:1c:
                    b1:b2:f2:6c:8f:6b:73:63:93:4f:cf:53:79:aa:db:
                    8a:c4:2a:55:dd:a3:dd:3a:64:85:ae:6d:e7:e6:c1:
                    35:c6:c5:02:a1:34:ff:12:bf:53:12:a9:f5:0d:ff:
                    b5:fe:de:71:7b:66:01:8d:7b:88:29:ae:4f:30:f0:
                    53:5e:21:7e:88:3d:1a:98:0e:1e:9d:a6:d0:39:7d:
                    7b:62:7b:ed:92:2a:07:82:5f:b0:55:e4:b3:eb:97:
                    16:81:60:73:e4:ee:13:b7:b3:d6:b0:31:0a:d6:b6:
                    64:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:64:02:86:F3:93:D0:71:D2:BA:B4:A8:AE:9A:38:41:A1:5B:0D:36
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/34352e3132352e37322e302f32322d3234203d3e20313335343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:77:f5:3b:d2:7f:20:63:4b:ac:7a:69:a9:b3:dd:39:0f:ff:
         80:18:d2:91:0a:82:1a:5a:ab:13:12:ff:25:61:b9:7d:cd:43:
         70:da:57:f0:97:ad:c6:7a:42:b8:75:90:a6:b7:c6:d8:eb:23:
         c9:f6:20:27:8b:60:af:34:53:2d:88:25:ad:ab:70:d6:38:70:
         bb:12:8b:f0:9f:74:37:da:d1:01:01:55:2c:d6:df:09:79:95:
         33:59:d4:ff:f6:5d:cb:6b:2b:52:82:f2:85:ed:85:59:b3:d8:
         ed:bc:77:44:6d:90:fa:44:60:fc:8b:8f:06:8b:d9:d2:6f:55:
         bd:5e:4b:79:be:e9:11:ba:5e:b1:86:c1:91:a7:0e:f3:cb:35:
         0e:cb:76:40:fc:8f:cc:e2:86:e1:32:ec:c9:0d:0c:0c:d1:bb:
         7a:ab:59:65:11:d4:48:c4:df:c8:2d:63:2f:c5:57:9a:c2:31:
         59:9d:fa:dd:37:10:c3:ef:00:a1:98:b3:79:69:40:68:fb:31:
         06:dc:89:b7:84:75:9e:6a:5d:37:75:5d:b2:05:a0:66:31:4e:
         cd:8e:08:46:9b:40:e7:fe:59:4d:95:ef:eb:37:2d:1b:60:4e:
         6d:d6:cd:d1:e7:45:2f:2c:f5:72:51:76:84:9a:d8:ac:71:8f:
         ab:8e:60:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:15:06 2024 by rpki-client on console-ams.rpki-client.org