Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32322d3232203d3e203538333639.roa
File:                     34352e3131322e3132342e302f32322d3232203d3e203538333639.roa (raw, json)
Hash identifier:          dMku/N+pkvq9yanCLC2lrvX5J6a3K2HyLNILzMn3Gu0=
Subject key identifier:   FD:7E:96:02:BB:D0:32:F3:98:72:A5:DA:A4:CE:B6:A4:17:75:A0:36
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       117B7010942C265F0363B43B5AC55565FFC4D87F
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32322d3232203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:31 +0000
ROA not before:           Mon 31 Jul 2023 00:02:31 +0000
ROA not after:            Mon 29 Jul 2024 00:07:31 +0000
asID:                     58369
IP address blocks:        45.112.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 10:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7b:70:10:94:2c:26:5f:03:63:b4:3b:5a:c5:55:65:ff:c4:d8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:31 2023 GMT
            Not After : Jul 29 00:07:31 2024 GMT
        Subject: CN=FD7E9602BBD032F39872A5DAA4CEB6A41775A036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:44:cb:db:02:c2:55:b9:05:d8:47:3d:c9:d8:
                    93:97:9b:95:42:8d:f6:bc:ce:71:f6:9e:91:1e:ea:
                    17:e4:d4:28:bd:f8:4f:67:dd:3e:dc:f7:d9:ee:74:
                    a1:ff:58:0c:d7:df:d8:38:22:f9:46:2b:bc:36:d3:
                    25:74:e9:11:d1:11:f3:d9:a8:c2:a1:46:83:61:37:
                    d8:a5:29:fd:16:ae:50:e8:43:d3:6b:e0:43:0a:96:
                    1c:0c:b2:27:7b:27:4a:0b:84:2c:15:c0:94:c3:5f:
                    28:6c:02:84:77:30:ae:1a:ef:d1:98:61:f7:36:3c:
                    ed:38:e7:48:bb:60:39:a9:10:2e:0f:59:f9:c2:9b:
                    b2:8c:72:e6:99:27:2e:96:ed:32:a1:e4:21:ea:bf:
                    c6:72:51:aa:62:2c:e0:40:72:15:8d:58:cf:82:29:
                    81:7a:6f:18:0a:6f:c8:04:8e:a0:20:56:12:ff:de:
                    b9:c5:58:7d:09:2a:29:ee:35:ca:61:be:de:6a:dc:
                    6f:5a:9d:2a:96:1c:06:bf:64:3b:4b:01:57:2c:e1:
                    f6:7f:25:fc:f6:1d:e9:9d:32:34:e5:7b:8e:f2:3e:
                    dd:dd:8a:27:e6:3e:d6:a7:00:f2:a6:c4:2f:7e:d4:
                    ff:b1:dc:dd:6e:f0:00:76:11:db:23:75:aa:8e:91:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7E:96:02:BB:D0:32:F3:98:72:A5:DA:A4:CE:B6:A4:17:75:A0:36
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32322d3232203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:19:72:f6:6b:eb:07:97:49:ce:51:7c:ee:6f:4b:ec:ca:64:
         00:a0:49:a3:3c:e1:d8:c4:14:cf:ae:b1:54:b2:05:b6:f6:12:
         9c:62:cc:df:1f:e8:75:9a:bc:f1:1e:6e:54:b2:08:1d:63:02:
         50:7e:b8:c3:e6:e5:f5:26:00:a8:38:f1:d9:96:dd:0f:56:09:
         81:8d:39:df:11:3d:06:9e:3e:6d:0c:9a:12:5d:1b:0f:7d:55:
         82:bb:86:43:ee:1b:e6:b4:88:17:be:b0:24:dc:5d:a2:f5:87:
         f0:0f:33:ca:ac:5f:94:ab:cb:64:1a:8c:0a:13:ce:61:01:88:
         71:98:a6:5f:80:58:c0:c3:d2:40:02:76:06:5a:08:69:03:92:
         48:29:bc:3e:5e:62:1e:6b:e1:71:fd:d1:00:4d:23:0a:52:6d:
         a8:8e:77:48:ad:84:78:6d:6e:1b:77:98:b1:e0:02:99:48:0e:
         3c:58:91:e3:26:cc:48:07:a1:b1:c0:96:de:f1:8e:9e:f2:93:
         c4:b2:b5:39:b5:06:70:33:f1:04:0b:8d:fe:6e:b5:84:a1:3a:
         77:e8:81:82:b9:34:2a:f3:7d:f3:fb:28:29:4f:f0:1a:e2:4a:
         0f:4e:bb:c2:e0:78:f1:e9:e5:02:5c:ee:fc:c0:09:72:cc:e6:
         fa:25:dd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:01:37 2024 by rpki-client on console-ams.rpki-client.org