Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32342d3234203d3e203538333639.roa
File:                     34352e3131322e3132342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          jrqPGW8pBGZ+mUk+o31aSC8MwKfSd47N+y5qz2eAuNM=
Subject key identifier:   66:8B:3A:26:F7:DD:DF:0B:BF:DF:CF:8C:3F:5E:EF:A3:14:01:3B:11
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       2AE48743FADEE4BB1DA1D43124937223F4C72EAA
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:32 +0000
ROA not before:           Mon 31 Jul 2023 00:02:32 +0000
ROA not after:            Mon 29 Jul 2024 00:07:32 +0000
asID:                     58369
IP address blocks:        45.112.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 10:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e4:87:43:fa:de:e4:bb:1d:a1:d4:31:24:93:72:23:f4:c7:2e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:32 2023 GMT
            Not After : Jul 29 00:07:32 2024 GMT
        Subject: CN=668B3A26F7DDDF0BBFDFCF8C3F5EEFA314013B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:3a:33:b1:b1:7a:b1:3e:9f:df:ca:b4:bd:
                    f9:32:36:41:8b:88:4c:e3:77:57:0f:a5:23:23:ad:
                    10:5b:61:42:a7:d9:01:73:3c:09:a4:0e:c9:50:66:
                    dd:9b:c8:c5:cb:06:80:05:38:0e:38:dd:1f:7d:bb:
                    21:fa:ce:44:9e:0b:f0:f3:50:be:4e:74:bd:c9:35:
                    86:db:84:b1:82:59:f1:c8:4b:fd:6c:d8:24:f5:c1:
                    bc:28:4f:82:e5:46:01:73:4d:5e:97:f2:9d:ef:b2:
                    03:00:07:01:e0:1e:60:b7:8d:24:77:2f:4f:00:5f:
                    13:3b:97:bc:1d:54:24:a4:8a:44:8f:19:12:cc:05:
                    e4:89:78:cc:68:98:cf:bf:ad:ac:11:19:ff:8c:e9:
                    91:a6:a6:ab:0b:f1:e4:9c:1c:a9:c1:bd:98:92:19:
                    12:d6:8d:d1:2b:81:4e:38:f0:9a:05:cb:de:65:c7:
                    7b:3b:1a:8a:a7:a4:40:d9:18:bf:7c:d8:d9:d0:34:
                    54:23:5c:27:42:94:4e:e7:a8:93:b1:8d:00:09:43:
                    5d:69:63:09:66:57:84:96:7b:ac:73:a5:df:99:2d:
                    cb:c4:53:58:3d:1a:8a:4e:90:02:38:2b:53:cc:f5:
                    00:14:f8:a1:69:17:09:8d:30:6e:a2:f2:6a:59:bf:
                    87:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8B:3A:26:F7:DD:DF:0B:BF:DF:CF:8C:3F:5E:EF:A3:14:01:3B:11
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:ad:60:19:33:57:33:b2:0f:60:0b:0a:f4:cc:80:68:13:48:
         61:c0:69:45:f6:bc:81:45:66:47:e7:64:46:8d:e4:37:59:65:
         40:ca:3a:78:79:45:e8:ee:ef:d1:8d:e1:ad:35:f3:25:1e:ad:
         9e:5f:0e:e5:24:31:fe:a8:af:32:5d:2c:f6:10:8a:3d:c7:82:
         7d:26:ed:ca:b0:7d:56:69:f7:29:7c:3c:84:07:0e:c5:a9:1c:
         c0:ed:e7:d6:7a:29:30:a3:7a:24:02:39:d6:01:9b:64:19:07:
         b8:fe:26:99:61:01:61:c9:a4:a1:b1:32:42:5c:b4:f9:1b:eb:
         f7:90:41:8c:f3:7e:b9:cb:f2:11:e7:ff:bd:f5:d2:65:63:6d:
         40:c1:95:87:6f:7b:92:9a:06:a9:7b:3a:a3:e9:a2:52:e5:56:
         cd:bd:7a:34:e9:a7:e9:8d:13:74:50:3b:0c:75:00:6a:41:70:
         18:00:5a:6f:96:26:db:5a:c9:c1:4a:9a:01:f7:04:3b:9e:12:
         7c:12:dd:fd:10:b6:cc:17:6b:8a:86:82:3e:e9:13:01:a3:63:
         49:98:7d:b7:24:51:21:47:85:d6:57:ed:82:90:76:81:5f:65:
         41:f2:4b:48:67:80:e4:07:73:93:cb:3a:d5:a9:b9:83:59:ff:
         6b:be:8b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 10:29:46 2024 by rpki-client on console-fra.rpki-client.org