Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132352e302f32342d3234203d3e203538333639.roa
File:                     34352e3131322e3132352e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          yiNoya6V/ZqtwKNmnX3KQv6+5d5Pkp1Esyxuha/CdNw=
Subject key identifier:   87:3A:0B:15:99:AF:53:A2:58:EA:DD:C8:4F:6A:DB:DA:39:46:BF:17
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       08CCD978D7ED05CD01ACB317467A6294268AFD87
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132352e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:32 +0000
ROA not before:           Mon 31 Jul 2023 00:02:32 +0000
ROA not after:            Mon 29 Jul 2024 00:07:32 +0000
asID:                     58369
IP address blocks:        45.112.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 08:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cc:d9:78:d7:ed:05:cd:01:ac:b3:17:46:7a:62:94:26:8a:fd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:32 2023 GMT
            Not After : Jul 29 00:07:32 2024 GMT
        Subject: CN=873A0B1599AF53A258EADDC84F6ADBDA3946BF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:06:86:dc:5d:c4:cc:cb:e3:7e:82:67:a6:cc:
                    ca:20:a8:ed:43:50:d4:d6:50:4f:e4:dd:52:96:e5:
                    4f:88:83:92:5c:43:1f:c4:1c:97:8a:c0:24:26:97:
                    f7:1b:b0:d2:c5:6b:b4:46:c4:8c:08:69:94:10:ae:
                    76:74:28:5a:fe:6d:96:fc:41:2f:a1:fc:8a:af:95:
                    b4:ca:0a:68:a3:b6:15:c9:8e:d6:6f:84:ca:25:c7:
                    2d:cc:6a:1d:d2:e0:50:22:0c:f3:b6:ac:e2:c9:57:
                    aa:27:83:50:56:d1:21:27:34:d7:40:8b:c9:e1:d7:
                    b9:28:26:ef:f1:82:c6:66:31:99:40:66:5e:6b:8b:
                    2e:41:fc:d0:c0:96:4a:03:b5:d2:5e:a8:d2:b0:55:
                    8f:f0:b2:0f:54:01:df:d8:72:25:2b:92:e5:47:f0:
                    11:d4:65:d6:9c:5d:44:86:86:0c:90:15:7b:06:e0:
                    58:f9:9e:fd:32:71:ef:a8:37:c9:23:08:b0:35:90:
                    98:bf:9d:2c:ae:20:fb:a8:51:e1:8c:92:38:0d:66:
                    cf:bb:12:17:bb:f6:5a:c2:9d:9c:86:6e:ea:49:35:
                    77:d3:7f:76:7f:a0:aa:6a:1e:bb:af:b2:b7:c7:c2:
                    97:c7:88:54:53:15:6e:ac:6a:35:98:7f:29:b0:e0:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3A:0B:15:99:AF:53:A2:58:EA:DD:C8:4F:6A:DB:DA:39:46:BF:17
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132352e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:c9:4e:16:e2:9c:c6:d5:b7:b5:a9:92:7d:2e:3d:bf:88:b2:
         81:12:75:57:a6:12:be:49:39:39:bd:28:63:51:97:ca:1c:82:
         51:e6:fb:23:d1:49:f5:3e:35:3e:01:f0:78:77:77:f3:53:a3:
         96:ff:9f:50:00:74:a9:c7:da:51:75:99:79:ee:91:36:4f:5b:
         9e:05:13:4d:a0:f6:c3:d2:91:63:8c:ec:32:aa:3d:af:eb:1f:
         13:fa:9a:69:a3:5b:29:5b:44:70:ab:43:ea:79:80:82:c2:9a:
         db:7c:b6:b1:40:15:6f:ac:0d:96:b5:ac:f2:01:7a:40:0d:90:
         da:77:0f:8c:b2:c9:71:24:9f:9f:7e:c8:f5:39:d6:cf:0c:99:
         96:8c:a6:e3:a7:3b:46:6c:8a:ba:73:ff:7f:96:6d:73:81:d1:
         8f:cb:d7:f6:cd:a3:f8:33:dc:11:52:f2:90:83:c4:64:23:e2:
         a0:f7:42:72:a6:31:32:b2:41:76:fc:5d:f8:60:13:d2:7f:22:
         56:b9:63:c0:e9:e2:58:30:24:f0:12:85:f0:7b:67:09:b5:71:
         f1:34:0b:6b:00:18:7b:fa:b4:70:85:a6:ed:b0:1c:15:9c:9d:
         c5:4e:8c:d3:da:3d:0a:8b:8b:1b:2a:89:b1:6e:f3:6d:1c:42:
         3f:b5:26:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:35:50 2024 by rpki-client on console-ams.rpki-client.org