Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32332d3233203d3e203538333639.roa
File:                     34352e3131322e3132362e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          jmNDrFS2IAVxFWUZy4//Nx/2KEr4OjCAFXGWWG3sftQ=
Subject key identifier:   EA:3C:8D:02:51:88:95:70:F3:34:48:61:74:CA:2E:83:9E:F4:61:F5
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       3296B691365E13DC3FB4EEADB04F8471782E1683
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:32 +0000
ROA not before:           Mon 31 Jul 2023 00:02:32 +0000
ROA not after:            Mon 29 Jul 2024 00:07:32 +0000
asID:                     58369
IP address blocks:        45.112.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 10:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:96:b6:91:36:5e:13:dc:3f:b4:ee:ad:b0:4f:84:71:78:2e:16:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:32 2023 GMT
            Not After : Jul 29 00:07:32 2024 GMT
        Subject: CN=EA3C8D0251889570F334486174CA2E839EF461F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:52:11:a1:8b:41:65:9f:5e:fa:78:97:77:
                    8d:93:e3:85:0d:60:fe:d9:96:fe:d5:05:5d:36:28:
                    53:29:df:1f:66:31:2b:12:ee:2e:89:70:e6:8c:13:
                    f9:85:12:56:4e:b7:42:3b:1c:ff:e9:14:ca:b2:28:
                    88:88:1a:56:b0:c1:56:44:76:c7:c1:64:ee:fb:f7:
                    b2:3d:2d:76:1f:00:f8:a7:9e:03:62:c5:77:1b:39:
                    d8:73:40:bd:8d:32:9c:cc:53:d1:b4:f3:86:79:1f:
                    37:24:aa:55:52:69:b8:2f:0b:f0:d1:24:0c:a3:ee:
                    48:1c:b4:f9:98:42:f4:59:fb:e6:31:b8:a0:01:4f:
                    b3:28:5f:f3:0e:94:f4:4d:7f:b6:65:76:33:ee:69:
                    94:bb:95:0b:d5:76:75:ee:8d:2f:fe:bf:77:39:07:
                    c5:5e:eb:c1:27:50:ff:2d:a9:c9:7b:e0:02:0b:26:
                    24:32:48:12:5b:53:05:d0:c0:6a:9a:29:a0:75:91:
                    8e:0d:7f:88:1b:20:7c:29:21:42:12:d9:7c:61:c6:
                    e3:76:46:5b:01:c1:3f:a4:7d:f8:08:fd:6d:95:33:
                    56:af:a4:ce:a5:69:8e:be:3a:db:57:25:f3:24:95:
                    32:a2:40:71:4c:d1:61:1c:0e:02:3a:56:04:5b:7b:
                    fe:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3C:8D:02:51:88:95:70:F3:34:48:61:74:CA:2E:83:9E:F4:61:F5
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:20:07:99:95:7e:43:d9:a8:eb:f6:ce:13:99:f1:e3:2c:86:
         04:83:d3:e4:4b:b7:ab:2c:c4:81:1d:5d:b1:47:1f:0f:32:39:
         63:92:ba:d7:3e:20:3e:40:3e:20:72:8a:5f:44:4a:b7:77:cd:
         40:c7:5d:41:c9:b0:a9:fe:81:f2:b6:32:a9:25:66:c7:dd:d5:
         84:69:95:56:4d:dc:3a:ed:15:68:dc:b1:6a:2f:c4:c0:fa:f8:
         49:8f:c8:48:86:78:a4:6b:bc:35:dc:b9:78:dd:41:d0:5c:5f:
         9f:54:f9:26:21:95:7e:ea:6b:e0:9b:fd:43:f1:74:73:4c:97:
         a3:39:c7:39:78:53:d7:20:69:20:ea:eb:fa:8e:9d:28:a3:f7:
         8e:04:e6:47:1e:5f:a9:a9:48:90:45:8d:79:7b:a3:13:4d:12:
         20:c3:d6:7c:47:19:24:f0:96:da:4d:4d:72:df:9b:04:9f:67:
         2d:a9:c4:b6:ff:6a:47:35:a8:ec:ba:52:87:a4:fb:38:fb:64:
         e3:f5:80:a7:a7:7e:fb:f2:34:16:0c:bc:45:c7:86:d2:5e:d7:
         1e:cd:8a:03:7a:7e:73:7e:6e:12:25:7d:3e:14:61:bb:c8:b1:
         ed:a9:69:43:a0:0a:a0:f1:6a:01:03:fd:2e:fb:84:08:14:72:
         de:82:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 10:29:46 2024 by rpki-client on console-fra.rpki-client.org