Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137322e302f32342d3234203d3e203436303534.roa
File:                     35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier:          bEwC4T9KmyxTluKSIzWZspUKuCA65r7exWiBeDH3hx4=
Subject key identifier:   2E:42:B5:D7:04:08:19:E6:88:1F:30:81:59:13:C6:F9:47:18:B6:AC
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       55C1E07DB26675DAD0EBB3F7D15AC77F96DB11BA
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137322e302f32342d3234203d3e203436303534.roa
Signing time:             Mon 31 Jul 2023 00:09:47 +0000
ROA not before:           Mon 31 Jul 2023 00:04:47 +0000
ROA not after:            Mon 29 Jul 2024 00:09:47 +0000
asID:                     46054
IP address blocks:        58.145.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 12:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c1:e0:7d:b2:66:75:da:d0:eb:b3:f7:d1:5a:c7:7f:96:db:11:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Jul 31 00:04:47 2023 GMT
            Not After : Jul 29 00:09:47 2024 GMT
        Subject: CN=2E42B5D7040819E6881F30815913C6F94718B6AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:93:72:8b:82:07:3f:11:9f:06:7d:f5:94:99:
                    dc:df:22:0f:21:3c:cc:19:d0:c6:35:2d:2d:00:49:
                    21:88:9e:68:e9:5d:63:b1:31:22:b9:25:34:c5:89:
                    e3:cb:ce:39:a9:a9:88:e2:53:03:57:b2:62:41:38:
                    40:7c:8f:63:12:62:e8:c3:af:af:ec:c6:4f:ef:1f:
                    ec:ec:cf:c9:ac:46:b4:10:b1:b6:ae:c9:45:c2:1b:
                    aa:5a:eb:f2:4d:88:8d:81:38:d0:f1:40:d3:a9:8a:
                    6f:65:24:01:f6:15:35:90:5f:11:84:21:ec:fe:33:
                    38:03:e6:90:fe:8e:95:63:e4:ff:33:f3:28:2c:6f:
                    95:9e:40:a4:dc:75:54:23:05:c3:29:aa:b3:a4:1d:
                    10:e7:e4:f3:67:dc:f2:e9:cc:a0:11:a3:bf:3f:51:
                    9c:2d:dd:fb:d3:d6:1d:34:87:08:ad:0a:55:ee:cd:
                    c9:51:eb:2e:46:b1:8a:36:24:0f:8a:01:38:36:f5:
                    31:8a:2d:c0:24:17:da:18:e9:c8:82:8c:fa:47:b0:
                    84:c1:7b:47:aa:40:33:e4:c5:ed:74:26:35:4a:92:
                    05:be:6d:3c:7e:fe:b2:2a:ad:ca:48:cf:84:7e:21:
                    3c:0e:e5:b2:de:82:90:80:77:7f:26:fa:93:9c:7c:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:42:B5:D7:04:08:19:E6:88:1F:30:81:59:13:C6:F9:47:18:B6:AC
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137322e302f32342d3234203d3e203436303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.145.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b9:43:08:c9:6b:23:1f:ac:e9:4f:0f:ab:b0:68:4e:21:b3:
         c8:38:a3:e8:0e:b3:c3:1b:a9:5b:27:bd:95:ca:b5:4f:e9:b7:
         af:88:4b:35:dc:77:ed:57:e9:62:68:9f:cc:47:0b:9a:ea:04:
         b5:b5:e7:49:cf:ca:0f:cd:38:7d:51:ea:74:c4:34:e8:76:ef:
         65:d9:90:7e:98:66:8d:8f:fb:86:39:2f:a8:02:05:05:a1:82:
         04:1d:ef:39:7d:a0:de:bc:f2:79:db:c0:60:62:a3:0b:49:59:
         07:76:ea:2e:9a:a7:ef:97:69:be:d2:77:42:98:f1:c5:da:c8:
         2d:69:b7:36:e1:97:74:22:b7:6e:f3:5d:e3:3d:fa:ea:62:f0:
         12:e0:90:ef:eb:94:cb:36:0e:62:4f:4a:11:28:73:2c:c8:2a:
         14:51:73:68:98:43:13:52:fc:9c:4c:d2:af:65:a9:90:83:a1:
         33:71:0c:5a:b7:5b:29:a6:a3:f7:16:c0:33:01:9b:da:6a:5d:
         c6:4b:3b:cb:12:d3:ad:e6:dd:25:eb:23:23:35:cb:83:0b:4b:
         25:b3:7f:c0:f2:06:ae:b9:be:8f:f2:54:92:c1:07:dd:b3:dc:
         c2:2d:43:19:a6:a7:b0:7e:83:31:ad:6b:b2:74:d1:8b:d2:48:
         21:17:45:35
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVcHgfbJmddrQ67P30VrHf5bbEbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNF
QjlDOUNFNTAeFw0yMzA3MzEwMDA0NDdaFw0yNDA3MjkwMDA5NDdaMDMxMTAvBgNV
BAMTKDJFNDJCNUQ3MDQwODE5RTY4ODFGMzA4MTU5MTNDNkY5NDcxOEI2QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOk3KLggc/EZ8GffWUmdzfIg8h
PMwZ0MY1LS0ASSGInmjpXWOxMSK5JTTFiePLzjmpqYjiUwNXsmJBOEB8j2MSYujD
r6/sxk/vH+zsz8msRrQQsbauyUXCG6pa6/JNiI2BONDxQNOpim9lJAH2FTWQXxGE
Iez+MzgD5pD+jpVj5P8z8ygsb5WeQKTcdVQjBcMpqrOkHRDn5PNn3PLpzKARo78/
UZwt3fvT1h00hwitClXuzclR6y5GsYo2JA+KATg29TGKLcAkF9oY6ciCjPpHsITB
e0eqQDPkxe10JjVKkgW+bTx+/rIqrcpIz4R+ITwO5bLegpCAd38m+pOcfLhBAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQULkK11wQIGeaIHzCBWRPG+UcYtqwwHwYDVR0j
BBgwFoAUJkJbcClPmANdOHiOWXpKbOucnOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
Y2YzMDkzNi1jNzUwLTQzM2ItOWMyYS04ZmY1ZjM4ZTYzZDQvMC8yNjQyNUI3MDI5
NEY5ODAzNUQzODc4OEU1OTdBNEE2Q0VCOUM5Q0U1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNFQjlD
OUNFNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjZjMwOTM2LWM3NTAtNDMzYi05
YzJhLThmZjVmMzhlNjNkNC8wLzM1MzgyZTMxMzQzNTJlMzEzNzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADqRrDANBgkqhkiG
9w0BAQsFAAOCAQEAVLlDCMlrIx+s6U8Pq7BoTiGzyDij6A6zwxupWye9lcq1T+m3
r4hLNdx37VfpYmifzEcLmuoEtbXnSc/KD804fVHqdMQ06HbvZdmQfphmjY/7hjkv
qAIFBaGCBB3vOX2g3rzyedvAYGKjC0lZB3bqLpqn75dpvtJ3QpjxxdrILWm3NuGX
dCK3bvNd4z366mLwEuCQ7+uUyzYOYk9KEShzLMgqFFFzaJhDE1L8nEzSr2WpkIOh
M3EMWrdbKaaj9xbAMwGb2mpdxks7yxLTrebdJesjIzXLgwtLJbN/wPIGrrm+j/JU
ksEH3bPcwi1DGaansH6DMa1rsnTRi9JIIRdFNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 19 07:07:09 2024 by rpki-client on console-fra.rpki-client.org