Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137342e302f32342d3234203d3e203436303534.roa
File:                     35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier:          jFtpdvTv9RSavdXkb+6/2bNsUyWtEQPQyaoxsueD6uI=
Subject key identifier:   05:7E:6B:9B:78:29:7F:B2:12:A7:B8:3A:FB:DD:3A:CF:5C:CE:1B:D7
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       7D9037A3675C4DB05A996E055605CA83917C958A
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137342e302f32342d3234203d3e203436303534.roa
Signing time:             Mon 31 Jul 2023 00:09:47 +0000
ROA not before:           Mon 31 Jul 2023 00:04:47 +0000
ROA not after:            Mon 29 Jul 2024 00:09:47 +0000
asID:                     46054
IP address blocks:        58.145.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:90:37:a3:67:5c:4d:b0:5a:99:6e:05:56:05:ca:83:91:7c:95:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Jul 31 00:04:47 2023 GMT
            Not After : Jul 29 00:09:47 2024 GMT
        Subject: CN=057E6B9B78297FB212A7B83AFBDD3ACF5CCE1BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:7d:95:96:64:ba:11:52:83:e8:46:eb:16:
                    8e:37:12:c0:21:a1:0d:74:ca:69:b7:74:42:ff:08:
                    87:77:5e:ff:e7:1b:13:ee:65:02:4e:8e:d7:74:c6:
                    d7:44:fe:39:8a:39:cc:c6:6f:83:10:e4:7c:5f:bc:
                    53:b6:58:79:cf:c5:be:32:29:43:78:42:41:b3:eb:
                    ed:be:6b:ce:eb:50:e7:bd:95:a8:bd:6d:61:9c:11:
                    90:47:29:c5:b9:3c:3a:49:dd:73:4f:47:96:7f:68:
                    65:db:79:88:c7:07:b1:68:2f:f3:0b:b7:26:9c:70:
                    40:31:c8:19:fb:b6:f2:86:98:a9:35:2f:30:84:03:
                    ad:80:f3:61:55:57:ad:67:b6:3f:17:ab:e0:19:7c:
                    5b:cb:ad:df:cb:6b:60:22:db:35:e0:bd:59:a5:23:
                    d9:28:4d:49:18:b2:80:5e:56:d9:a6:83:f6:8f:3d:
                    82:7d:c2:65:9e:7e:e3:03:bf:f3:d0:09:62:65:6c:
                    09:ea:0d:85:8f:74:36:2a:9c:34:1d:73:8b:17:c6:
                    8c:c9:56:fb:9d:4d:9b:9e:1c:7f:e5:b9:6b:b9:61:
                    4c:d8:22:c7:95:70:97:d4:62:52:df:c2:51:d4:f4:
                    1f:2a:3d:55:23:8d:26:ac:30:4c:34:58:6e:b9:ad:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7E:6B:9B:78:29:7F:B2:12:A7:B8:3A:FB:DD:3A:CF:5C:CE:1B:D7
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137342e302f32342d3234203d3e203436303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.145.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:38:63:b6:a3:f9:16:91:cf:74:2b:7a:dd:c8:a2:f5:98:56:
         73:4c:0d:c5:a5:b8:47:4c:a3:f3:79:86:95:02:ef:4a:4a:fc:
         16:05:25:3c:fd:be:4c:1d:51:a4:e1:96:21:3d:c4:90:69:5d:
         3e:48:f3:9c:6c:e7:86:73:e8:5f:62:d5:62:0e:34:32:d8:35:
         77:42:85:8a:ca:45:55:47:a8:38:8f:54:9d:b0:a8:cf:b4:82:
         db:8e:bb:fc:1e:3e:1d:8d:19:2a:d2:94:26:66:c0:49:44:2f:
         26:4e:5d:fe:3b:c4:f1:94:23:ff:48:6c:7b:52:ec:d6:9c:5d:
         8d:22:66:28:72:8b:a9:56:8b:4a:c4:8e:de:84:04:75:88:27:
         2f:e0:41:83:0d:70:78:11:65:d1:19:93:ef:ce:06:af:ad:c2:
         eb:ee:c8:07:38:93:9b:c9:72:f3:a2:a9:60:36:cb:8f:62:e6:
         eb:cd:af:2f:77:28:f2:09:db:c0:7a:33:f8:c9:2f:91:5d:40:
         85:b1:5c:f0:46:bd:04:32:b9:ce:ea:41:42:5c:99:e6:13:23:
         3a:81:cb:58:4a:db:61:7d:a4:d4:2d:ab:4a:ea:05:50:31:13:
         01:46:52:9f:25:12:6c:c8:b4:6e:8a:0a:45:fa:86:3e:7a:dd:
         25:d1:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:27:37 2024 by rpki-client on console-fra.rpki-client.org