Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137352e302f32342d3234203d3e203436303534.roa
File:                     35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier:          lVweKKB8QUhf2svNiIxc3+TeTyTKmNyCT1S5G0Yns6g=
Subject key identifier:   8C:CE:5D:55:C3:DC:C3:EF:51:30:27:A1:42:AC:63:A2:A1:5B:55:73
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       2F2FE6E097CA7513EF9A6E061B8C1F147224AADD
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137352e302f32342d3234203d3e203436303534.roa
Signing time:             Mon 31 Jul 2023 00:09:47 +0000
ROA not before:           Mon 31 Jul 2023 00:04:47 +0000
ROA not after:            Mon 29 Jul 2024 00:09:47 +0000
asID:                     46054
IP address blocks:        58.145.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 12:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2f:e6:e0:97:ca:75:13:ef:9a:6e:06:1b:8c:1f:14:72:24:aa:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Jul 31 00:04:47 2023 GMT
            Not After : Jul 29 00:09:47 2024 GMT
        Subject: CN=8CCE5D55C3DCC3EF513027A142AC63A2A15B5573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:89:60:3c:08:81:b9:90:c9:22:1e:15:82:ad:
                    23:da:d3:e0:69:05:88:27:e0:07:c6:4f:04:ee:c8:
                    7c:f2:54:8f:5d:f4:ae:0b:b2:d5:d5:b6:21:38:e8:
                    92:1b:92:9b:25:4a:0a:26:18:7a:0d:d9:9f:ef:97:
                    11:d8:9f:9e:81:37:e6:a6:0a:98:13:48:d9:24:95:
                    d9:37:ff:1a:ba:c6:bf:a4:be:69:6c:5a:57:e5:bc:
                    85:ae:08:e8:d0:a9:0b:36:99:c5:8a:28:ac:68:d8:
                    eb:1d:06:ff:15:3d:3e:90:3f:7b:5c:15:cf:c3:42:
                    43:89:2d:0f:80:8c:48:55:d6:d9:38:9a:1d:c3:84:
                    b8:a6:68:50:14:27:0f:cf:2e:ca:d0:d6:e3:2d:7a:
                    63:98:fd:c4:29:6a:6c:79:b4:f5:59:c2:5e:cf:58:
                    3b:de:4b:ad:5c:fc:6a:9b:b0:53:72:86:09:9b:9a:
                    63:4d:4a:e9:b5:ee:a4:eb:f7:85:84:41:58:06:66:
                    ab:38:b8:88:e8:8e:d4:1c:d5:ad:52:fc:93:74:95:
                    32:5c:b6:0f:6f:16:f3:c5:5b:9a:7c:f6:2e:6b:42:
                    26:ab:60:92:e4:08:12:c5:25:e5:78:81:15:0f:a7:
                    4a:e5:31:17:1b:78:0e:57:de:6f:f9:28:b6:d6:49:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CE:5D:55:C3:DC:C3:EF:51:30:27:A1:42:AC:63:A2:A1:5B:55:73
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137352e302f32342d3234203d3e203436303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.145.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:19:61:9a:ef:fa:82:f2:b7:53:92:0c:71:c1:fe:f9:5b:21:
         6b:4b:5b:22:a4:73:99:2a:c3:65:6a:3b:30:03:62:bd:26:c0:
         45:cf:fa:44:8c:46:b5:9d:93:92:5e:5d:c7:0a:23:12:88:5b:
         c9:51:8b:84:6a:91:d4:dc:ee:68:74:39:2b:3c:e6:ad:6e:58:
         a4:b0:0d:36:9f:a2:84:bb:84:3c:ba:25:91:fc:3c:b4:76:9e:
         c3:05:87:1e:65:0d:fd:ac:56:2f:cd:97:55:bd:b3:03:a1:54:
         d6:0a:19:31:8b:45:cc:6f:fb:55:a0:4f:7e:1f:6a:93:5d:c5:
         0b:4a:99:d6:4f:88:c8:4d:b4:c6:42:05:b2:94:e7:18:24:b2:
         83:77:64:19:c6:3e:ba:91:5d:1c:d6:d4:3e:97:86:6f:b7:b9:
         53:4f:31:dd:32:2e:4c:1d:c1:44:a1:6b:da:cd:a4:3f:df:61:
         9f:94:85:cd:55:87:34:71:71:91:2e:a2:b6:16:20:1f:63:47:
         c6:40:ac:db:d6:33:66:15:a8:c2:1c:0a:50:f9:29:f6:05:44:
         73:97:24:ff:cd:10:78:6c:5b:8c:91:c9:f6:a2:34:ec:68:34:
         aa:3c:2d:52:c8:e2:06:e3:93:a0:c3:16:4e:dc:a2:08:56:10:
         fe:13:6c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:38:31 2024 by rpki-client on console-ams.rpki-client.org