Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132322e302f32342d3234203d3e203338353133.roa
File:                     33362e33372e3132322e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          rRjBtXbbloUzi6FOisldsuEbMzVxWQiNgZ33Y08bDco=
Subject key identifier:   43:87:C8:0C:AD:81:9E:3B:68:12:DA:FA:E1:D6:72:44:92:8C:04:97
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       515503F753B30FF2D1B503299469F65D82B6ED5A
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132322e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 31 Jul 2023 00:04:33 +0000
ROA not before:           Sun 30 Jul 2023 23:59:33 +0000
ROA not after:            Mon 29 Jul 2024 00:04:33 +0000
asID:                     38513
IP address blocks:        36.37.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 13:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:55:03:f7:53:b3:0f:f2:d1:b5:03:29:94:69:f6:5d:82:b6:ed:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:33 2023 GMT
            Not After : Jul 29 00:04:33 2024 GMT
        Subject: CN=4387C80CAD819E3B6812DAFAE1D67244928C0497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:af:b7:1e:a4:8c:94:49:a9:67:e3:63:9c:63:
                    70:19:af:86:93:75:3f:b0:11:f0:09:28:90:46:c6:
                    27:5a:c6:56:24:ca:e6:04:1d:f1:42:7e:72:ed:86:
                    b3:6d:e5:35:1f:f1:0c:2c:de:98:c0:14:57:7c:9f:
                    78:16:b8:9e:a4:e3:68:82:b1:76:f0:01:d8:1d:c1:
                    bf:59:f9:26:b0:cd:5d:4b:e5:45:61:fc:bc:4f:79:
                    91:ad:e5:7a:3e:38:f4:da:83:e8:a8:de:f6:e7:bb:
                    3e:24:22:91:63:3e:05:03:9e:12:0d:40:87:a0:81:
                    5e:83:1c:5c:71:80:d9:13:87:2c:63:4a:18:c2:f3:
                    d2:4a:93:af:aa:50:17:0d:9a:f8:a7:d2:d8:e2:91:
                    60:3e:ed:f5:54:65:8b:bb:95:76:a3:ee:9a:86:f1:
                    d3:76:43:19:0b:39:04:8a:35:1f:95:77:f7:da:51:
                    61:c1:85:fb:79:0d:46:84:f8:d8:32:b9:0f:96:46:
                    3e:81:1b:b4:c6:a3:7b:cc:ed:c0:17:af:e9:bc:ed:
                    7f:0a:07:32:29:c4:ed:1f:c0:52:b6:a7:3b:3f:32:
                    1b:d2:89:bb:4e:d9:6e:be:f9:07:ea:f2:7e:16:ec:
                    93:96:bc:b0:98:eb:70:77:c3:fe:6e:2f:da:71:5f:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:87:C8:0C:AD:81:9E:3B:68:12:DA:FA:E1:D6:72:44:92:8C:04:97
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132322e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c9:d3:4c:d5:51:e7:d4:a4:ab:c9:93:6f:c6:07:f5:6d:d2:
         09:9a:39:0f:5c:63:1f:70:fc:d9:69:1b:76:1c:a3:71:fe:e1:
         44:10:b8:53:a0:69:6c:22:27:1e:1a:98:c5:f1:e5:bd:2c:49:
         4c:b4:ed:91:fd:fd:2f:6c:26:90:a4:7d:59:73:a4:52:eb:f2:
         e3:6e:a0:97:96:f1:ea:ae:b7:71:cf:1a:ad:db:f1:d8:2b:03:
         14:bc:28:0b:54:18:09:23:c3:df:5e:22:e8:65:d4:85:c5:15:
         5a:f1:2b:c1:53:92:41:f0:af:d6:65:a6:ad:58:52:8b:8b:0c:
         a7:8b:9c:a9:6b:67:7c:1b:18:4d:a5:12:b3:97:b6:99:9c:bf:
         d8:88:b9:2b:46:be:c7:f6:9d:b2:25:c2:61:94:1a:29:89:01:
         ee:1c:80:68:67:87:f4:63:cc:9e:b1:36:38:b4:4b:8a:58:41:
         74:17:dc:62:97:f1:9f:cc:dd:0d:17:90:bd:4a:5c:48:a9:7e:
         62:34:07:b2:a5:75:a7:e9:97:c2:25:f1:31:3d:2c:19:50:d0:
         4b:b4:db:65:cb:cc:93:d6:b5:a5:99:af:65:1d:54:68:1f:da:
         f6:d0:b4:37:b7:3a:fd:5b:21:cb:cd:21:a0:2f:ef:ca:4a:8c:
         37:06:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:15:07 2024 by rpki-client on console-ams.rpki-client.org