Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36362e302f32342d3234203d3e20313331373138.roa
File:                     33362e33372e36362e302f32342d3234203d3e20313331373138.roa (raw, json)
Hash identifier:          4c9omx9SPmieea8k0zj7w2ZGVj4r/9h1JreQmRDH39A=
Subject key identifier:   B4:80:5D:E7:74:6B:A7:C2:4E:95:7E:56:4D:3C:7F:49:65:0A:65:CE
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       187068C80C35269A3FAA039D70DF8C73476EBA61
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36362e302f32342d3234203d3e20313331373138.roa
Signing time:             Mon 31 Jul 2023 00:04:34 +0000
ROA not before:           Sun 30 Jul 2023 23:59:34 +0000
ROA not after:            Mon 29 Jul 2024 00:04:34 +0000
asID:                     131718
IP address blocks:        36.37.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:70:68:c8:0c:35:26:9a:3f:aa:03:9d:70:df:8c:73:47:6e:ba:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:34 2023 GMT
            Not After : Jul 29 00:04:34 2024 GMT
        Subject: CN=B4805DE7746BA7C24E957E564D3C7F49650A65CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:16:93:f6:98:6a:ba:09:b6:a0:6b:41:b1:
                    d6:d6:48:c9:7f:e0:30:df:5f:33:de:30:57:51:d2:
                    93:21:cb:28:48:0c:cc:b7:29:5a:c8:a2:d7:e1:6e:
                    66:aa:4e:79:2c:c8:60:13:b3:4b:38:e0:ea:94:ff:
                    85:e2:a0:06:93:16:c0:b2:60:ef:4e:0e:7d:f3:56:
                    1a:e2:cb:df:ec:e1:d1:5f:56:09:8e:5f:0f:8b:11:
                    26:c0:92:48:81:08:30:f5:03:44:c2:e9:8a:ce:d1:
                    0a:11:77:9c:9f:f3:79:93:03:0f:c9:22:bc:82:25:
                    a9:3c:dd:e6:e7:64:84:45:39:3d:00:f8:5a:90:12:
                    9e:23:fe:2a:b3:da:07:f3:d6:f2:a0:57:5a:1c:b2:
                    60:2a:80:b8:01:e5:d1:6a:df:09:1b:66:99:d3:84:
                    54:39:6d:07:6d:6c:06:33:26:15:4e:44:b9:9b:8e:
                    12:ce:2d:c5:55:92:78:d5:d8:8a:16:5b:aa:86:df:
                    49:bd:10:80:9e:42:50:9f:48:a9:67:9a:60:09:d1:
                    f1:6c:fe:e3:e4:08:1d:54:5d:3b:cf:ad:f5:b7:71:
                    89:a4:93:a9:52:a7:69:f0:7a:f6:ef:36:d1:c1:ef:
                    81:53:e6:33:40:ec:d4:fa:49:65:46:39:54:db:b0:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:80:5D:E7:74:6B:A7:C2:4E:95:7E:56:4D:3C:7F:49:65:0A:65:CE
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36362e302f32342d3234203d3e20313331373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:f1:6f:32:7e:9a:3c:37:3c:6c:bf:6c:65:45:d4:2b:ac:ad:
         b8:c9:ff:8d:79:8e:e4:97:95:9f:11:00:54:0e:01:69:7f:d4:
         06:56:15:fd:58:9a:a4:01:25:81:e5:32:61:3d:4f:14:c3:33:
         63:9b:8d:34:2f:3b:9a:8b:45:cf:c4:59:e1:c9:a7:03:cc:8d:
         b1:a8:c6:3a:19:30:09:77:ca:9b:35:80:e7:6b:f6:da:da:91:
         90:16:83:71:ae:bb:13:71:c6:b2:dd:0d:2e:b1:01:18:d7:d2:
         9f:19:45:52:34:d6:ca:bc:26:d8:45:fd:25:64:70:bb:89:3a:
         05:a4:1d:07:d4:28:8e:94:b6:b3:19:b2:74:24:68:d1:8d:03:
         a2:ca:8c:5f:ed:4f:97:f7:fb:1b:3f:db:ba:61:5c:ef:64:f3:
         c9:76:b8:2e:40:f5:c9:c5:e9:f6:de:e6:45:04:87:66:92:76:
         4f:1c:ff:7a:ee:43:cd:c6:fc:a3:bc:71:04:52:3f:1b:72:73:
         0a:d4:8a:84:64:4a:4a:89:05:7b:42:a9:f9:3d:21:6d:ad:f4:
         f9:17:c7:d9:ee:b4:78:15:a4:95:9d:76:56:54:88:08:24:45:
         be:77:23:c5:57:db:1a:f8:d2:60:8c:6c:fc:7a:c4:60:66:ac:
         a0:2d:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:44:45 2024 by rpki-client on console-ams.rpki-client.org