Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/36312e382e36342e302f32302d3234203d3e2034383030.roa
File:                     36312e382e36342e302f32302d3234203d3e2034383030.roa (raw, json)
Hash identifier:          wZOBUQCxdRWl6YfW1Z04hiSzGO8jyGb/wCXgTJwz5iw=
Subject key identifier:   AB:02:1F:69:B2:11:F4:79:25:E4:75:DD:20:F0:9A:3C:16:AE:82:3E
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       61F0D31A8571D0E388EFFA87B8C863C11D37D065
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/36312e382e36342e302f32302d3234203d3e2034383030.roa
Signing time:             Mon 31 Jul 2023 00:04:30 +0000
ROA not before:           Sun 30 Jul 2023 23:59:30 +0000
ROA not after:            Mon 29 Jul 2024 00:04:30 +0000
asID:                     4800
IP address blocks:        61.8.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Apr 2024 14:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f0:d3:1a:85:71:d0:e3:88:ef:fa:87:b8:c8:63:c1:1d:37:d0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:30 2023 GMT
            Not After : Jul 29 00:04:30 2024 GMT
        Subject: CN=AB021F69B211F47925E475DD20F09A3C16AE823E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:46:46:41:1e:48:ba:0f:dc:bd:ca:a5:ed:fe:
                    f8:7c:e1:61:f1:f9:53:09:ef:63:b1:24:66:06:f8:
                    1f:1d:ce:7f:79:1d:33:c7:85:87:2a:23:62:22:ed:
                    1d:b1:ae:2b:cb:ce:bf:c7:89:b6:5e:f2:36:d7:05:
                    c0:49:23:0c:10:ba:a5:1b:38:92:1d:5c:4b:5d:ad:
                    4b:c7:e7:38:53:9f:25:1a:4e:d6:93:73:7b:0e:fe:
                    15:4f:3a:3a:1d:f2:2e:d8:21:72:1f:76:2b:4b:c7:
                    7c:cc:55:86:9c:ac:58:9e:c9:d6:f0:ce:34:4d:fe:
                    9c:9e:9b:5f:e6:18:0b:a3:97:39:6f:51:d3:05:5b:
                    0d:19:4b:2c:b6:11:46:1c:ff:53:f0:78:0c:c6:bd:
                    d9:75:cb:7e:12:25:f0:8c:e1:69:e8:74:71:12:81:
                    62:98:1a:27:90:6c:4d:6f:b3:6a:42:96:5e:fd:49:
                    c2:29:e4:3f:f5:f2:ea:3c:20:96:eb:c5:9d:ad:0f:
                    16:85:b2:2a:34:b9:32:dd:0a:2d:66:1f:3f:76:f4:
                    a9:e6:25:dd:1b:ec:b2:ba:06:19:34:f8:84:b9:3f:
                    7a:e6:c0:27:12:96:0b:80:07:84:ce:c2:d8:ff:cd:
                    4a:90:fd:e9:ed:0d:37:7e:e6:9e:0d:9c:a1:e3:1c:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:02:1F:69:B2:11:F4:79:25:E4:75:DD:20:F0:9A:3C:16:AE:82:3E
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/36312e382e36342e302f32302d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.8.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:4d:d0:87:45:07:69:53:7a:88:7f:80:5b:e2:ed:17:25:e1:
         89:dc:d7:3e:1f:12:b4:6e:48:d6:4d:ff:66:28:c9:2c:21:14:
         1d:00:8d:0f:c1:81:e3:ae:f1:f7:21:fc:02:16:42:69:b1:10:
         50:d2:8f:72:26:73:07:97:42:25:a3:cb:59:c0:1b:d7:9c:71:
         82:88:92:06:41:e7:86:d5:d7:f2:3c:f4:27:36:c9:1b:a0:b1:
         f6:9f:0c:9d:e7:e3:33:8f:4b:53:d8:2f:19:0f:dd:e5:77:94:
         f8:30:75:44:04:c7:e5:85:69:b5:77:39:0c:17:b7:4b:38:07:
         92:c1:9e:8d:06:04:05:3e:e8:2f:f6:ca:79:ac:08:6a:a4:6e:
         bd:65:34:d2:64:63:7a:79:bb:29:2e:41:e0:60:ab:ea:8f:90:
         55:1f:57:88:48:ee:3e:c9:85:7f:33:a3:78:2e:f6:1c:50:09:
         24:81:48:9d:a3:53:c0:fd:76:58:70:24:a7:d8:73:fe:c7:f5:
         01:c6:db:fb:b1:bb:9f:52:28:db:99:42:bd:dc:aa:ac:bc:3d:
         5f:ff:ee:12:86:3a:f0:22:66:1a:aa:87:72:7a:6a:c0:a3:ca:
         85:37:14:9d:a6:b0:09:e3:11:ea:59:9e:b1:b4:ac:96:e3:80:
         b2:f9:a5:3e
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUYfDTGoVx0OOI7/qHuMhjwR030GUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yMzA3MzAyMzU5MzBaFw0yNDA3MjkwMDA0MzBaMDMxMTAvBgNV
BAMTKEFCMDIxRjY5QjIxMUY0NzkyNUU0NzVERDIwRjA5QTNDMTZBRTgyM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSRkZBHki6D9y9yqXt/vh84WHx
+VMJ72OxJGYG+B8dzn95HTPHhYcqI2Ii7R2xrivLzr/HibZe8jbXBcBJIwwQuqUb
OJIdXEtdrUvH5zhTnyUaTtaTc3sO/hVPOjod8i7YIXIfditLx3zMVYacrFieydbw
zjRN/pyem1/mGAujlzlvUdMFWw0ZSyy2EUYc/1PweAzGvdl1y34SJfCM4WnodHES
gWKYGieQbE1vs2pCll79ScIp5D/18uo8IJbrxZ2tDxaFsio0uTLdCi1mHz929Knm
Jd0b7LK6Bhk0+IS5P3rmwCcSlguAB4TOwtj/zUqQ/entDTd+5p4NnKHjHEVjAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUqwIfabIR9Hkl5HXdIPCaPBaugj4wHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTVjZTM2ZGUtZjkyMS00Mjc0LTg0
OTctMjk4N2Q5MDk1NDNlLzAvMzYzMTJlMzgyZTM2MzQyZTMwMmYzMjMwMmQzMjM0
MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD0IQDANBgkqhkiG9w0BAQsFAAOC
AQEAOk3Qh0UHaVN6iH+AW+LtFyXhidzXPh8StG5I1k3/ZijJLCEUHQCND8GB467x
9yH8AhZCabEQUNKPciZzB5dCJaPLWcAb15xxgoiSBkHnhtXX8jz0JzbJG6Cx9p8M
nefjM49LU9gvGQ/d5XeU+DB1RATH5YVptXc5DBe3SzgHksGejQYEBT7oL/bKeawI
aqRuvWU00mRjenm7KS5B4GCr6o+QVR9XiEjuPsmFfzOjeC72HFAJJIFInaNTwP12
WHAkp9hz/sf1Acbb+7G7n1Io25lCvdyqrLw9X//uEoY68CJmGqqHcnpqwKPKhTcU
naawCeMR6lmesbSsluOAsvmlPg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 07:48:28 2024 by rpki-client on console-fra.rpki-client.org