Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/34352e36342e3235322e302f32322d3234203d3e203435323934.roa
File:                     34352e36342e3235322e302f32322d3234203d3e203435323934.roa (raw, json)
Hash identifier:          rzzkjrzBOgPLCUMIXG1jRO3g85W7N9wigfnt0HhwNa4=
Subject key identifier:   40:68:50:66:9A:70:B3:08:F6:DA:0B:54:40:7D:5B:85:03:D2:14:C9
Certificate issuer:       /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
Certificate serial:       5FB51ECE16E7D189610F450979F6E592CF8A77A4
Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/34352e36342e3235322e302f32322d3234203d3e203435323934.roa
Signing time:             Mon 31 Jul 2023 00:14:37 +0000
ROA not before:           Mon 31 Jul 2023 00:09:37 +0000
ROA not after:            Mon 29 Jul 2024 00:14:37 +0000
asID:                     45294
IP address blocks:        45.64.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl
                          rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 22:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b5:1e:ce:16:e7:d1:89:61:0f:45:09:79:f6:e5:92:cf:8a:77:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
        Validity
            Not Before: Jul 31 00:09:37 2023 GMT
            Not After : Jul 29 00:14:37 2024 GMT
        Subject: CN=406850669A70B308F6DA0B54407D5B8503D214C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:e1:b1:80:1a:b0:70:89:46:63:66:21:b1:
                    13:2e:31:d3:3c:fa:22:8f:7c:88:a1:79:6c:0c:f2:
                    92:0a:1a:96:d3:06:b9:89:e9:a6:03:14:8e:5d:af:
                    1a:63:b3:9d:6e:98:9a:66:21:ce:b0:e1:7e:8e:40:
                    7f:fc:32:88:f4:ea:f3:ac:ea:17:a3:6b:15:a8:fc:
                    f4:04:1e:7c:e2:4c:e1:89:84:47:7f:a6:44:45:ea:
                    66:c1:dc:1f:40:5c:03:41:a9:80:ea:64:84:c0:1a:
                    35:85:19:e2:51:18:e8:7e:d6:12:86:e7:8f:d3:9c:
                    8f:23:67:d6:56:5c:5e:83:36:a5:f0:4b:bd:a1:d5:
                    ff:30:c1:1c:6e:fc:2e:ba:ca:89:ba:d2:43:75:0d:
                    2c:1b:ac:15:2e:f5:40:50:9b:7a:3d:d6:90:75:e6:
                    ff:ff:5b:90:ee:ab:5b:7b:dd:e0:6c:97:8f:b3:db:
                    a2:05:e0:b1:5e:38:dd:24:47:89:06:3f:72:49:a7:
                    0d:e7:be:99:70:98:3b:49:3e:26:e6:81:1c:ab:dd:
                    4f:7e:13:00:d1:8c:37:69:25:37:53:60:9a:56:10:
                    49:78:32:0b:35:47:bb:7f:46:61:9c:8d:97:e7:91:
                    8d:73:cb:9e:ed:09:86:c2:69:ca:6f:5c:1e:5a:15:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:68:50:66:9A:70:B3:08:F6:DA:0B:54:40:7D:5B:85:03:D2:14:C9
            X509v3 Authority Key Identifier:
                keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/34352e36342e3235322e302f32322d3234203d3e203435323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:ee:c1:41:50:a6:4c:46:52:ee:dc:f8:7e:cd:82:0c:72:92:
         fd:97:dd:cb:88:16:6c:0e:4c:f5:9b:22:86:b5:af:a6:6d:ad:
         f7:48:fa:9c:34:3d:e7:b1:f9:05:c8:ab:8d:a3:c3:4d:9d:cc:
         3f:ad:83:bb:27:17:5a:25:c0:46:64:0b:a3:58:14:f2:00:0b:
         eb:8f:cf:88:83:78:ff:ec:ed:32:bd:b3:fe:4a:1c:d7:e2:44:
         99:8f:c8:09:5f:a0:59:71:e1:24:32:f8:e9:16:f8:31:08:68:
         1f:ab:d7:f1:d2:04:60:e1:b0:72:49:66:c0:f1:fa:59:0f:96:
         63:5c:8c:4d:a2:94:03:4e:65:0b:b8:92:27:28:7d:62:86:a0:
         3d:99:81:3c:b7:f7:62:7b:4c:8a:79:e1:3b:98:3a:66:dc:50:
         6c:23:e7:22:ae:38:0a:58:ed:87:0d:d6:5c:65:92:56:37:bd:
         3f:b2:6b:30:ce:fb:15:88:47:62:c2:14:7b:bd:c5:40:8a:46:
         b6:c9:4d:da:91:e7:6f:ee:aa:94:4b:1e:2f:83:19:55:38:a8:
         a6:ff:b6:de:25:d2:37:de:b9:85:7a:e0:07:b4:ce:ad:2a:04:
         19:6a:d0:06:3f:3e:cd:c2:90:ca:5f:99:de:e4:0d:af:6a:5e:
         27:1b:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:36:05 2024 by rpki-client on console-ams.rpki-client.org