Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa
File:                     34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          ip4lj2bQAOrC8dlgJ2PkNkBe3WMptDo4zU/zPL0p4xg=
Subject key identifier:   6B:54:74:CF:63:C1:B3:E3:2E:53:81:D2:7E:1E:5B:B4:15:82:CE:DA
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       3FAE2DD4DBDF7239A19D03A29EDDE4F2B3D94F74
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 31 Jul 2023 00:03:13 +0000
ROA not before:           Sun 30 Jul 2023 23:58:13 +0000
ROA not after:            Mon 29 Jul 2024 00:03:13 +0000
asID:                     131717
IP address blocks:        45.118.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ae:2d:d4:db:df:72:39:a1:9d:03:a2:9e:dd:e4:f2:b3:d9:4f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Jul 30 23:58:13 2023 GMT
            Not After : Jul 29 00:03:13 2024 GMT
        Subject: CN=6B5474CF63C1B3E32E5381D27E1E5BB41582CEDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:2b:a0:d6:d4:39:85:07:62:28:a9:a1:89:
                    89:78:b5:73:fb:62:c4:e0:dc:32:1e:5f:3a:be:1c:
                    09:ee:a8:30:df:9a:8a:b6:d8:3c:42:62:4b:da:c5:
                    5a:07:a3:e7:b9:52:13:2c:4d:23:c3:56:25:ee:09:
                    4b:f9:10:d9:b2:be:31:b0:1d:14:4d:a6:ee:76:c0:
                    fe:34:f0:35:f7:21:59:86:ab:61:72:91:66:bb:81:
                    a1:1a:ca:66:43:0f:67:3e:c5:7f:01:bb:1d:50:27:
                    81:d8:b0:fa:08:6b:a1:b2:7a:32:8c:7e:9a:85:25:
                    8b:ca:d4:20:c5:89:05:a1:38:81:69:0b:60:65:68:
                    43:5f:b2:58:d7:17:80:d6:a5:59:6e:e2:a8:cf:d9:
                    c2:76:40:27:d2:4e:4b:2d:bb:da:d9:ef:0a:eb:8b:
                    45:4b:9c:a6:da:5f:c7:bf:66:bd:33:39:94:dc:00:
                    98:19:75:c8:29:f3:23:c8:75:41:3a:34:40:d7:e1:
                    f4:85:d4:68:39:c8:82:89:c6:49:a7:c6:98:35:a4:
                    e3:dc:d6:a2:06:f7:7a:68:04:ab:54:6b:8b:9d:11:
                    e3:7d:03:c9:a8:8e:0b:8c:3d:e7:af:8a:b0:52:88:
                    b2:11:21:e9:8d:72:39:9f:39:20:6d:00:8e:f3:30:
                    e0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:54:74:CF:63:C1:B3:E3:2E:53:81:D2:7E:1E:5B:B4:15:82:CE:DA
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.118.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:b9:dc:44:f7:ae:4e:05:84:52:53:a8:04:23:a6:d7:2f:0a:
         9f:06:74:05:44:2a:73:61:db:8e:6e:ab:0f:e9:a8:36:23:0b:
         64:60:8a:8e:54:11:86:12:25:ce:8e:95:e5:0f:26:b0:27:70:
         d4:f7:06:d1:96:ac:0a:2a:46:86:88:18:f0:b5:7a:10:ff:27:
         37:c9:d0:b0:14:2c:a5:52:66:5e:3d:44:ec:77:e4:48:83:53:
         82:d9:8f:62:1a:46:83:a1:ea:8f:e7:57:3d:b5:be:03:ce:a7:
         ba:9a:cf:fd:36:cf:67:7e:53:e7:4b:23:14:e1:c9:ff:08:9b:
         0c:44:24:c2:9f:02:94:df:4b:2e:5b:0e:f2:ea:0c:94:f6:bc:
         56:5b:c3:21:52:2b:9c:21:86:0d:41:80:5b:cb:17:43:cd:cc:
         c0:bf:68:c0:f0:8d:ad:6a:e8:0f:ef:cc:db:37:14:2f:ff:b0:
         ef:3e:a5:a4:4d:26:10:fa:fd:ae:54:e5:c5:e4:b3:f3:2f:80:
         d2:0c:67:92:54:11:97:07:52:07:cb:7c:70:44:97:65:a7:87:
         b9:66:c5:2f:a2:53:de:24:16:de:74:a7:03:df:5f:54:db:7a:
         7a:aa:4e:20:f6:8e:60:73:2c:eb:ea:fd:0c:18:83:66:37:9e:
         86:7b:93:ec
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUP64t1NvfcjmhnQOint3k8rPZT3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4
MTg2NTA4NzAeFw0yMzA3MzAyMzU4MTNaFw0yNDA3MjkwMDAzMTNaMDMxMTAvBgNV
BAMTKDZCNTQ3NENGNjNDMUIzRTMyRTUzODFEMjdFMUU1QkI0MTU4MkNFREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlSug1tQ5hQdiKKmhiYl4tXP7
YsTg3DIeXzq+HAnuqDDfmoq22DxCYkvaxVoHo+e5UhMsTSPDViXuCUv5ENmyvjGw
HRRNpu52wP408DX3IVmGq2FykWa7gaEaymZDD2c+xX8Bux1QJ4HYsPoIa6GyejKM
fpqFJYvK1CDFiQWhOIFpC2BlaENfsljXF4DWpVlu4qjP2cJ2QCfSTkstu9rZ7wrr
i0VLnKbaX8e/Zr0zOZTcAJgZdcgp8yPIdUE6NEDX4fSF1Gg5yIKJxkmnxpg1pOPc
1qIG93poBKtUa4udEeN9A8mojguMPeevirBSiLIRIemNcjmfOSBtAI7zMODdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUa1R0z2PBs+MuU4HSfh5btBWCztowHwYDVR0j
BBgwFoAUiCIJ43NW4FEvvk6BsA5PJIGGUIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MDc0NzFhMy1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMC84ODIyMDlFMzcz
NTZFMDUxMkZCRTRFODFCMDBFNEYyNDgxODY1MDg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4MTg2
NTA4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05
ZjJkLWNmMTZiMWU0YTM1My8wLzM0MzUyZTMxMzEzODJlMzEzMTMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXZwMA0GCSqG
SIb3DQEBCwUAA4IBAQBdudxE965OBYRSU6gEI6bXLwqfBnQFRCpzYduObqsP6ag2
IwtkYIqOVBGGEiXOjpXlDyawJ3DU9wbRlqwKKkaGiBjwtXoQ/yc3ydCwFCylUmZe
PUTsd+RIg1OC2Y9iGkaDoeqP51c9tb4Dzqe6ms/9Ns9nflPnSyMU4cn/CJsMRCTC
nwKU30suWw7y6gyU9rxWW8MhUiucIYYNQYBbyxdDzczAv2jA8I2taugP78zbNxQv
/7DvPqWkTSYQ+v2uVOXF5LPzL4DSDGeSVBGXB1IHy3xwRJdlp4e5ZsUvolPeJBbe
dKcD319U23p6qk4g9o5gcyzr6v0MGINmN56Ge5Ps
-----END CERTIFICATE-----
Generated at Fri Apr 26 00:39:43 2024 by rpki-client on console-fra.rpki-client.org