Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/34352e3132362e38302e302f32332d3234203d3e20313335343738.roa
File:                     34352e3132362e38302e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          Qm7Sw3QRs5OpsE2bcmOv2TPw0a8GPxdNL4locbCH/Wo=
Subject key identifier:   E3:DF:14:AC:FE:F2:CD:D0:5B:17:58:D6:88:99:6D:A6:68:AA:7D:89
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       BDA561D40AEB0BED0322EA4D349D7FDA5FF2DB
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/34352e3132362e38302e302f32332d3234203d3e20313335343738.roa
Signing time:             Mon 31 Jul 2023 00:02:22 +0000
ROA not before:           Sun 30 Jul 2023 23:57:22 +0000
ROA not after:            Mon 29 Jul 2024 00:02:22 +0000
asID:                     135478
IP address blocks:        45.126.80.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bd:a5:61:d4:0a:eb:0b:ed:03:22:ea:4d:34:9d:7f:da:5f:f2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:22 2023 GMT
            Not After : Jul 29 00:02:22 2024 GMT
        Subject: CN=E3DF14ACFEF2CDD05B1758D688996DA668AA7D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:20:10:0b:ce:08:8f:c7:6d:9c:f4:ce:d1:
                    33:c7:c6:0c:24:cb:f1:8a:97:a0:c0:76:23:cf:47:
                    1c:3b:e5:c6:a2:45:1c:f1:1d:7c:61:72:9c:78:11:
                    a6:fd:46:dd:ff:eb:ec:24:4d:cc:3d:c9:54:42:34:
                    52:d7:2f:06:33:1c:fc:68:18:a4:c2:ac:43:e8:89:
                    61:2f:96:95:00:68:e0:69:59:69:12:43:8e:e1:4b:
                    4c:f0:15:71:99:8d:b2:09:b3:56:d9:3d:5b:63:cb:
                    5b:22:d5:a0:d8:d1:1f:7b:63:54:94:92:8a:14:75:
                    e1:87:8a:3d:4f:40:ca:8e:4c:67:aa:a4:81:9b:30:
                    ed:61:6c:12:15:72:48:9c:36:d1:25:a0:a1:18:db:
                    3a:0b:a5:de:f4:35:a0:1f:51:7f:5a:fe:90:7b:3a:
                    e9:63:90:a4:28:a8:ce:38:5a:69:f1:b8:9d:e1:dd:
                    37:d8:89:14:cc:c7:e9:a2:91:ea:2e:a9:8a:05:3b:
                    b3:03:4b:9a:89:0f:d0:26:d0:7b:cf:35:2b:1b:57:
                    91:9d:c1:ee:37:08:5b:c1:e1:43:20:af:fc:db:94:
                    eb:3e:3b:27:ef:f4:8e:a2:23:a2:dd:79:6b:0e:2f:
                    39:02:3a:f4:e2:62:ae:5b:0a:e2:2c:9c:da:af:b2:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DF:14:AC:FE:F2:CD:D0:5B:17:58:D6:88:99:6D:A6:68:AA:7D:89
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/34352e3132362e38302e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:2d:d9:5e:a4:35:0a:58:63:bd:2a:12:84:c4:e7:25:f4:af:
         06:f3:06:bb:65:ab:7c:6c:89:1c:ec:ee:b1:5d:54:01:f6:fe:
         cb:a1:9e:4c:3c:4d:78:66:5c:41:e6:24:01:9b:ce:ae:56:86:
         30:8b:82:45:2e:37:5e:65:63:b7:5d:87:b4:b6:94:5b:59:9f:
         33:20:b3:dd:d8:91:a3:fe:cc:ae:53:b8:40:9e:24:b9:d6:23:
         05:82:c8:37:3f:1e:c4:3d:00:c8:f4:e4:60:03:d0:3c:32:7b:
         c6:f3:fc:34:26:32:83:dc:71:1e:a2:eb:74:e5:88:8e:85:07:
         d9:a1:29:3e:04:92:b7:04:40:e6:40:c4:ca:64:98:ee:f0:67:
         97:02:08:48:64:ca:3d:82:1c:89:68:7f:24:47:fd:40:bd:65:
         b8:96:61:53:84:ec:64:47:2d:77:cc:08:0e:48:20:05:fd:65:
         cc:91:94:0e:9c:16:20:a6:cd:cf:73:4c:06:fc:47:f8:62:55:
         4b:a4:18:5f:aa:17:37:b2:12:a8:55:e6:0b:e2:c7:9f:a0:b5:
         e3:38:21:ad:da:a6:de:64:49:d6:a5:f3:40:46:33:63:a7:f8:
         5e:a5:e6:3e:1b:2a:4b:86:a0:08:9c:4e:f5:55:01:eb:bc:fb:
         40:dd:fd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:36:30 2024 by rpki-client on console-fra.rpki-client.org