Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34362e302f32342d3234203d3e20313334363337.roa
File:                     33362e35302e34362e302f32342d3234203d3e20313334363337.roa (raw, json)
Hash identifier:          9VZiA9Thvqp82AiGM88mpiJT1+zVHNmVsr7RTpcRvKw=
Subject key identifier:   94:54:65:78:80:26:1B:66:81:C4:1C:09:2D:AB:66:D9:36:C6:73:34
Certificate issuer:       /CN=E380AA52674666F5E074BF511BB72FA0713E5270
Certificate serial:       72E2929A349B91C8C9404174154EBDCAA2A59994
Authority key identifier: E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34362e302f32342d3234203d3e20313334363337.roa
Signing time:             Mon 08 Apr 2024 02:48:28 +0000
ROA not before:           Mon 08 Apr 2024 02:43:28 +0000
ROA not after:            Mon 07 Apr 2025 02:48:28 +0000
asID:                     134637
IP address blocks:        36.50.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl
                          rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e2:92:9a:34:9b:91:c8:c9:40:41:74:15:4e:bd:ca:a2:a5:99:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E380AA52674666F5E074BF511BB72FA0713E5270
        Validity
            Not Before: Apr  8 02:43:28 2024 GMT
            Not After : Apr  7 02:48:28 2025 GMT
        Subject: CN=9454657880261B6681C41C092DAB66D936C67334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:1c:32:0a:29:22:00:08:fd:05:de:84:3d:
                    fe:50:cb:22:61:9a:a6:25:36:71:b2:69:aa:6d:d9:
                    25:6c:da:0c:fe:5c:77:99:de:41:c7:01:4c:36:46:
                    b7:ae:ff:a3:5d:2a:76:cb:78:1b:c6:d1:f5:43:9c:
                    04:26:02:13:5f:4d:bd:42:4e:0d:af:14:90:df:11:
                    c1:92:b6:12:7c:8b:5b:d6:ec:78:b9:38:48:54:ff:
                    5f:87:df:2b:12:24:72:e7:e0:b5:8b:26:26:3d:00:
                    88:04:bc:86:fc:3c:cc:91:a2:55:f9:23:74:9e:5b:
                    73:e6:5b:85:d4:16:a7:4f:2e:5e:bb:8f:f2:dd:e3:
                    89:5f:db:cc:e4:2b:74:b1:86:05:3c:c3:e8:e5:a3:
                    ba:d2:f3:69:62:10:43:40:6e:a6:de:9a:74:13:ad:
                    7a:12:02:88:55:9f:bc:a0:63:7a:27:f2:43:cf:ff:
                    dc:fc:55:1d:b8:83:84:bc:97:4f:59:76:6d:42:aa:
                    7c:99:27:8d:34:67:1f:19:6b:3f:77:b0:98:83:bf:
                    89:42:aa:c4:71:0d:63:97:c2:6b:8f:7a:69:3b:ad:
                    03:a5:44:6e:a8:6c:1c:b1:3e:91:c7:d1:4e:f9:55:
                    a5:6e:d3:02:8b:17:fd:89:41:00:9a:4a:7f:5e:bb:
                    ae:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:54:65:78:80:26:1B:66:81:C4:1C:09:2D:AB:66:D9:36:C6:73:34
            X509v3 Authority Key Identifier:
                keyid:E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34362e302f32342d3234203d3e20313334363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:94:cc:7b:d4:a2:8c:10:4c:eb:3d:19:7c:21:f1:d6:ee:23:
         ad:78:8e:16:87:90:d0:b4:e9:13:a3:f9:e7:dd:a6:29:6a:44:
         2f:b9:0e:33:e3:dd:59:6b:d8:7f:cd:f8:01:ef:72:d1:41:dd:
         29:38:40:e6:28:bb:f1:9b:e6:56:48:f9:b7:64:b5:88:8a:a4:
         08:8e:93:09:2b:32:9d:3c:8e:94:20:5a:f5:7a:45:e5:7e:8c:
         9d:91:83:a4:e2:9c:25:53:fd:e2:d5:cb:98:e5:a1:b8:24:ec:
         37:05:f5:47:07:5d:d8:c9:6d:05:71:47:70:41:83:41:24:27:
         4b:81:11:26:23:84:9c:1c:ab:c1:d8:98:9b:95:1a:ba:f2:64:
         ff:89:c4:88:b0:e9:e1:42:5b:84:a7:9f:5f:1b:0e:6b:00:48:
         d0:3a:95:b7:33:e9:08:57:a3:1a:ab:58:70:36:81:02:43:d9:
         9e:33:68:ae:83:65:37:04:46:69:21:f9:27:5e:91:ef:d5:12:
         d1:3f:9e:98:84:88:fd:e5:82:4e:ce:b9:b7:9d:c3:f2:f3:8e:
         76:25:a1:8f:37:e5:27:2f:89:5a:ab:e3:7a:99:34:80:91:54:
         a9:14:43:a6:72:18:5e:c9:ce:06:4e:44:fc:d6:93:ec:19:54:
         c8:25:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org