Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34372e302f32342d3234203d3e20313338383838.roa
File:                     33362e35302e34372e302f32342d3234203d3e20313338383838.roa (raw, json)
Hash identifier:          fz83fAQNZ6LIg2KoJilnb9N/Vfy7mhurHRooAOvm+QY=
Subject key identifier:   B5:79:DB:C4:B3:32:2D:D3:F3:08:13:11:95:C9:87:DA:14:CC:09:BB
Certificate issuer:       /CN=E380AA52674666F5E074BF511BB72FA0713E5270
Certificate serial:       51EDCFED07EFA8989C66ABDAD7D43AECEFD55545
Authority key identifier: E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34372e302f32342d3234203d3e20313338383838.roa
Signing time:             Wed 11 Dec 2024 06:01:08 +0000
ROA not before:           Wed 11 Dec 2024 05:56:08 +0000
ROA not after:            Wed 10 Dec 2025 06:01:08 +0000
asID:                     138888
IP address blocks:        36.50.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl
                          rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Feb 2025 18:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ed:cf:ed:07:ef:a8:98:9c:66:ab:da:d7:d4:3a:ec:ef:d5:55:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E380AA52674666F5E074BF511BB72FA0713E5270
        Validity
            Not Before: Dec 11 05:56:08 2024 GMT
            Not After : Dec 10 06:01:08 2025 GMT
        Subject: CN=B579DBC4B3322DD3F308131195C987DA14CC09BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:53:cd:b0:e5:da:cf:6d:c8:2b:b5:11:87:
                    59:e6:b1:c6:5a:9d:14:69:73:e0:60:05:e6:83:8c:
                    9e:77:82:41:3a:66:12:12:8e:81:3b:74:ad:23:3d:
                    90:05:98:ad:11:3f:0c:0d:61:b5:4a:00:a2:fd:5d:
                    03:ab:fd:f7:84:a0:b5:99:90:f9:9b:a1:4b:ac:c8:
                    c2:fc:86:6d:cb:87:4d:5e:63:bb:53:a1:ca:2b:29:
                    8b:89:fb:eb:ea:4c:12:94:17:64:f7:f4:17:6d:e6:
                    2d:27:e9:47:69:b7:f5:79:53:54:8c:fd:d7:65:9c:
                    44:6c:ab:15:a6:f8:63:08:6f:8b:59:a5:0a:7e:7d:
                    80:65:0c:ca:1b:39:d8:7d:d9:f9:16:40:65:00:72:
                    ad:10:39:af:c4:a8:1e:83:99:be:8b:78:83:85:f8:
                    92:22:19:b0:c5:61:63:3b:58:89:55:e9:f5:10:16:
                    62:ab:7a:20:81:b6:ea:5d:84:53:09:f4:ff:97:64:
                    cd:75:5d:86:eb:78:52:ed:4a:82:26:75:b4:6a:bc:
                    bb:ca:50:90:f7:0e:a7:7f:9d:8c:4d:16:e1:79:b7:
                    a9:14:8a:cd:76:c1:5d:3e:99:e3:dc:08:95:ab:8d:
                    a4:e2:46:4b:7e:b8:97:ac:3d:3b:d3:f3:77:65:e6:
                    e9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:79:DB:C4:B3:32:2D:D3:F3:08:13:11:95:C9:87:DA:14:CC:09:BB
            X509v3 Authority Key Identifier:
                keyid:E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34372e302f32342d3234203d3e20313338383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:fc:ea:db:97:3b:2c:e5:90:4c:68:6d:ea:82:c3:ae:48:cd:
         f5:cf:21:52:f1:19:57:6c:ea:9f:df:0e:4d:d3:34:51:67:a9:
         89:32:cf:b2:3a:d8:f5:dc:3b:3c:81:8c:8e:27:fd:0f:2a:42:
         c5:42:d3:ce:b1:43:0e:aa:aa:56:8c:74:16:09:4d:99:09:8a:
         2a:5c:d6:a7:cc:0a:be:b9:01:2d:b7:83:c9:3f:47:48:34:08:
         ea:43:33:33:5e:3e:f3:24:d7:01:c3:6f:52:d3:64:1f:a5:03:
         ff:d8:e3:33:d0:fd:78:ac:b9:8a:21:4f:0a:99:ec:14:83:3e:
         14:17:ad:2d:67:b3:71:e0:35:84:2a:a0:ed:26:d6:cf:41:47:
         e1:fa:00:0f:16:80:e8:83:c4:d0:a1:97:92:c0:2a:35:dd:75:
         63:0f:2c:30:64:a3:56:cc:d4:94:92:92:08:12:35:ea:a2:08:
         21:32:12:3f:f9:59:69:1c:32:35:a8:da:0b:7f:e9:91:8b:6e:
         d1:9c:81:ab:de:9f:f9:18:9d:f0:1f:74:a8:9e:f3:7f:be:0f:
         c7:bd:fe:6f:4e:b0:5d:3e:85:b9:99:41:30:b1:cf:9e:10:21:
         4e:5a:60:3d:91:78:e0:77:35:82:8f:83:33:80:21:e1:57:4a:
         24:a1:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 30 13:55:06 2025 by rpki-client on console-fra.rpki-client.org