Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138382e302f32342d3234203d3e203234353334.roa
File:                     35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier:          oH9bgVrT3gaDslqQL3ake7uI9o0l2J1Fb4XrkqO/Txw=
Subject key identifier:   9A:D9:F3:4A:33:38:2B:97:8F:42:07:F5:19:91:80:D7:A6:98:CB:F3
Certificate issuer:       /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial:       70F118FA886D050042F9346259DC0F479ED3BF7E
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138382e302f32342d3234203d3e203234353334.roa
Signing time:             Sat 19 Aug 2023 11:00:01 +0000
ROA not before:           Sat 19 Aug 2023 10:55:01 +0000
ROA not after:            Sat 17 Aug 2024 11:00:01 +0000
asID:                     24534
IP address blocks:        58.147.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
                          rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 23:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f1:18:fa:88:6d:05:00:42:f9:34:62:59:dc:0f:47:9e:d3:bf:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
        Validity
            Not Before: Aug 19 10:55:01 2023 GMT
            Not After : Aug 17 11:00:01 2024 GMT
        Subject: CN=9AD9F34A33382B978F4207F5199180D7A698CBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a4:9f:67:d5:0e:63:b3:65:97:80:98:e1:41:
                    5d:d2:bd:ec:f0:82:e2:1c:ba:81:1c:54:27:0b:37:
                    0f:37:7f:ee:98:70:57:a2:e4:b5:22:16:97:9c:bd:
                    62:bb:e1:67:99:6d:93:94:db:e6:6c:a4:06:c9:62:
                    c7:1a:ff:89:1c:22:4f:0e:d7:da:30:a9:ad:f7:3e:
                    a4:f0:d7:a5:c4:fd:4b:97:2d:87:b4:18:b1:98:dc:
                    3a:c1:d5:3a:43:0f:bc:dd:21:bd:a7:36:59:62:92:
                    e2:80:6e:bc:12:30:81:f1:2b:5d:88:4a:c8:ca:4c:
                    54:bc:7f:d3:81:e4:41:35:a3:ee:bd:52:00:a9:ad:
                    2c:b3:27:77:de:61:ac:40:d7:21:20:ac:89:9f:a6:
                    61:92:ac:c9:94:52:61:aa:1a:94:c5:56:74:a2:9e:
                    0a:66:a5:95:35:e5:02:6b:7f:26:ea:e1:29:f6:a0:
                    a0:73:de:fa:61:e0:c7:64:d1:df:16:7a:9b:b9:e9:
                    f5:ff:90:47:19:e1:c5:eb:27:fd:6e:ad:de:6e:a2:
                    17:17:36:d2:aa:20:0a:29:48:63:b6:69:eb:fa:0b:
                    52:a5:e4:7a:6d:5a:f8:7d:6d:b1:45:e3:9d:b3:5c:
                    7f:64:9e:a5:5e:2e:58:2a:1b:f1:34:67:dd:c1:c6:
                    73:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D9:F3:4A:33:38:2B:97:8F:42:07:F5:19:91:80:D7:A6:98:CB:F3
            X509v3 Authority Key Identifier:
                keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138382e302f32342d3234203d3e203234353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.147.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:df:e4:d6:d5:00:3e:c0:bb:66:e4:23:44:cf:99:08:c4:24:
         63:da:d1:6e:64:ba:a9:4b:23:4b:0d:d9:a3:87:a2:cb:06:0b:
         2c:f9:e9:fc:17:9c:ab:8b:91:49:42:2a:81:93:93:a4:09:24:
         f8:e3:39:dd:13:7e:d9:c9:ee:b7:fb:d1:09:29:4f:fa:40:9f:
         ae:53:5f:60:27:ba:6c:32:5a:11:73:b6:1f:7d:9c:90:8f:5e:
         3d:35:47:d5:29:f7:5a:91:d8:58:16:fa:b9:20:c7:d9:b3:72:
         8f:7d:ca:28:43:a6:9b:3d:88:1a:0a:6e:f2:4c:4c:f2:ad:93:
         80:6a:64:0b:ab:ad:9f:a6:b9:88:84:a1:67:15:eb:d7:32:7d:
         31:22:d8:f0:f9:63:4d:7e:2e:ad:03:80:ae:2d:4c:59:85:f7:
         dc:c6:c7:83:0f:27:ae:5b:36:e0:83:79:90:20:7d:0f:2b:9c:
         0a:9b:fb:d4:13:7b:ef:3d:2f:2c:5b:b7:ad:1b:6d:49:a7:16:
         56:11:21:8f:30:33:d3:fc:5c:e1:30:77:c3:62:83:28:a6:19:
         17:30:07:da:aa:31:3f:16:1f:97:0f:6e:5c:09:8a:82:4f:4c:
         aa:71:56:a9:09:ac:37:e2:c5:e7:90:b0:e4:36:bd:ea:11:20:
         1a:2a:ce:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:07:55 2024 by rpki-client on console-ams.rpki-client.org