Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137362e302f32342d3234203d3e203535363930.roa
File:                     34322e36322e3137362e302f32342d3234203d3e203535363930.roa (raw, json)
Hash identifier:          TBYiidUmRB4B4AnNGe8/OkhNHvV8B02mLtlF0GlENt0=
Subject key identifier:   7C:3A:AE:48:F5:FD:03:64:51:84:71:6A:8A:68:4B:96:ED:F5:02:12
Certificate issuer:       /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Certificate serial:       1645EC332DF15DB4A689D940F31DD4F87D646303
Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137362e302f32342d3234203d3e203535363930.roa
Signing time:             Tue 09 Apr 2024 10:01:10 +0000
ROA not before:           Tue 09 Apr 2024 09:56:10 +0000
ROA not after:            Tue 08 Apr 2025 10:01:10 +0000
asID:                     55690
IP address blocks:        42.62.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
                          rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 07:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:45:ec:33:2d:f1:5d:b4:a6:89:d9:40:f3:1d:d4:f8:7d:64:63:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
        Validity
            Not Before: Apr  9 09:56:10 2024 GMT
            Not After : Apr  8 10:01:10 2025 GMT
        Subject: CN=7C3AAE48F5FD03645184716A8A684B96EDF50212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0e:f5:e8:00:23:f3:09:87:b6:3d:f6:66:b2:
                    f0:50:ff:98:13:98:25:96:9e:a7:62:29:53:03:0f:
                    3c:41:47:88:e1:d8:73:1d:38:e3:6f:23:04:da:7b:
                    d4:66:b8:03:a9:75:22:8c:1a:ed:29:d8:9d:d4:89:
                    72:c3:b9:9a:89:1b:da:0a:92:12:59:ad:18:97:66:
                    6e:f0:3d:3a:93:ec:da:91:ef:18:4c:58:ec:aa:f3:
                    5a:3c:37:8e:32:dd:23:e1:6a:94:ab:b0:11:b2:bd:
                    80:64:13:32:a6:18:1e:f5:ac:50:71:5e:19:2f:80:
                    50:f5:d3:64:39:0b:11:c0:04:51:38:2b:22:fd:f4:
                    58:d8:18:2e:86:11:21:fb:a7:e7:76:54:69:15:a4:
                    67:37:f4:b7:39:f5:bc:18:3c:f5:7a:db:fb:ca:a4:
                    77:9e:7a:0d:45:7d:68:d8:b7:33:04:42:ed:c3:ce:
                    a4:d6:1a:62:23:2e:45:d4:6a:a5:58:f6:24:ed:a0:
                    65:b3:ab:5c:54:1e:60:42:68:5c:9b:25:30:b8:93:
                    72:30:a2:9a:53:b8:e0:53:71:67:21:2d:eb:f0:df:
                    75:9d:b1:0d:c2:03:52:0e:dc:45:e1:72:ec:3a:da:
                    c1:4e:c7:a2:94:dd:9c:1b:b7:89:3a:ab:2f:94:b1:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3A:AE:48:F5:FD:03:64:51:84:71:6A:8A:68:4B:96:ED:F5:02:12
            X509v3 Authority Key Identifier:
                keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137362e302f32342d3234203d3e203535363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:81:47:f7:1e:35:a1:b5:e4:d3:ad:9f:ba:e6:fd:46:06:9f:
         22:bf:73:38:03:b8:ae:df:ef:8a:8b:e0:44:38:f6:2c:79:f7:
         6d:84:6c:c0:4b:d7:fe:42:50:ce:52:2c:7e:cd:d5:2b:c7:83:
         db:0b:4a:98:7f:15:9a:b0:cd:b5:46:2b:7c:a2:74:8b:8c:b7:
         ce:06:0e:33:20:68:c2:6c:4d:eb:cd:4a:c7:f3:02:da:c0:f0:
         42:d3:5b:b3:e1:09:d5:c4:ca:3a:dd:5a:06:88:82:aa:44:86:
         6d:31:66:55:3f:53:75:7a:cd:31:9a:d4:83:4c:7b:0b:21:41:
         a9:c0:35:45:3d:bb:2a:58:d3:15:42:d3:48:29:27:b4:35:90:
         aa:51:54:46:9e:52:9b:bc:a4:01:b8:2b:31:ec:b1:2f:43:b1:
         6d:ee:d3:a8:59:04:aa:a8:a6:a7:af:f0:c8:cd:f3:ed:ba:7b:
         61:a9:80:e2:38:b7:f6:48:08:9c:8c:98:7a:03:e1:82:34:85:
         a3:d3:bf:a6:5b:9f:ce:48:b8:a9:95:4c:5f:7a:7b:5c:22:68:
         21:54:27:21:33:ba:77:43:1f:57:63:44:60:03:55:c7:01:84:
         a0:59:94:7c:b0:8c:eb:77:eb:02:b2:b1:d5:39:57:e5:9d:42:
         73:68:f3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org