Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137382e302f32342d3234203d3e203535363930.roa
File:                     34322e36322e3137382e302f32342d3234203d3e203535363930.roa (raw, json)
Hash identifier:          1ZKcpMmJqaU3gGp5GNF27GAvGl7mJPmDYDXPl0ljM1I=
Subject key identifier:   3E:3B:CC:1A:28:9E:F3:AF:F2:96:98:9A:62:6E:6E:36:0A:E7:59:EC
Certificate issuer:       /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Certificate serial:       3BF17224AAF3C4750C80B6EAEA92B2EB68D35F27
Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137382e302f32342d3234203d3e203535363930.roa
Signing time:             Tue 09 Apr 2024 10:01:10 +0000
ROA not before:           Tue 09 Apr 2024 09:56:10 +0000
ROA not after:            Tue 08 Apr 2025 10:01:10 +0000
asID:                     55690
IP address blocks:        42.62.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
                          rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Mar 2025 21:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f1:72:24:aa:f3:c4:75:0c:80:b6:ea:ea:92:b2:eb:68:d3:5f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
        Validity
            Not Before: Apr  9 09:56:10 2024 GMT
            Not After : Apr  8 10:01:10 2025 GMT
        Subject: CN=3E3BCC1A289EF3AFF296989A626E6E360AE759EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:8b:f6:58:a9:e0:ac:3e:e9:49:5e:87:63:
                    f7:6b:2a:d8:89:a4:37:5c:45:22:d4:aa:7e:5e:a1:
                    45:02:1d:bb:fc:95:d6:91:ee:a1:25:f8:3a:08:52:
                    e5:ac:15:c8:d9:ec:9d:50:b7:cd:1b:e9:39:b3:3c:
                    7d:67:57:b5:83:d5:08:eb:51:4e:2d:54:99:78:d9:
                    5c:d4:75:13:ad:37:03:27:53:a6:35:3d:54:65:bf:
                    10:99:d7:cf:e3:c1:0f:e7:75:41:74:09:e2:26:df:
                    a5:dd:b2:23:cb:b5:31:75:4d:ee:ee:9f:ec:f4:8a:
                    0e:d0:ff:f5:45:e4:8a:80:41:9b:48:d5:e0:48:bf:
                    30:e7:64:47:56:7e:ed:87:48:9a:a6:57:71:d9:7b:
                    69:19:05:cf:e3:36:4f:a5:57:08:a7:15:d6:fc:2d:
                    4e:a1:0e:4e:2f:f5:a3:2d:d2:34:af:e9:21:c5:f9:
                    d2:55:97:d8:4f:d3:8d:69:2a:e9:89:6d:41:81:7a:
                    82:06:9b:83:85:69:58:3e:27:f7:73:32:89:8b:72:
                    f6:b8:3e:c9:f0:d6:c3:8d:59:8a:46:4c:b8:7c:a7:
                    18:17:07:79:10:1b:7d:22:af:32:1a:46:d6:d2:68:
                    78:82:be:8f:6c:6a:b9:7d:82:e8:a9:82:2d:ee:86:
                    ef:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3B:CC:1A:28:9E:F3:AF:F2:96:98:9A:62:6E:6E:36:0A:E7:59:EC
            X509v3 Authority Key Identifier:
                keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137382e302f32342d3234203d3e203535363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:26:f1:0f:1c:27:cb:b4:69:6e:54:08:68:45:49:a2:d1:39:
         12:02:18:bb:c3:96:a4:3d:00:18:b4:e9:34:fd:84:d7:a3:1b:
         fa:ee:72:0a:3c:e3:9c:5c:33:ca:9e:ea:77:44:52:5d:d7:b7:
         53:69:67:c3:9b:4f:47:99:ee:88:7d:4c:cf:d7:d0:36:a1:a4:
         a4:6a:b6:b3:61:af:e5:6c:24:ec:3a:20:28:7b:9d:96:85:4e:
         5f:a2:8b:16:b5:51:f2:eb:9b:9e:af:4c:5d:b5:d8:2e:11:ac:
         7d:a5:74:df:96:03:45:ad:54:ff:5b:25:d8:d3:f1:28:74:89:
         c0:27:e8:98:e5:25:cc:8f:4d:ef:25:7e:5d:a2:99:9c:0e:37:
         94:b2:c3:dd:5b:e1:73:b2:31:9f:41:60:d2:4d:47:ce:75:dc:
         cb:9e:3e:95:78:31:ac:33:b6:85:47:83:9f:1f:0c:0d:e5:b4:
         fb:68:71:94:a7:b9:d0:7d:6c:7e:9e:8f:c8:f6:84:0f:cd:d7:
         cf:cb:76:92:a0:17:bb:f2:0c:ce:b1:ef:a7:c8:3b:79:00:bc:
         f5:7a:65:2b:1b:97:0b:95:dc:c8:a5:40:0e:1a:d4:29:45:fc:
         25:68:b2:48:49:83:66:97:1e:43:97:68:23:39:8f:b6:42:76:
         70:2e:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:03 2025 by rpki-client