Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137392e302f32342d3234203d3e203535363930.roa
File:                     34322e36322e3137392e302f32342d3234203d3e203535363930.roa (raw, json)
Hash identifier:          3hwpy39XhirYg2tadrZdtMSMp8YXWHScWmYnSuAnOF4=
Subject key identifier:   38:5A:B6:A6:8E:31:5A:8E:0B:F4:6F:16:01:72:85:B7:F2:F1:21:16
Certificate issuer:       /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Certificate serial:       5419F4AC60F0BD8C1630EDE386575E2B3C0AFB5C
Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137392e302f32342d3234203d3e203535363930.roa
Signing time:             Tue 09 Apr 2024 10:01:10 +0000
ROA not before:           Tue 09 Apr 2024 09:56:10 +0000
ROA not after:            Tue 08 Apr 2025 10:01:10 +0000
asID:                     55690
IP address blocks:        42.62.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
                          rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 07:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:19:f4:ac:60:f0:bd:8c:16:30:ed:e3:86:57:5e:2b:3c:0a:fb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
        Validity
            Not Before: Apr  9 09:56:10 2024 GMT
            Not After : Apr  8 10:01:10 2025 GMT
        Subject: CN=385AB6A68E315A8E0BF46F16017285B7F2F12116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e8:e0:cb:de:57:20:99:74:bd:57:9a:3b:c9:
                    65:29:ac:e5:2b:04:d5:6c:ba:25:8b:6d:cb:7e:c5:
                    ca:b1:91:3a:a4:a0:d6:df:49:c8:81:91:79:2e:06:
                    a3:c2:fa:39:2c:dc:6f:81:b2:88:8a:b2:c4:24:9f:
                    f9:8e:f5:35:72:3e:07:8d:4c:5e:31:44:88:cd:30:
                    8a:6e:75:e0:71:5c:f6:a7:1a:e6:54:da:bb:ad:e8:
                    e4:15:e7:21:25:5d:20:ce:7a:ce:e6:3c:e8:0c:ea:
                    78:60:23:c1:6f:1e:fd:7c:11:52:8c:72:fb:f2:35:
                    bf:aa:bd:d0:2e:3a:c2:37:be:78:99:fc:f3:8d:4b:
                    a7:d8:26:4e:f5:87:19:2b:69:f9:52:e8:61:de:0e:
                    72:e7:c5:9c:1f:b4:88:3f:17:63:f1:7e:6a:b4:c2:
                    55:eb:1b:33:10:4f:e8:2b:19:5d:df:73:f2:f4:1a:
                    07:5c:31:88:82:df:b1:87:65:5b:1c:dd:43:1d:66:
                    35:98:d3:0c:f4:79:fb:3b:df:74:67:fb:2e:a7:34:
                    af:4f:70:cd:a8:d2:ec:9b:84:17:27:83:c8:58:fd:
                    43:f7:dc:ae:f0:a8:bd:ed:02:5b:0d:e1:e6:3e:68:
                    17:00:b7:04:76:8b:fb:52:b6:e1:05:36:22:b0:78:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5A:B6:A6:8E:31:5A:8E:0B:F4:6F:16:01:72:85:B7:F2:F1:21:16
            X509v3 Authority Key Identifier:
                keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137392e302f32342d3234203d3e203535363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:ed:72:0f:35:cb:99:de:49:d1:5e:27:a6:f5:d5:a2:b0:8a:
         dd:55:ce:9f:59:26:04:11:06:5c:22:7b:37:c9:15:68:d0:89:
         88:d5:50:8f:43:b0:c0:91:8a:ae:e4:11:2c:28:3b:62:d8:10:
         34:a7:c5:2f:ed:ac:b0:b1:f4:95:dd:06:7f:65:f9:89:d5:29:
         bb:2d:68:f8:9c:6f:df:36:a5:c2:59:9b:b5:d4:6e:1d:b3:59:
         45:7e:66:5c:f2:0a:a5:fb:70:7c:8c:10:0c:45:e0:5a:68:0f:
         f3:58:7a:43:26:aa:0f:4b:8a:a1:79:bb:2d:26:02:43:08:0a:
         7b:d9:06:2e:30:ea:c4:fa:37:07:12:67:66:55:a5:ee:b4:53:
         63:f6:30:9f:45:89:c1:66:36:ab:55:ea:af:89:fa:f4:16:a0:
         d6:7d:30:ba:1e:1d:05:81:12:80:6a:4a:f0:8d:be:bf:d0:b3:
         32:4d:a1:67:47:42:97:7a:ca:46:73:09:84:d9:b8:bf:79:a9:
         32:12:96:a4:75:fb:47:4d:e3:09:35:bd:f9:7e:e8:c7:db:02:
         65:c0:ab:6c:f1:b9:2a:12:66:81:c4:da:3c:aa:34:bd:d8:8e:
         cf:eb:7b:58:38:ee:1f:cf:1e:3f:c3:26:05:9b:91:6a:a4:5d:
         12:29:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org