Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32332d3233203d3e203538333639.roa
File:                     34352e3131322e3132342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          QYrmUsBRMzj0znGWFpde8n25JKm21dLtl3NAkr8Wb1g=
Subject key identifier:   85:14:35:8A:9D:C0:BB:C2:4B:23:87:83:AE:20:C4:EB:3A:C4:35:EC
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       7D4EABBEAD6922014E5673C3E1493409C19614A1
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:35 +0000
ROA not before:           Mon 02 Jun 2025 01:58:35 +0000
ROA not after:            Mon 01 Jun 2026 02:03:35 +0000
asID:                     58369
IP address blocks:        45.112.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4e:ab:be:ad:69:22:01:4e:56:73:c3:e1:49:34:09:c1:96:14:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:35 2025 GMT
            Not After : Jun  1 02:03:35 2026 GMT
        Subject: CN=8514358A9DC0BBC24B238783AE20C4EB3AC435EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:e3:76:a3:1f:21:a4:1c:53:28:51:2c:2a:
                    78:35:40:bf:ed:3e:dd:16:ac:2d:aa:61:bc:fe:d0:
                    ba:14:e9:8d:bf:c2:52:5c:29:12:ce:d4:4b:6b:f0:
                    6c:4b:f1:2f:af:6f:a2:7e:f9:3c:46:5d:4f:53:26:
                    ea:f0:42:57:ca:82:59:45:13:e4:49:f5:93:1c:3d:
                    3a:c3:4a:b1:8a:00:df:2d:e9:a7:d4:4e:57:fb:ab:
                    14:49:7e:16:f3:b4:26:5a:7b:c3:e6:0e:83:ee:5b:
                    93:d6:33:a3:8b:9b:a7:13:d6:ad:69:22:90:af:62:
                    69:7e:08:65:9d:70:fc:ca:8e:d8:ce:25:be:00:49:
                    2e:90:ac:bd:53:bb:40:27:da:7f:a0:1b:54:b3:8b:
                    5e:9f:eb:5a:14:db:fb:8e:a3:d3:1b:d1:ce:5b:eb:
                    20:c6:71:0f:cd:9e:e5:ca:46:23:d5:85:1c:f8:77:
                    1f:29:3e:f2:d1:15:43:84:d4:50:29:1c:5d:1f:99:
                    97:62:b0:12:20:dc:ee:83:45:d8:e6:fd:45:9d:cc:
                    91:4e:33:d6:87:56:96:93:3d:36:47:5a:17:d8:a1:
                    74:8d:1b:0e:e1:4d:72:6f:16:54:a7:77:61:6a:c1:
                    bd:fd:25:7b:2b:8f:fe:9b:79:b7:fd:fe:e0:59:c3:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:14:35:8A:9D:C0:BB:C2:4B:23:87:83:AE:20:C4:EB:3A:C4:35:EC
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:59:6a:6c:5c:d0:d8:89:81:b1:97:77:b3:ea:d4:e3:8c:64:
         60:4e:97:c9:de:3e:e9:61:17:c4:c8:d2:4b:d6:60:25:2b:e6:
         80:32:df:fb:79:45:8b:54:9d:dc:53:b2:1e:77:f5:5c:49:76:
         8c:88:3a:f8:96:77:87:b3:ee:41:bc:df:d6:d2:eb:90:77:da:
         53:e8:91:8d:6e:10:44:d0:c6:b2:db:23:b6:56:2b:08:94:f5:
         e9:e9:ee:46:fd:8a:d6:ce:df:7c:86:4f:73:ce:ba:bb:fb:09:
         ee:ad:00:e8:4c:3f:e9:ab:7f:d7:2d:63:2c:a6:35:59:12:82:
         04:43:21:88:06:15:c5:85:81:0b:f9:94:d9:39:46:9c:c3:90:
         70:88:69:b8:d0:3d:7c:d9:c4:73:5e:f4:06:88:43:6f:8c:73:
         e1:c1:31:aa:f6:7f:74:8d:93:ca:c7:83:be:b2:7c:bd:e1:5d:
         d1:a5:e3:14:83:e7:51:2b:46:bf:86:38:70:84:d8:6e:74:1d:
         4b:e2:43:ba:a7:83:5d:d5:30:fb:7b:1a:8f:60:33:0f:74:c8:
         7a:26:7c:a8:12:b6:10:a1:82:22:fc:e5:28:3b:89:66:e6:d8:
         ad:02:dd:43:b0:a1:6b:22:58:cf:2e:3f:a6:2c:43:e5:2d:ad:
         60:bf:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:14:53 2025 by rpki-client