Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32342d3234203d3e203538333639.roa
File:                     34352e3131322e3132342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          NW7bq/y7fw4WGKwpbPaIMidef+eJkdQSg65SLqdjVxE=
Subject key identifier:   F6:B0:C3:DD:F6:BD:0A:DE:EC:A0:3D:41:16:FD:11:4C:66:30:0A:55
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       268B62DF2130CAB871B20007D68A54C0EA9C18FE
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:37 +0000
ROA not before:           Mon 02 Jun 2025 01:58:37 +0000
ROA not after:            Mon 01 Jun 2026 02:03:37 +0000
asID:                     58369
IP address blocks:        45.112.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8b:62:df:21:30:ca:b8:71:b2:00:07:d6:8a:54:c0:ea:9c:18:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:37 2025 GMT
            Not After : Jun  1 02:03:37 2026 GMT
        Subject: CN=F6B0C3DDF6BD0ADEECA03D4116FD114C66300A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:9d:8a:06:c5:f0:1c:64:6c:91:c2:4c:83:
                    da:4e:90:d6:70:a1:e8:83:a9:72:ab:9e:3f:e8:3d:
                    4b:95:07:25:89:f0:27:ec:24:b7:44:e6:66:e3:ca:
                    7f:b3:a9:36:b1:e7:e9:a5:27:98:0b:47:fa:cd:64:
                    c2:05:8f:cd:58:b3:37:c4:a0:7b:50:d7:32:83:96:
                    29:76:80:65:56:fd:cc:93:34:71:fe:22:30:c0:42:
                    dd:2d:80:66:71:97:29:38:9e:bd:d6:39:b6:2c:9f:
                    a8:5f:7c:d5:ff:24:1d:52:8d:42:48:01:fc:8c:fb:
                    1e:63:ee:26:9f:81:b5:9b:de:84:25:f0:6e:1d:52:
                    18:3d:c3:da:d5:37:b9:66:37:4c:35:f4:42:5f:4b:
                    22:be:e9:6f:b9:94:51:e9:be:0f:e1:d5:cf:1c:11:
                    02:fe:5c:45:4d:7b:0b:cb:48:18:6c:a4:60:60:17:
                    2c:e6:d9:1d:76:6e:1c:50:e7:73:d3:ed:12:1f:f0:
                    9f:cb:b7:7d:83:de:ec:cd:c3:f6:ba:0b:e6:eb:d4:
                    e7:90:d5:6a:e6:26:7f:c2:eb:2a:ea:60:ac:be:9d:
                    31:bc:29:09:37:90:35:63:3f:21:c6:72:cb:65:18:
                    4c:68:73:4e:10:c6:2b:63:43:ab:a1:44:76:24:a1:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B0:C3:DD:F6:BD:0A:DE:EC:A0:3D:41:16:FD:11:4C:66:30:0A:55
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:7d:6a:e9:d0:ec:d1:88:24:0b:cb:17:df:da:98:25:45:01:
         1b:b7:8a:5e:e0:6a:9b:2d:cf:2d:b0:df:7f:5e:d2:b1:ec:5b:
         d8:10:0c:de:f0:b0:a1:c0:31:40:19:76:44:49:25:2d:2f:be:
         92:7b:c3:a6:85:e7:72:36:c0:ae:2b:68:72:cc:f8:b3:7c:be:
         bf:2d:c7:10:f3:1a:e4:67:82:78:05:01:a4:e7:86:96:1f:84:
         48:06:1f:ec:97:4f:b1:9e:4d:99:9d:26:7c:b2:fc:65:d7:5e:
         30:4d:b6:d9:db:cf:f6:74:f2:4e:47:dc:67:58:10:1a:cb:8a:
         3f:5f:0b:92:af:9f:59:c6:26:dd:18:df:0d:a9:9b:1c:17:e0:
         0b:e6:d0:ce:50:43:5a:a1:35:18:04:d3:c8:b8:21:ab:48:cd:
         c3:f0:05:44:00:41:8d:9a:fa:68:52:c1:a8:08:5c:8c:d8:1b:
         76:be:e1:73:ed:99:59:14:94:cd:b5:16:7d:7b:8c:bc:ee:e8:
         d3:44:a3:5c:d8:13:02:bb:24:b1:b7:3b:86:fc:f7:5c:31:5e:
         74:73:5c:b2:87:a2:24:a1:ac:b2:dd:ba:fc:23:b6:80:ed:a8:
         ec:65:3f:90:8e:65:7f:6b:db:e5:89:71:c9:53:a7:bb:34:ce:
         bb:42:97:9e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJoti3yEwyrhxsgAH1opUwOqcGP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNTA2MDIwMTU4MzdaFw0yNjA2MDEwMjAzMzdaMDMxMTAvBgNV
BAMTKEY2QjBDM0RERjZCRDBBREVFQ0EwM0Q0MTE2RkQxMTRDNjYzMDBBNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgZ2KBsXwHGRskcJMg9pOkNZw
oeiDqXKrnj/oPUuVByWJ8CfsJLdE5mbjyn+zqTax5+mlJ5gLR/rNZMIFj81YszfE
oHtQ1zKDlil2gGVW/cyTNHH+IjDAQt0tgGZxlyk4nr3WObYsn6hffNX/JB1SjUJI
AfyM+x5j7iafgbWb3oQl8G4dUhg9w9rVN7lmN0w19EJfSyK+6W+5lFHpvg/h1c8c
EQL+XEVNewvLSBhspGBgFyzm2R12bhxQ53PT7RIf8J/Lt32D3uzNw/a6C+br1OeQ
1WrmJn/C6yrqYKy+nTG8KQk3kDVjPyHGcstlGExoc04QxitjQ6uhRHYkoV3BAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU9rDD3fa9Ct7soD1BFv0RTGYwClUwHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzM0MzUyZTMxMzEzMjJlMzEzMjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1wfDANBgkqhkiG
9w0BAQsFAAOCAQEAcH1q6dDs0YgkC8sX39qYJUUBG7eKXuBqmy3PLbDff17Ssexb
2BAM3vCwocAxQBl2REklLS++knvDpoXncjbAritocsz4s3y+vy3HEPMa5GeCeAUB
pOeGlh+ESAYf7JdPsZ5NmZ0mfLL8ZddeME222dvP9nTyTkfcZ1gQGsuKP18Lkq+f
WcYm3RjfDambHBfgC+bQzlBDWqE1GATTyLghq0jNw/AFRABBjZr6aFLBqAhcjNgb
dr7hc+2ZWRSUzbUWfXuMvO7o00SjXNgTArsksbc7hvz3XDFedHNcsoeiJKGsst26
/CO2gO2o7GU/kI5lf2vb5YlxyVOnuzTOu0KXng==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:20 2025 by rpki-client