Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32342d3234203d3e203538333639.roa
File:                     34352e3131322e3132342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          GqsN4+1hAYO2ZAXQQeEi64DJQUEKn3Elz10iMw0foSs=
Subject key identifier:   7C:6B:59:88:2C:EC:34:A4:06:1A:8B:A1:D4:35:D0:9E:3C:8D:32:69
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       7143DA59E7B4D3522268346FF42467FD34211E51
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:35 +0000
ROA not before:           Mon 01 Jul 2024 00:59:35 +0000
ROA not after:            Mon 30 Jun 2025 01:04:35 +0000
asID:                     58369
IP address blocks:        45.112.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:43:da:59:e7:b4:d3:52:22:68:34:6f:f4:24:67:fd:34:21:1e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:35 2024 GMT
            Not After : Jun 30 01:04:35 2025 GMT
        Subject: CN=7C6B59882CEC34A4061A8BA1D435D09E3C8D3269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:e1:29:79:d4:71:84:2c:46:19:e6:fa:f5:
                    a0:15:85:00:0c:4a:57:21:d7:fd:2c:0b:93:e4:2a:
                    46:06:61:ed:06:13:ce:54:5c:af:dd:c9:fe:9a:cb:
                    5c:a0:a0:bc:f9:c1:af:51:03:4e:8e:ce:69:10:a1:
                    14:a3:5f:30:f8:8d:0f:e1:23:b6:3a:76:6f:2b:64:
                    fe:3e:c2:95:41:c2:89:dc:6c:a9:c4:0d:bf:ed:25:
                    42:e0:8d:e5:fa:d0:03:23:fc:99:6e:61:f4:54:d8:
                    bf:57:8a:31:99:5f:4d:6b:5f:99:60:58:67:d4:11:
                    22:fd:5c:7d:05:bf:41:62:62:41:64:96:ae:49:92:
                    eb:97:3e:fb:b7:20:af:1f:fe:15:26:bd:58:11:b9:
                    f1:19:17:2f:73:9a:14:67:73:19:30:b9:95:b8:7a:
                    14:17:25:90:c0:63:8a:69:37:38:b8:77:a8:85:15:
                    45:32:99:3b:11:4e:d2:26:a5:28:7c:75:f7:6c:42:
                    75:da:a0:bf:74:32:ad:36:5f:a7:ee:af:9a:4f:9f:
                    07:bb:1f:86:4d:ff:d7:0b:31:5a:e5:1f:92:9e:5f:
                    20:3b:17:2b:a8:e3:90:36:7c:02:53:32:c0:c8:6c:
                    cd:2b:4a:48:cd:4d:fa:92:4e:03:d7:99:b3:3f:6c:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6B:59:88:2C:EC:34:A4:06:1A:8B:A1:D4:35:D0:9E:3C:8D:32:69
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:bc:22:82:98:1a:3a:6c:88:db:04:af:11:65:6a:5d:e0:
         91:63:b9:1a:7e:67:d0:94:a5:0d:02:bd:fa:39:6f:db:20:09:
         11:dd:9b:b3:0f:31:42:eb:65:7b:23:cc:c9:64:40:b1:ab:c3:
         3f:1e:93:ed:e0:3b:06:67:70:6d:42:8c:4e:ae:68:35:8d:c9:
         9c:69:33:82:ec:ea:3c:0a:4e:d1:33:39:28:3b:ff:e2:13:e9:
         50:d6:69:f0:6c:c0:de:4c:5d:78:cf:00:6c:d6:f0:c2:40:01:
         80:05:cb:a8:3d:c0:06:dc:e6:69:c2:a4:ec:2d:87:fa:97:94:
         ec:f1:10:01:8e:38:82:1d:97:56:87:c4:56:b4:0e:6c:af:96:
         a9:d1:6c:9f:74:ee:89:45:6b:cd:6d:d1:a7:2b:7c:00:08:8e:
         70:35:d1:98:2e:29:8d:57:bf:51:8b:23:bb:38:7a:a1:a8:45:
         1b:9c:78:27:38:62:f7:be:7b:b6:4e:c1:41:f9:df:8f:dd:1f:
         46:f4:bb:48:89:bc:99:de:40:20:c7:29:ad:d0:4c:21:d2:d4:
         05:f5:c1:f5:f8:9d:be:f4:9a:80:1e:34:fb:9d:a7:36:36:db:
         10:ea:54:49:18:7c:84:b1:ef:18:0a:5e:1b:45:f2:12:bb:e0:
         a5:19:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org