Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32332d3233203d3e203538333639.roa
File:                     34352e3131322e3132362e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          mH1xPLCK3h/5p0CI7uvcz13XRgXqkPC5XQBIMAbM/Dc=
Subject key identifier:   7E:58:A7:AB:1B:EC:E2:E3:15:B3:AF:2C:C9:83:E1:8C:E6:AB:9A:55
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       059411004C915760E40905050925E10CC4C202E3
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:41 +0000
ROA not before:           Mon 02 Jun 2025 01:58:41 +0000
ROA not after:            Mon 01 Jun 2026 02:03:41 +0000
asID:                     58369
IP address blocks:        45.112.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:94:11:00:4c:91:57:60:e4:09:05:05:09:25:e1:0c:c4:c2:02:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:41 2025 GMT
            Not After : Jun  1 02:03:41 2026 GMT
        Subject: CN=7E58A7AB1BECE2E315B3AF2CC983E18CE6AB9A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:d6:00:e7:53:fe:cb:07:89:ef:a2:f6:a7:
                    52:50:76:36:83:14:47:88:fe:67:c4:1b:85:73:68:
                    e2:8f:03:3d:74:a3:1a:8e:2f:34:f2:f6:1d:67:4c:
                    40:dd:3c:1b:46:e7:dc:d2:2e:60:d1:7f:e6:55:b0:
                    c6:a6:e7:11:11:77:88:61:27:c9:20:ab:c9:4d:46:
                    28:e4:e7:38:4b:db:92:9f:81:6a:e8:00:24:60:0e:
                    63:6a:4f:b6:eb:9c:ed:f1:5e:13:2a:22:16:d5:96:
                    6b:ff:6e:a3:0e:fe:0a:9d:04:3b:a3:60:5d:b8:47:
                    5d:03:65:f7:e4:14:88:c5:c7:a1:51:b1:6b:b4:32:
                    59:8a:1f:f6:e3:ce:fd:d7:42:56:ec:6c:00:15:86:
                    18:c3:4d:ca:83:1d:64:9f:c9:42:c9:b9:eb:0d:64:
                    25:c7:d7:0a:ce:ac:75:12:bc:c9:12:75:8c:5d:c9:
                    0f:24:c6:1d:e4:d3:1e:4f:d1:37:0c:15:9b:ca:b5:
                    de:2c:e6:31:6e:0b:a4:87:ec:ab:af:da:d3:06:3b:
                    bf:1c:6f:48:48:f7:b5:4a:cb:72:8a:26:e6:e7:86:
                    80:02:c7:e1:16:a5:62:0e:a0:ea:a8:91:ed:b9:dc:
                    0f:7a:9b:5d:86:e6:98:4d:66:70:da:b3:1e:38:d8:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:58:A7:AB:1B:EC:E2:E3:15:B3:AF:2C:C9:83:E1:8C:E6:AB:9A:55
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:88:e6:37:dd:c2:6d:c7:fb:1f:f6:cb:37:49:4b:34:ff:26:
         1e:e4:5e:64:c7:9d:89:ec:20:92:8b:a4:10:b1:4b:a2:16:85:
         01:e5:87:0e:27:50:5e:68:b7:66:c2:17:15:91:54:3e:86:28:
         b6:8b:49:ec:20:fe:2a:f6:52:f2:c2:d5:c9:6a:4d:71:05:41:
         ef:69:ab:5f:1f:c3:f6:03:a5:17:d3:73:62:2f:9e:78:9f:00:
         0f:a2:29:e5:75:cb:79:d0:57:59:fb:53:2e:68:08:ad:d4:f3:
         b0:1c:00:07:9e:81:3a:67:da:a4:ad:13:d9:12:97:e7:0c:7b:
         e7:63:9d:0c:a4:e7:77:70:44:d5:80:48:f3:92:47:df:49:5c:
         e9:57:f6:e5:ec:66:bc:5b:81:0c:62:cf:9a:4b:bf:8e:6a:f6:
         bb:78:47:2e:73:17:7b:08:ec:fd:05:cd:b3:40:6d:a9:1e:80:
         3d:e6:a9:98:fb:1d:af:24:d6:65:3f:ab:fd:de:08:c1:9d:96:
         ce:02:c0:c7:7f:28:08:9d:08:d7:64:66:eb:f2:39:25:10:92:
         74:b0:9a:a2:09:ca:34:96:d3:c7:44:36:e5:63:2e:a7:16:50:
         71:45:33:fc:a4:cf:d9:af:5c:8e:95:83:21:f3:f9:d4:89:9d:
         1c:b4:66:9d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBZQRAEyRV2DkCQUFCSXhDMTCAuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNTA2MDIwMTU4NDFaFw0yNjA2MDEwMjAzNDFaMDMxMTAvBgNV
BAMTKDdFNThBN0FCMUJFQ0UyRTMxNUIzQUYyQ0M5ODNFMThDRTZBQjlBNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFX9YA51P+yweJ76L2p1JQdjaD
FEeI/mfEG4VzaOKPAz10oxqOLzTy9h1nTEDdPBtG59zSLmDRf+ZVsMam5xERd4hh
J8kgq8lNRijk5zhL25KfgWroACRgDmNqT7brnO3xXhMqIhbVlmv/bqMO/gqdBDuj
YF24R10DZffkFIjFx6FRsWu0MlmKH/bjzv3XQlbsbAAVhhjDTcqDHWSfyULJuesN
ZCXH1wrOrHUSvMkSdYxdyQ8kxh3k0x5P0TcMFZvKtd4s5jFuC6SH7Kuv2tMGO78c
b0hI97VKy3KKJubnhoACx+EWpWIOoOqoke253A96m12G5phNZnDasx442DRlAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUflinqxvs4uMVs68syYPhjOarmlUwHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzM0MzUyZTMxMzEzMjJlMzEzMjM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzUzODMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1wfjANBgkqhkiG
9w0BAQsFAAOCAQEAmYjmN93Cbcf7H/bLN0lLNP8mHuReZMediewgkoukELFLohaF
AeWHDidQXmi3ZsIXFZFUPoYototJ7CD+KvZS8sLVyWpNcQVB72mrXx/D9gOlF9Nz
Yi+eeJ8AD6Ip5XXLedBXWftTLmgIrdTzsBwAB56BOmfapK0T2RKX5wx752OdDKTn
d3BE1YBI85JH30lc6Vf25exmvFuBDGLPmku/jmr2u3hHLnMXewjs/QXNs0BtqR6A
PeapmPsdryTWZT+r/d4IwZ2WzgLAx38oCJ0I12Rm6/I5JRCSdLCaognKNJbTx0Q2
5WMupxZQcUUz/KTP2a9cjpWDIfP51ImdHLRmnQ==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:14:10 2025 by rpki-client