Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32342d3234203d3e203538333639.roa
File:                     34352e3131322e3132362e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          syegv4jL8b9L6LOgfhisQiLrP9cqyFruzmCN/7hpAFw=
Subject key identifier:   6E:B1:8D:0B:B9:F8:53:49:82:49:F9:26:FB:B2:50:62:DA:68:3F:BB
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       4BC44F88972335DE5AC123431B65B84DF57AD777
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:33 +0000
ROA not before:           Mon 01 Jul 2024 00:59:33 +0000
ROA not after:            Mon 30 Jun 2025 01:04:33 +0000
asID:                     58369
IP address blocks:        45.112.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c4:4f:88:97:23:35:de:5a:c1:23:43:1b:65:b8:4d:f5:7a:d7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:33 2024 GMT
            Not After : Jun 30 01:04:33 2025 GMT
        Subject: CN=6EB18D0BB9F853498249F926FBB25062DA683FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:4a:bd:c0:63:0a:ce:c6:bb:c8:94:a4:94:
                    f5:f0:63:df:3c:80:da:72:eb:31:ff:81:eb:2c:99:
                    3c:7c:cb:d3:cb:5a:f2:c4:7a:a4:76:ba:67:25:0f:
                    32:ab:79:a9:88:03:04:d3:49:f2:5e:81:a3:1c:b6:
                    14:d8:05:76:be:65:2c:a6:3c:3f:db:ae:05:fe:f5:
                    16:56:78:cb:df:f4:1b:e8:01:50:a7:b4:5b:5d:65:
                    32:fb:96:30:5f:51:cb:42:22:9f:be:d5:2c:8e:13:
                    a0:b7:a8:99:2b:2a:03:de:83:00:73:10:f8:f5:6f:
                    8b:32:9c:b4:6b:2c:ed:a3:f9:56:0a:5e:61:77:1d:
                    5e:a0:1c:2d:f5:d3:ce:93:96:0d:6a:f6:c6:94:90:
                    22:9b:6b:fd:3f:d6:db:84:f1:c2:e9:96:b8:79:5d:
                    1f:3f:0b:c5:82:ab:8b:9e:fc:98:81:69:ba:c8:4a:
                    bf:10:52:a7:b9:81:9a:fa:ff:47:01:9c:b4:bf:04:
                    7a:b6:62:e9:96:e8:01:88:e1:d1:e5:06:10:d6:d3:
                    6f:aa:09:42:e2:b2:29:dd:75:2e:62:80:4f:26:9b:
                    b6:e9:7c:bd:19:4f:9e:74:14:80:55:2a:3a:46:24:
                    6a:fd:03:47:27:04:90:0e:62:4f:13:45:f4:30:94:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B1:8D:0B:B9:F8:53:49:82:49:F9:26:FB:B2:50:62:DA:68:3F:BB
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c6:b1:7b:be:fe:ec:92:23:c0:46:f1:d8:1b:91:cc:8e:60:
         56:d5:2e:56:a0:7e:a8:3e:82:c6:fe:27:32:dd:ca:db:c4:5e:
         12:a1:24:d6:4b:a6:95:c1:86:44:c1:6c:9d:f6:9a:63:58:c0:
         f4:3c:02:87:a9:ba:ca:7e:8b:5a:04:80:4e:cc:9d:88:76:1e:
         20:b9:56:3d:08:96:e8:77:ba:aa:87:f1:ec:36:db:6b:2c:57:
         3d:1f:b9:67:5b:95:5c:21:d6:f3:e2:41:f4:0d:15:fd:62:b1:
         84:14:5b:92:3f:ea:7f:3f:29:c7:d4:02:ac:67:96:0f:16:97:
         28:72:44:ab:34:7e:8d:f7:6d:e7:21:73:d3:3c:d8:dd:0e:ff:
         e4:fc:c2:5b:89:cc:f3:17:46:18:65:04:02:1c:10:65:59:f9:
         9b:ff:f9:80:1b:b1:d5:5f:0b:7e:03:9a:5c:4e:48:47:94:db:
         8f:6e:d8:0f:a5:77:f5:80:60:d3:e6:f2:5b:49:9f:73:2e:7c:
         27:e7:c2:d0:b9:f9:bb:86:90:5c:6c:36:79:7a:d2:3f:c4:f2:
         99:88:93:5a:32:eb:e4:6a:84:31:c1:99:00:29:8f:83:6a:0f:
         45:e9:64:d4:a1:8b:73:b8:a3:39:19:57:80:d3:2d:99:cf:03:
         aa:a1:a2:0a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUS8RPiJcjNd5awSNDG2W4TfV613cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNDA3MDEwMDU5MzNaFw0yNTA2MzAwMTA0MzNaMDMxMTAvBgNV
BAMTKDZFQjE4RDBCQjlGODUzNDk4MjQ5RjkyNkZCQjI1MDYyREE2ODNGQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSB0q9wGMKzsa7yJSklPXwY988
gNpy6zH/gessmTx8y9PLWvLEeqR2umclDzKreamIAwTTSfJegaMcthTYBXa+ZSym
PD/brgX+9RZWeMvf9BvoAVCntFtdZTL7ljBfUctCIp++1SyOE6C3qJkrKgPegwBz
EPj1b4synLRrLO2j+VYKXmF3HV6gHC31086Tlg1q9saUkCKba/0/1tuE8cLplrh5
XR8/C8WCq4ue/JiBabrISr8QUqe5gZr6/0cBnLS/BHq2YumW6AGI4dHlBhDW02+q
CULisinddS5igE8mm7bpfL0ZT550FIBVKjpGJGr9A0cnBJAOYk8TRfQwlG1dAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUbrGNC7n4U0mCSfkm+7JQYtpoP7swHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzM0MzUyZTMxMzEzMjJlMzEzMjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1wfjANBgkqhkiG
9w0BAQsFAAOCAQEAKMaxe77+7JIjwEbx2BuRzI5gVtUuVqB+qD6Cxv4nMt3K28Re
EqEk1kumlcGGRMFsnfaaY1jA9DwCh6m6yn6LWgSATsydiHYeILlWPQiW6He6qofx
7DbbayxXPR+5Z1uVXCHW8+JB9A0V/WKxhBRbkj/qfz8px9QCrGeWDxaXKHJEqzR+
jfdt5yFz0zzY3Q7/5PzCW4nM8xdGGGUEAhwQZVn5m//5gBux1V8LfgOaXE5IR5Tb
j27YD6V39YBg0+byW0mfcy58J+fC0Ln5u4aQXGw2eXrSP8TymYiTWjLr5GqEMcGZ
ACmPg2oPRelk1KGLc7ijORlXgNMtmc8DqqGiCg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org