Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132372e302f32342d3234203d3e203538333639.roa
File:                     34352e3131322e3132372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          4iRQ+fqyHNoEjNRmsfbrk2QYRB+z6wrWaL619bdN23k=
Subject key identifier:   31:E3:FD:01:64:EA:E6:DE:4F:B9:48:35:F4:6D:2F:89:E7:5E:46:53
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       112944CCF726B65A99605BFF2A05F0ECBC3F7BA1
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132372e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:36 +0000
ROA not before:           Mon 02 Jun 2025 01:58:36 +0000
ROA not after:            Mon 01 Jun 2026 02:03:36 +0000
asID:                     58369
IP address blocks:        45.112.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:29:44:cc:f7:26:b6:5a:99:60:5b:ff:2a:05:f0:ec:bc:3f:7b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:36 2025 GMT
            Not After : Jun  1 02:03:36 2026 GMT
        Subject: CN=31E3FD0164EAE6DE4FB94835F46D2F89E75E4653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:df:51:f8:15:bb:f9:03:30:d5:26:fb:e7:6e:
                    d1:f9:88:43:ed:63:4a:bf:77:f9:94:d3:2d:e4:ed:
                    9e:48:2f:49:78:3a:d4:67:90:82:2b:a0:d6:b3:f5:
                    b2:56:c7:71:99:f5:45:5f:bc:eb:19:ab:b9:45:7b:
                    fb:92:5d:f3:7f:fb:b3:b3:cb:16:23:1e:d9:06:e2:
                    54:b2:50:a4:a4:ea:0f:bf:9d:19:85:62:21:8c:3d:
                    8f:c1:ff:1f:7f:af:8f:53:64:a8:8e:59:2f:1c:7f:
                    bf:cb:c9:8d:c4:ca:b3:36:af:81:94:12:2d:a5:97:
                    81:56:de:b4:91:e2:43:45:cb:b8:a7:9d:a7:c5:84:
                    01:0f:0f:60:e3:19:ee:7f:40:7d:d0:77:f2:8a:f9:
                    e5:00:14:0b:66:a7:90:24:db:bf:c5:fe:e8:cd:7e:
                    62:db:0c:15:03:b9:8f:d8:91:06:b7:8e:9c:63:1d:
                    fd:5f:69:f2:45:5c:b0:3a:4f:11:d1:72:a6:61:4a:
                    7c:67:90:ba:65:0e:8f:03:3a:6f:f3:6c:b5:94:c8:
                    16:63:de:20:e9:7d:a0:54:88:99:03:24:8f:45:65:
                    5a:92:cc:4c:0c:93:3b:29:d9:31:4a:e5:fd:2f:02:
                    74:bf:41:17:08:7c:0d:dd:5a:25:ab:66:ec:d5:6a:
                    fe:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E3:FD:01:64:EA:E6:DE:4F:B9:48:35:F4:6D:2F:89:E7:5E:46:53
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132372e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:07:83:4c:6c:24:6e:e1:7e:07:8d:1f:92:f8:15:c8:2d:24:
         25:b9:71:5a:5f:bd:0f:c8:12:47:5c:b4:74:72:0a:56:6b:fd:
         8f:2c:61:d1:e8:26:fe:93:a5:0c:7c:2d:99:8d:cf:b8:68:c2:
         23:14:67:8e:55:2d:ea:69:29:d6:59:56:d4:d4:5b:78:87:d1:
         95:e1:bd:2e:5d:33:09:3e:54:b8:b5:ff:25:26:b8:a0:f5:5d:
         6f:03:b0:ec:3f:d5:4a:6f:54:9b:9d:0f:12:e9:e2:b3:89:4e:
         5d:d9:68:28:eb:50:9e:d2:bf:cc:c9:83:6c:c0:e2:db:b6:77:
         d6:51:8e:de:16:37:ae:79:3b:1f:26:4c:10:3a:02:2d:c5:8b:
         7b:67:2d:95:49:12:60:6e:7d:08:14:6b:de:10:71:61:ea:89:
         e9:81:4f:ae:47:8a:30:3b:9c:06:37:e8:0d:d1:cc:ce:61:71:
         6e:5e:9d:91:27:84:09:e6:72:a2:1b:40:5a:cf:58:ee:cc:09:
         3a:e0:03:12:1c:b0:f8:81:66:d6:ab:46:82:ae:80:94:ad:c5:
         ff:d3:a8:71:b7:7d:4a:8b:f0:64:d5:e4:c6:b0:b1:70:5c:83:
         cc:21:7c:7d:58:d6:d6:d0:d4:4d:4f:65:a0:ac:75:b4:b6:df:
         41:27:1d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:16:56 2025 by rpki-client