Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132372e302f32342d3234203d3e203538333639.roa
File:                     34352e3131322e3132372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          6xdIP4XChkySP0+udle3gKBsuXVszyvWQn11pqo+7aE=
Subject key identifier:   FE:71:02:02:71:14:96:4A:72:85:61:55:97:C7:3D:D6:71:CB:E4:7D
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       0D95345FDED40F1F98D25C9CB77237693A0FF922
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132372e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:33 +0000
ROA not before:           Mon 01 Jul 2024 00:59:33 +0000
ROA not after:            Mon 30 Jun 2025 01:04:33 +0000
asID:                     58369
IP address blocks:        45.112.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:95:34:5f:de:d4:0f:1f:98:d2:5c:9c:b7:72:37:69:3a:0f:f9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:33 2024 GMT
            Not After : Jun 30 01:04:33 2025 GMT
        Subject: CN=FE7102027114964A7285615597C73DD671CBE47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:de:b4:da:bf:a6:2b:c7:51:5c:19:e4:ad:96:
                    38:a1:53:8c:60:88:bb:00:4b:f1:e8:65:e4:6f:9e:
                    d5:d9:40:81:47:aa:29:e6:4e:8d:5e:b7:c3:4e:47:
                    f8:b0:e9:e9:84:af:a3:06:96:38:4e:db:cb:f4:ae:
                    f9:f0:a4:c6:49:11:a9:ba:3f:fe:a5:2f:ae:2d:8a:
                    29:1e:1a:7b:40:05:42:39:7d:2e:46:bd:20:79:ea:
                    90:35:7d:32:5b:1c:5d:df:1b:a5:74:9e:f5:96:a9:
                    9e:5f:4e:85:43:e6:7b:cd:f2:e6:f0:99:17:96:50:
                    75:33:dc:81:15:46:c0:31:ab:f9:12:19:7a:ab:b5:
                    dd:90:f7:85:65:e1:45:bb:96:4d:ee:af:df:25:b1:
                    c9:85:92:05:64:ac:29:d4:c1:75:e4:50:53:35:55:
                    71:27:c4:dd:df:d7:8f:c8:52:6e:81:77:e7:f5:43:
                    0e:09:2f:11:8b:b1:1c:b2:f1:00:b2:8b:8e:44:aa:
                    41:92:5d:ea:a6:f2:a2:63:43:44:ea:67:54:ea:8c:
                    9e:40:a6:da:fb:7b:88:f8:27:12:80:c0:6d:d5:1e:
                    15:67:e5:b8:82:ea:4e:74:19:da:ae:3b:2c:45:29:
                    c5:9c:c0:89:eb:c1:1f:4c:07:95:10:bd:8e:c9:48:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:71:02:02:71:14:96:4A:72:85:61:55:97:C7:3D:D6:71:CB:E4:7D
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132372e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:6b:a5:a7:39:d3:38:cd:3d:38:91:97:cb:29:96:f3:6f:7d:
         cc:64:26:35:e7:94:99:c3:4e:c7:81:b2:59:27:4a:be:67:51:
         75:77:b9:ab:a0:93:4a:d9:67:e2:58:5c:a5:1c:63:23:94:eb:
         6c:fc:d0:5b:3b:7b:91:7f:18:4a:5b:a0:7f:e6:19:1f:66:f7:
         67:03:6e:65:f0:39:fe:a8:a6:00:a9:9c:7e:24:4f:42:a7:76:
         5e:4e:ee:09:2c:74:71:2d:d1:9f:d0:19:5c:66:0f:b0:64:d2:
         11:b9:37:cd:6e:8d:10:b2:3c:b4:b3:04:72:f3:92:36:e3:d0:
         f6:4e:67:18:85:19:a5:a9:aa:02:dc:c5:24:07:db:b0:50:5f:
         a8:10:79:cd:2b:4e:0b:ca:f5:05:cc:26:87:81:64:d9:b9:63:
         e2:10:6a:1c:ab:27:bc:fb:9e:3f:d6:69:4a:a8:82:96:ff:2f:
         ee:f0:19:4e:34:1d:6b:bc:c7:dc:8c:fc:42:6e:63:b3:2c:f5:
         e0:f3:03:b9:03:6e:37:c4:34:e9:f2:76:43:3d:b9:4c:82:f3:
         b0:94:8f:46:68:2d:4f:aa:9e:15:f8:44:1a:a5:3e:46:64:71:
         8c:95:93:e5:b4:74:78:b1:e6:82:10:84:d4:57:96:58:ad:83:
         14:82:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org