Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/35382e36352e3234302e302f32312d3234203d3e203234353335.roa
File:                     35382e36352e3234302e302f32312d3234203d3e203234353335.roa (raw, json)
Hash identifier:          oEyYgvCXUFlwUo/lVGE65rgI2VHFAmL/fvC+JKvHTXc=
Subject key identifier:   5E:63:7B:9E:D4:0D:A3:7F:18:D0:99:13:A6:C2:35:2F:DA:95:6A:3D
Certificate issuer:       /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
Certificate serial:       71B6E65475DEDC8582B23C6AC7AE041AA18ADD70
Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/35382e36352e3234302e302f32312d3234203d3e203234353335.roa
Signing time:             Tue 02 Apr 2024 09:00:01 +0000
ROA not before:           Tue 02 Apr 2024 08:55:01 +0000
ROA not after:            Tue 01 Apr 2025 09:00:01 +0000
asID:                     24535
IP address blocks:        58.65.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl
                          rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b6:e6:54:75:de:dc:85:82:b2:3c:6a:c7:ae:04:1a:a1:8a:dd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
        Validity
            Not Before: Apr  2 08:55:01 2024 GMT
            Not After : Apr  1 09:00:01 2025 GMT
        Subject: CN=5E637B9ED40DA37F18D09913A6C2352FDA956A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:e4:19:cc:c2:5f:7e:10:59:af:65:38:0f:
                    a5:2a:ba:58:2d:29:5a:56:fa:f3:a8:f4:1a:ff:f9:
                    a4:fa:8a:79:df:ab:40:c8:3a:ae:c6:1b:45:9f:50:
                    38:6d:0f:ec:c1:12:0f:e1:08:be:fa:3a:57:8b:58:
                    b2:23:77:ad:e1:a7:97:16:12:d1:90:91:3c:1e:52:
                    23:f1:46:0e:fa:e6:b1:35:28:88:0e:5c:e7:11:ec:
                    97:28:00:e0:28:fb:27:62:cd:06:8f:63:9c:04:20:
                    e0:b8:ba:a6:a8:7c:af:d7:1a:f6:7b:40:47:bf:5a:
                    b3:36:1e:4d:8d:c6:0b:d3:2c:e0:2b:82:e4:b6:d1:
                    e9:02:84:8e:64:7d:a8:9f:26:69:a0:4e:6f:ea:e7:
                    5e:c7:f7:d4:f0:05:ce:7f:b0:e7:8b:6b:a4:ae:52:
                    72:ea:d5:b4:82:82:1c:a8:da:73:90:32:b5:59:5b:
                    15:b5:29:96:95:14:cd:9b:48:81:c0:51:1a:ff:68:
                    47:87:6a:71:49:21:7e:f7:56:42:0a:fc:6c:15:10:
                    6b:c5:de:e5:03:43:a7:2f:77:50:34:a4:ae:c2:c5:
                    a3:d4:19:6b:41:92:ea:4e:bd:24:9a:29:05:f5:7e:
                    49:a0:c8:ee:e6:33:40:60:e1:e8:ac:56:ea:42:e0:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:63:7B:9E:D4:0D:A3:7F:18:D0:99:13:A6:C2:35:2F:DA:95:6A:3D
            X509v3 Authority Key Identifier:
                keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/35382e36352e3234302e302f32312d3234203d3e203234353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.65.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:77:02:fa:ac:6f:29:89:3f:50:3c:8d:25:c0:f4:4c:66:d2:
         6e:3a:99:48:b7:8b:eb:79:e7:8c:9c:19:9b:ee:15:77:50:52:
         9a:1f:31:71:b2:e6:10:89:c3:51:16:c8:8d:e5:fe:36:2e:9d:
         aa:89:78:b1:92:1a:e7:f8:b3:6a:47:f8:01:cc:45:24:ba:2b:
         52:fb:e4:cc:d6:13:dc:d7:8a:ae:be:b4:37:5d:4d:c1:b4:42:
         2f:29:ac:20:c7:6d:c1:c7:35:47:e5:99:cb:13:79:0e:38:5a:
         72:5e:5a:b7:aa:75:95:54:ca:83:6c:a0:83:66:b4:39:a6:73:
         7e:b4:2e:79:61:f5:15:c8:96:dd:f6:79:a3:c3:f3:d7:92:ee:
         9b:16:e7:94:d2:17:3c:50:0c:b9:c5:93:71:f6:40:77:c7:ef:
         dd:3b:47:02:91:95:a4:34:b7:4c:b3:d7:2b:05:44:7c:06:e4:
         22:8b:9c:79:34:f5:96:61:ac:ac:be:1f:f5:51:80:c7:10:cc:
         bc:a4:d8:a9:92:5d:c4:dd:05:5c:5d:97:06:44:64:50:28:39:
         9f:c8:70:ed:aa:31:c2:ce:14:37:c3:4e:23:8f:c1:3a:34:49:
         f0:84:26:59:f2:77:f0:37:c9:5f:f8:61:e0:10:f1:30:7f:f2:
         0a:46:da:e9
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUcbbmVHXe3IWCsjxqx64EGqGK3XAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1
MjYxOTA5NzAeFw0yNDA0MDIwODU1MDFaFw0yNTA0MDEwOTAwMDFaMDMxMTAvBgNV
BAMTKDVFNjM3QjlFRDQwREEzN0YxOEQwOTkxM0E2QzIzNTJGREE5NTZBM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9uQZzMJffhBZr2U4D6Uqulgt
KVpW+vOo9Br/+aT6innfq0DIOq7GG0WfUDhtD+zBEg/hCL76OleLWLIjd63hp5cW
EtGQkTweUiPxRg765rE1KIgOXOcR7JcoAOAo+ydizQaPY5wEIOC4uqaofK/XGvZ7
QEe/WrM2Hk2NxgvTLOArguS20ekChI5kfaifJmmgTm/q517H99TwBc5/sOeLa6Su
UnLq1bSCghyo2nOQMrVZWxW1KZaVFM2bSIHAURr/aEeHanFJIX73VkIK/GwVEGvF
3uUDQ6cvd1A0pK7CxaPUGWtBkupOvSSaKQX1fkmgyO7mM0Bg4eisVupC4IuXAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUXmN7ntQNo38Y0JkTpsI1L9qVaj0wHwYDVR0j
BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE
OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx
OTA5Ny5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkZDQ3ZjU2LWVjNTMtNDJlYi05
YjhiLWZhMDhmODc0ZDMxOS8wLzM1MzgyZTM2MzUyZTMyMzQzMDJlMzAyZjMyMzEy
ZDMyMzQyMDNkM2UyMDMyMzQzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM6QfAwDQYJKoZIhvcN
AQELBQADggEBAD53AvqsbymJP1A8jSXA9Exm0m46mUi3i+t554ycGZvuFXdQUpof
MXGy5hCJw1EWyI3l/jYunaqJeLGSGuf4s2pH+AHMRSS6K1L75MzWE9zXiq6+tDdd
TcG0Qi8prCDHbcHHNUflmcsTeQ44WnJeWreqdZVUyoNsoINmtDmmc360Lnlh9RXI
lt32eaPD89eS7psW55TSFzxQDLnFk3H2QHfH7907RwKRlaQ0t0yz1ysFRHwG5CKL
nHk09ZZhrKy+H/VRgMcQzLyk2KmSXcTdBVxdlwZEZFAoOZ/IcO2qMcLOFDfDTiOP
wTo0SfCEJlnyd/A3yV/4YeAQ8TB/8gpG2uk=
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org