Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa
File:                     34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          wpINU5BWyJoTYFHNOwNTC5jvpvPocCu1HASyDr8iPyk=
Subject key identifier:   7F:3D:6A:51:11:15:C1:E3:D0:E0:14:B7:34:90:7D:F4:43:59:4F:2B
Certificate issuer:       /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial:       23C73CB05D8C7EF4FD15F29CDF890B47B13CAC5C
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa
Signing time:             Mon 01 Jul 2024 01:04:21 +0000
ROA not before:           Mon 01 Jul 2024 00:59:21 +0000
ROA not after:            Mon 30 Jun 2025 01:04:21 +0000
asID:                     133823
IP address blocks:        45.116.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
                          rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c7:3c:b0:5d:8c:7e:f4:fd:15:f2:9c:df:89:0b:47:b1:3c:ac:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
        Validity
            Not Before: Jul  1 00:59:21 2024 GMT
            Not After : Jun 30 01:04:21 2025 GMT
        Subject: CN=7F3D6A511115C1E3D0E014B734907DF443594F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:35:1f:a3:94:78:d9:51:60:9e:63:0f:d9:63:
                    fc:37:07:3d:81:94:1e:da:f9:5e:8b:5a:a9:13:33:
                    42:08:c6:97:9c:60:52:8c:8a:e3:b0:19:37:fb:8f:
                    fa:15:5e:97:18:c7:67:a3:3d:b7:fd:af:86:41:5c:
                    14:17:c3:c8:41:3a:11:1a:9c:20:59:11:5e:0e:c2:
                    96:86:04:0d:56:d6:a7:75:a1:56:22:f1:53:f7:47:
                    11:4c:72:e2:6f:17:fd:5a:d1:67:6a:96:6f:69:bd:
                    f8:53:32:a1:af:af:84:a6:87:19:31:93:97:9b:a1:
                    61:2c:f2:70:df:f8:c3:83:ec:db:af:79:0a:6d:50:
                    32:b8:cd:8c:5a:6f:2c:86:06:cf:1b:93:1d:00:10:
                    3f:c1:2e:f2:bf:85:48:e6:86:56:30:47:db:61:83:
                    b9:54:3e:1d:13:bf:ff:dd:7e:ec:48:f1:37:00:94:
                    0f:35:51:44:14:82:ea:fd:22:99:b0:cb:bd:75:83:
                    ae:40:9a:4e:f4:2a:7d:e9:ec:95:56:67:6f:65:78:
                    df:2f:e2:05:67:f4:ea:e0:fd:4d:f5:46:51:31:23:
                    be:7b:fb:ae:5f:28:f2:be:a6:5b:1b:44:be:9b:55:
                    4b:8c:eb:f2:01:e8:51:85:9d:52:7e:08:b5:93:b8:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3D:6A:51:11:15:C1:E3:D0:E0:14:B7:34:90:7D:F4:43:59:4F:2B
            X509v3 Authority Key Identifier:
                keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         de:1b:42:63:01:94:50:49:80:b5:b9:3e:67:7b:c7:9d:ad:88:
         49:c2:a1:96:47:e7:b7:ba:d2:93:15:4e:63:68:0e:56:c3:58:
         f7:52:5c:e9:48:2e:8b:46:b2:8b:e6:12:3a:74:67:11:42:74:
         1c:26:65:6f:28:a9:36:52:a8:38:20:f1:3c:e4:0c:e5:fa:00:
         f4:5f:6d:6d:43:40:f1:fc:71:7a:69:01:ae:fb:b4:e8:df:d0:
         ad:6f:d4:7b:12:cf:2f:fd:53:df:3a:9c:cb:1a:2a:72:2f:ee:
         d6:de:2e:6c:d2:20:14:bb:b4:9c:b6:9c:23:ab:c5:c1:8b:06:
         c0:4f:1a:87:05:1c:4b:e1:e4:47:f2:30:cd:ae:a1:8a:f4:34:
         8c:48:7c:7c:b2:03:94:6c:cc:b1:c7:b3:09:b0:7c:f9:8a:ba:
         49:0b:96:74:e3:ee:df:3b:70:97:64:20:a8:ea:83:cb:24:ef:
         22:74:fa:1f:c3:9e:c1:4d:8d:90:b4:2b:c2:d2:07:17:79:73:
         79:ad:a8:63:83:60:d0:95:18:f4:ae:2d:a7:b0:81:d1:82:a5:
         29:9c:6c:ce:61:7c:a6:45:f1:87:eb:10:19:d3:cd:a2:a1:48:
         2d:4b:81:b3:4d:7a:bd:ce:9f:c4:a8:07:a7:dc:82:58:7f:21:
         c0:6b:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org