Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20333936393832.roa
File:                     33362e35302e39372e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          pMG+ZAw0cWb9oW6JXLAMB44cr+AtbRvCQ3Z+y/D0PjQ=
Subject key identifier:   EE:36:33:E9:01:65:DD:41:FB:87:0A:98:45:B0:59:AE:55:DC:BD:A3
Certificate issuer:       /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
Certificate serial:       0FBFFAEFBEE39185BCA2569D5CC0FEA6082A477B
Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20333936393832.roa
Signing time:             Wed 27 Mar 2024 07:42:56 +0000
ROA not before:           Wed 27 Mar 2024 07:37:56 +0000
ROA not after:            Wed 26 Mar 2025 07:42:56 +0000
asID:                     396982
IP address blocks:        36.50.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl
                          rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 20:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bf:fa:ef:be:e3:91:85:bc:a2:56:9d:5c:c0:fe:a6:08:2a:47:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
        Validity
            Not Before: Mar 27 07:37:56 2024 GMT
            Not After : Mar 26 07:42:56 2025 GMT
        Subject: CN=EE3633E90165DD41FB870A9845B059AE55DCBDA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:bd:16:f0:c7:24:a9:3e:e4:2a:23:11:67:
                    ec:9d:0d:a1:92:0e:d2:fb:e1:90:49:fb:7b:6a:b4:
                    7f:17:4d:de:0c:24:26:bd:ef:0f:4d:86:5a:33:61:
                    6a:7f:cd:8f:f9:e4:b1:54:bf:9e:ce:af:41:b1:d4:
                    fa:23:e6:8c:15:c5:14:ac:e8:fc:ca:5f:25:d1:af:
                    40:9a:74:f8:db:b0:45:09:98:8c:1b:94:44:0e:dd:
                    6e:b6:09:e3:1b:93:91:4f:9a:c0:b1:b7:57:36:df:
                    c9:d3:31:9e:8e:4a:0f:56:ac:d9:64:ea:3c:23:6e:
                    07:6f:ca:64:61:90:c3:ee:cd:6c:6e:b2:45:51:09:
                    ec:b0:89:33:db:95:15:d5:b7:f6:d7:4f:74:3d:98:
                    6b:1e:cd:60:65:3f:2c:df:48:00:3b:75:c9:8f:91:
                    fc:cf:1e:92:72:ec:23:d5:62:1f:92:6f:84:64:df:
                    69:d8:bc:51:38:44:07:ff:9d:ea:ff:cc:f9:08:1d:
                    1d:ed:08:8b:17:eb:65:b2:6f:c9:1b:23:d3:8f:66:
                    4f:b2:b4:8b:6a:bf:82:1e:2e:ca:e9:3b:28:fe:21:
                    01:96:53:b5:ab:73:0f:e0:14:96:51:1a:a5:65:89:
                    a2:11:07:1a:f4:b4:81:10:3b:53:62:5d:19:99:7c:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:36:33:E9:01:65:DD:41:FB:87:0A:98:45:B0:59:AE:55:DC:BD:A3
            X509v3 Authority Key Identifier:
                keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:04:7c:c7:b1:57:72:a0:ef:ad:b4:1a:14:88:41:2b:1a:3d:
         46:45:91:b5:04:70:43:5a:61:47:e9:b7:33:1b:6b:44:f2:7c:
         83:98:32:21:53:0e:56:71:a9:8c:8c:dd:84:ef:64:f4:6c:c8:
         91:43:76:af:16:a1:a9:15:ce:86:ed:05:4c:b0:ae:1f:03:02:
         37:b7:33:d5:3d:ad:1e:73:e6:42:ce:6a:7a:34:27:0c:fe:96:
         c4:47:5c:3e:97:a3:f7:ef:c1:0c:7f:4f:98:aa:cb:6c:4c:cd:
         b6:03:c8:85:eb:5b:72:52:fa:cd:18:dc:09:e2:7f:5a:99:83:
         24:ee:e8:9d:e3:c1:98:62:6f:2a:30:2c:65:4e:6d:4d:d5:dd:
         3e:2f:8b:1a:40:88:20:27:77:fe:1c:63:c2:39:38:ee:26:92:
         1e:7b:59:47:2f:2e:e6:c3:56:7d:63:36:16:5a:ae:e6:ba:ea:
         29:28:81:d1:cb:f0:97:67:03:25:18:ed:0d:fc:fa:47:07:36:
         45:52:70:c4:dd:52:15:6b:9c:90:d5:74:c8:d9:27:f5:fa:91:
         85:18:3b:99:b3:14:a1:81:ee:69:60:24:8c:ef:49:b2:8d:a6:
         31:1c:17:d1:3b:24:45:49:6d:4a:96:f1:52:d5:79:16:23:98:
         95:22:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:09 2024 by rpki-client on console-fra.rpki-client.org