Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20333936393832.roa
File:                     33362e35302e39372e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=
Subject key identifier:   17:E6:68:7F:91:A1:72:1F:29:D1:0C:21:52:31:A7:8B:AC:92:4A:15
Certificate issuer:       /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
Certificate serial:       4921C748691500C101622F59F706AA2DF8F63302
Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20333936393832.roa
Signing time:             Wed 26 Feb 2025 08:00:01 +0000
ROA not before:           Wed 26 Feb 2025 07:55:01 +0000
ROA not after:            Wed 25 Feb 2026 08:00:01 +0000
asID:                     396982
IP address blocks:        36.50.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl
                          rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Apr 2025 23:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:21:c7:48:69:15:00:c1:01:62:2f:59:f7:06:aa:2d:f8:f6:33:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
        Validity
            Not Before: Feb 26 07:55:01 2025 GMT
            Not After : Feb 25 08:00:01 2026 GMT
        Subject: CN=17E6687F91A1721F29D10C215231A78BAC924A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:50:0c:bf:1e:7c:a0:2c:7c:5b:37:16:db:0f:
                    9a:1b:37:a1:48:fb:e5:65:41:f8:23:8c:b3:55:d2:
                    16:c9:4d:d5:c5:a6:ae:3c:a2:8a:ee:0b:8e:99:df:
                    06:f1:04:e7:bc:a8:56:8c:60:64:e2:9e:37:b3:20:
                    a9:d3:34:51:01:cb:3f:6a:57:6f:b7:e6:b2:4f:d7:
                    4d:01:cc:fa:5d:c5:f2:e2:87:a8:02:05:0d:2c:ac:
                    85:aa:8a:d0:ba:c8:fa:bd:25:d6:fc:97:3e:62:87:
                    00:d4:62:23:f7:fe:31:22:83:b9:eb:55:8d:92:86:
                    1f:a1:39:3c:a5:2f:f9:9f:03:bf:38:ef:b8:75:c9:
                    81:4b:09:18:9b:0a:d6:d6:71:a6:4c:72:83:96:f4:
                    58:dd:60:ea:98:cc:79:f2:2a:15:00:f3:bc:29:8b:
                    e6:32:97:ef:73:74:6a:c8:29:99:2e:17:57:71:39:
                    2c:71:b5:b1:5e:79:15:04:35:65:65:c0:b6:c5:01:
                    cd:78:61:e8:f6:97:64:ce:3e:29:39:c6:7f:58:bf:
                    38:f1:06:48:20:63:f8:c1:2d:11:6c:12:f0:cc:6e:
                    3f:1b:4c:bf:7b:4e:9d:3a:e1:ed:c0:94:ea:51:fc:
                    a9:d5:33:d6:12:26:3b:22:89:bb:90:7a:56:90:dd:
                    e5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E6:68:7F:91:A1:72:1F:29:D1:0C:21:52:31:A7:8B:AC:92:4A:15
            X509v3 Authority Key Identifier:
                keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:7c:6f:e0:dc:41:e1:ef:35:11:d2:fe:2b:35:f8:91:35:7c:
         c1:60:e1:9e:9b:00:fc:3c:01:1c:e8:3f:7a:ea:6a:f4:34:9a:
         cc:1a:9f:48:d4:f1:26:3d:c4:3f:9c:f8:69:41:d0:3b:6e:8b:
         55:90:3e:99:84:2b:b1:87:03:2e:79:c3:1e:d4:a5:8c:05:a0:
         3f:fb:6a:b3:91:b9:2b:0a:0f:f6:a9:97:32:31:c5:41:86:6c:
         66:a2:9e:43:3a:50:64:80:35:58:bf:b0:4e:9d:8f:3a:bb:a5:
         19:ea:79:80:0b:61:e0:39:e0:2d:a0:00:53:98:a1:56:07:93:
         f8:bb:3f:16:9f:24:29:62:91:c8:56:6d:92:46:85:14:99:bc:
         e2:05:52:cd:73:7f:bd:27:bc:dd:16:1b:f5:d9:96:b5:d4:54:
         df:27:62:e7:ed:6d:0a:55:96:0a:35:2d:a8:5c:5e:dc:cc:f0:
         f1:1b:e0:3f:32:b7:c5:64:78:1c:be:44:b7:31:de:ac:34:bd:
         7a:3d:f4:b9:c3:d5:fb:bf:3a:b0:95:78:7f:bc:65:35:7b:86:
         0b:ad:e9:83:bc:be:57:b3:9c:4c:9f:3d:f4:57:61:8c:69:55:
         3b:04:1c:e5:bf:55:d0:4f:2c:28:a9:56:7c:b5:4a:05:ee:6d:
         15:bd:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:19 2025 by rpki-client