Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39372e302f32342d3234203d3e20313335333630.roa
File:                     34352e36342e39372e302f32342d3234203d3e20313335333630.roa (raw, json)
Hash identifier:          9WCeU5uurKdIma/RjBrGY6SbYw575daktwtbDsB0hn4=
Subject key identifier:   44:05:2F:C7:C7:E9:4A:B5:15:5C:BF:0A:C1:79:70:DF:8C:BE:D2:22
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       2221FFF74ABD484018BFCBBC135BFAA12021933C
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39372e302f32342d3234203d3e20313335333630.roa
Signing time:             Mon 01 Jul 2024 01:05:28 +0000
ROA not before:           Mon 01 Jul 2024 01:00:28 +0000
ROA not after:            Mon 30 Jun 2025 01:05:28 +0000
asID:                     135360
IP address blocks:        45.64.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
                          rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:21:ff:f7:4a:bd:48:40:18:bf:cb:bc:13:5b:fa:a1:20:21:93:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: Jul  1 01:00:28 2024 GMT
            Not After : Jun 30 01:05:28 2025 GMT
        Subject: CN=44052FC7C7E94AB5155CBF0AC17970DF8CBED222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d6:f4:52:4b:cb:2e:1f:7a:d8:75:b6:14:c5:
                    34:3b:e6:23:8f:13:98:ec:1a:0f:27:3a:ba:03:d7:
                    87:6c:bf:ae:5e:5e:5e:45:c9:7c:c0:3a:36:cd:be:
                    75:0e:8b:fc:06:d8:6c:87:46:93:46:0e:ec:ab:46:
                    39:8e:3c:15:47:ef:10:51:6d:ea:fc:b5:78:b0:f0:
                    59:f1:f8:a5:e1:6a:21:04:b3:0e:af:6a:3a:6a:d1:
                    1b:1d:6c:93:f0:28:64:ac:c4:71:d9:92:4c:25:9b:
                    8e:df:f9:b1:9f:4f:aa:fe:e7:ad:1b:d1:e7:a4:4c:
                    56:d6:1a:91:de:b5:34:e0:65:68:28:24:f0:3e:09:
                    fd:7f:df:0c:19:45:74:5c:bc:c1:4f:0c:6e:c0:d5:
                    4c:9e:92:fa:61:0d:ac:7d:3a:16:9c:a4:a1:3a:23:
                    92:d1:81:6b:de:42:5d:f7:d3:23:bc:89:21:bc:0c:
                    fe:c6:2d:5e:f4:c1:90:42:38:69:9b:73:04:ea:13:
                    c8:e3:5a:32:9f:a5:94:36:df:e0:d9:c0:b6:0b:72:
                    7d:1a:3b:23:5c:b8:26:6e:e0:4e:52:b2:0e:e9:a1:
                    6e:1d:b9:54:ce:9a:1c:40:69:e8:01:c1:29:ee:f0:
                    d5:ce:5b:76:5d:53:53:f7:68:90:aa:a0:60:52:cf:
                    56:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:05:2F:C7:C7:E9:4A:B5:15:5C:BF:0A:C1:79:70:DF:8C:BE:D2:22
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39372e302f32342d3234203d3e20313335333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:d1:7e:aa:11:f7:99:d3:b6:33:37:33:e4:af:c7:b3:a7:
         1e:03:71:91:a3:b9:46:fe:b9:16:5b:b9:12:52:fa:72:8f:78:
         ea:dc:84:b2:46:00:6d:96:61:54:33:9a:25:20:57:07:f6:91:
         d5:66:2b:26:e8:ee:7a:b3:c7:12:cf:59:c6:9f:3a:2e:9e:1e:
         cc:d6:c8:b9:73:8d:82:98:e3:a4:7e:ad:38:d9:2a:c3:33:b8:
         9c:6b:eb:7c:9e:cf:fd:32:bc:ab:d4:37:3e:a8:24:97:f5:6f:
         38:2a:60:26:d9:f1:65:c1:2c:12:87:9b:0e:71:b6:9e:d9:dc:
         77:51:e1:37:23:3c:0a:59:de:81:3d:44:d3:a3:2a:c2:9c:bb:
         0b:9b:93:61:ab:f7:2c:93:f8:4f:61:ae:d0:9e:fb:bb:93:4c:
         69:fd:83:75:db:d2:c7:f9:7b:ed:10:df:1d:34:d9:29:85:49:
         7c:aa:fb:26:2f:e1:af:af:2c:a1:7b:15:e7:d4:b4:6a:36:b5:
         c8:8a:1d:0e:5b:9d:2d:7b:1e:99:34:9e:57:a9:c0:67:b9:b0:
         f4:9a:d0:d6:86:d0:8e:5d:71:57:43:37:58:48:f2:bd:0d:8b:
         60:5a:2b:1e:c9:f7:c2:2b:2d:20:65:54:64:bf:79:22:37:85:
         80:c6:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org