Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39372e302f32342d3234203d3e20313335333630.roa
File:                     34352e36342e39372e302f32342d3234203d3e20313335333630.roa (raw, json)
Hash identifier:          i8E531bAACF/do6q7C690HP7ycKInzio0QMeynldjVQ=
Subject key identifier:   08:41:2E:13:CB:62:17:D3:2A:80:74:92:DE:10:E4:C2:29:E0:E8:24
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       2619028EF13A1D03CDB8C70AE25CB2A7DBE9FDE1
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39372e302f32342d3234203d3e20313335333630.roa
Signing time:             Mon 02 Jun 2025 02:04:30 +0000
ROA not before:           Mon 02 Jun 2025 01:59:30 +0000
ROA not after:            Mon 01 Jun 2026 02:04:30 +0000
asID:                     135360
IP address blocks:        45.64.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
                          rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:19:02:8e:f1:3a:1d:03:cd:b8:c7:0a:e2:5c:b2:a7:db:e9:fd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: Jun  2 01:59:30 2025 GMT
            Not After : Jun  1 02:04:30 2026 GMT
        Subject: CN=08412E13CB6217D32A807492DE10E4C229E0E824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:30:0c:cd:f7:95:5a:21:b6:de:fe:62:c0:
                    66:6f:c9:c1:47:38:2f:84:09:cc:f0:a1:92:99:e2:
                    36:2e:f2:c5:cc:3b:4e:a2:a3:70:0b:26:db:b7:17:
                    11:22:87:97:05:e7:0e:29:16:be:b3:27:fe:a4:7b:
                    b8:ee:79:37:7d:62:e6:fa:43:5c:c7:76:39:f0:65:
                    26:76:54:8f:49:b2:3d:8c:55:6f:ca:05:f2:84:c7:
                    0b:4f:64:ea:bb:95:ed:d4:ba:3b:8d:3c:b3:47:64:
                    a9:95:91:46:f5:6d:7b:f4:43:46:08:0d:3a:59:27:
                    92:a1:2d:80:2c:cb:57:c1:d7:fc:5c:f9:43:dc:19:
                    ed:27:93:c9:07:0e:72:97:a5:d8:61:af:e8:10:24:
                    a8:cd:ae:d2:95:2c:4b:a8:c6:2a:d1:4d:46:c6:49:
                    bf:f4:0d:56:84:00:b3:cf:24:f7:d9:6b:a6:df:52:
                    5f:36:e1:3b:ed:a1:f0:81:7a:df:3e:0a:f8:64:92:
                    a0:c8:2a:a1:22:35:5b:68:97:8d:6e:29:8e:f0:19:
                    02:77:ec:26:00:a3:eb:d2:05:cc:cb:e0:d1:7c:1d:
                    4f:fe:e0:15:a4:9e:e3:87:c4:b3:62:64:70:e4:21:
                    6f:c0:2d:46:61:a6:bd:40:0e:69:c1:df:59:b7:a1:
                    c9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:41:2E:13:CB:62:17:D3:2A:80:74:92:DE:10:E4:C2:29:E0:E8:24
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39372e302f32342d3234203d3e20313335333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:70:84:f2:a9:78:31:06:36:89:f7:8e:94:34:76:99:06:27:
         1a:4a:59:87:8b:53:0b:6b:f9:79:58:88:a8:ef:04:55:82:76:
         fe:40:26:3f:25:eb:21:5d:ca:8f:a5:66:90:32:2b:6d:10:6c:
         2d:57:1c:c0:9b:68:68:56:c4:2f:32:f5:b9:88:1d:c7:e9:8f:
         53:19:ad:c8:cb:7b:b2:2d:45:ca:3e:6d:c5:fa:51:36:6e:f1:
         9a:01:09:e7:45:8b:e5:8c:4f:15:05:4f:c9:ae:f1:7a:39:88:
         cf:37:fb:c6:df:8f:23:c9:3d:40:98:a5:1e:65:a6:fa:a3:b5:
         22:11:01:22:5f:d0:18:db:5a:48:43:57:3b:87:5f:c5:69:7a:
         36:db:b2:bd:e7:a0:6e:37:84:cd:a2:4a:37:75:c2:73:18:5c:
         a6:b6:e2:fc:ae:b1:1e:33:d7:a5:a9:7c:a8:01:fb:96:c6:08:
         60:70:78:46:df:bf:49:ec:99:63:3a:e3:78:0b:92:3e:a0:2f:
         60:30:e0:13:ba:76:81:87:31:7e:d6:9d:d4:a0:e3:f5:a8:46:
         77:ff:fc:6a:eb:16:34:7f:b5:7a:88:12:2f:b1:be:d9:43:35:
         12:66:41:70:94:9c:7c:93:c7:07:67:df:a7:cd:11:78:09:19:
         04:cc:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:44:45 2025 by rpki-client