Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa
File:                     3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          RxAqqGIjAjElrnU8PFN5nKoDC84ZzbZV0l+WFSmmu2o=
Subject key identifier:   C6:B3:BF:FD:01:60:63:ED:C1:DB:D1:04:92:03:34:9D:AF:A7:37:89
Certificate issuer:       /CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
Certificate serial:       37EA43EFCD2C5608C2BFD65041800B33FD7240E7
Authority key identifier: AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa
Signing time:             Thu 11 Jul 2024 09:01:06 +0000
ROA not before:           Thu 11 Jul 2024 08:56:06 +0000
ROA not after:            Thu 10 Jul 2025 09:01:06 +0000
asID:                     133800
IP address blocks:        137.59.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl
                          rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ea:43:ef:cd:2c:56:08:c2:bf:d6:50:41:80:0b:33:fd:72:40:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
        Validity
            Not Before: Jul 11 08:56:06 2024 GMT
            Not After : Jul 10 09:01:06 2025 GMT
        Subject: CN=C6B3BFFD016063EDC1DBD1049203349DAFA73789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:dd:28:9b:6f:4d:42:e2:ef:b1:16:18:07:
                    01:c1:b1:96:4d:dc:5b:5c:6c:2c:5a:a3:ab:a7:7a:
                    a6:68:ac:99:0b:6b:7e:9e:63:0c:9b:cc:0c:dd:19:
                    41:59:d7:37:22:d7:d1:fc:2b:04:6d:3c:88:7f:c4:
                    a6:2d:85:81:53:c4:6d:81:20:18:9a:6a:57:38:98:
                    36:26:46:15:53:3e:c8:43:c9:26:03:3d:85:b4:9b:
                    d2:de:e9:2c:36:4d:98:55:65:af:04:8d:ee:09:94:
                    34:63:67:10:f5:13:2b:8a:67:6a:9c:a1:b5:aa:c9:
                    71:3d:cd:6e:e2:02:c0:3b:33:50:b2:88:47:8c:fb:
                    61:b0:ef:1d:b3:32:1a:5e:ed:c9:db:f0:e9:27:4d:
                    56:21:a2:8d:ca:97:96:ce:c9:9e:43:03:85:2e:33:
                    ec:00:d5:f5:42:bb:1d:c0:9c:a1:6b:54:b9:c1:40:
                    b1:f3:76:2a:b8:59:ec:aa:50:08:5c:bc:c5:52:94:
                    a7:40:2a:72:54:9b:ac:b3:99:d0:c1:d6:61:a4:dd:
                    d9:4f:be:7c:8c:71:b0:fc:09:29:2d:bc:f5:8b:14:
                    48:b2:b2:d2:e6:3e:1d:84:9f:00:06:b5:9c:43:8a:
                    e8:fa:8b:c1:c8:e4:1b:b7:74:2b:71:af:fa:ac:91:
                    33:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B3:BF:FD:01:60:63:ED:C1:DB:D1:04:92:03:34:9D:AF:A7:37:89
            X509v3 Authority Key Identifier:
                keyid:AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.59.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:c2:fc:52:1d:f3:38:02:31:2f:ff:f8:39:a6:55:c1:53:72:
         3f:da:7f:42:5d:3c:a6:d9:9e:e3:c9:93:82:a9:cb:3d:c6:25:
         40:0a:6a:fc:cc:d2:70:21:ed:e1:3e:ca:98:29:1f:16:86:17:
         25:e1:94:a9:c0:b8:d9:59:aa:4e:59:21:3b:1b:29:4d:a5:4d:
         38:00:4e:a5:11:56:2a:aa:51:e9:22:c8:e7:29:9d:3e:9d:e3:
         3f:c6:35:e0:9d:7a:04:7b:24:c0:63:78:ce:47:6d:a5:c8:2c:
         54:87:51:8e:47:dd:57:6e:76:61:ed:d0:98:7b:96:9e:5f:63:
         38:1f:a1:e4:63:f3:01:ec:91:89:5d:e5:06:b5:6e:2a:8c:54:
         d6:9d:fa:e5:c5:44:25:f4:7f:0d:cb:79:2f:5d:0e:6d:97:c4:
         ef:6a:31:d8:de:61:7d:73:4a:9e:8a:1f:24:89:75:d8:1d:0e:
         1e:c8:8c:fa:4e:6d:a9:34:3b:0d:c3:67:5f:17:7b:f3:82:48:
         5d:f4:b6:3b:2a:06:a0:9b:31:63:6c:af:94:6b:9e:1f:46:d7:
         3c:15:1a:6f:0d:68:ae:8f:bd:43:d5:12:91:0b:d9:5b:8e:ed:
         42:b0:e0:64:42:65:a6:ba:81:09:20:fb:87:4e:0c:c1:c1:a5:
         20:79:85:f1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUN+pD780sVgjCv9ZQQYALM/1yQOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQzNjFF
RUY0REZCQTAeFw0yNDA3MTEwODU2MDZaFw0yNTA3MTAwOTAxMDZaMDMxMTAvBgNV
BAMTKEM2QjNCRkZEMDE2MDYzRURDMURCRDEwNDkyMDMzNDlEQUZBNzM3ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLN0om29NQuLvsRYYBwHBsZZN
3FtcbCxao6uneqZorJkLa36eYwybzAzdGUFZ1zci19H8KwRtPIh/xKYthYFTxG2B
IBiaalc4mDYmRhVTPshDySYDPYW0m9Le6Sw2TZhVZa8Eje4JlDRjZxD1EyuKZ2qc
obWqyXE9zW7iAsA7M1CyiEeM+2Gw7x2zMhpe7cnb8OknTVYhoo3Kl5bOyZ5DA4Uu
M+wA1fVCux3AnKFrVLnBQLHzdiq4WeyqUAhcvMVSlKdAKnJUm6yzmdDB1mGk3dlP
vnyMcbD8CSktvPWLFEiystLmPh2EnwAGtZxDiuj6i8HI5Bu3dCtxr/qskTMVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUxrO//QFgY+3B29EEkgM0na+nN4kwHwYDVR0j
BBgwFoAUrM7ONo8EFCUFlA/yn03TYe7037owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NDRjYjhkOC0xNTA1LTQ2ODItOWRkYi1mY2Q4NjIwMGI5NjYvMC9BQ0NFQ0UzNjhG
MDQxNDI1MDU5NDBGRjI5RjRERDM2MUVFRjRERkJBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQzNjFFRUY0
REZCQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU0NGNiOGQ4LTE1MDUtNDY4Mi05
ZGRiLWZjZDg2MjAwYjk2Ni8wLzMxMzMzNzJlMzUzOTJlMzEzMjM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiTt8MA0GCSqG
SIb3DQEBCwUAA4IBAQBcwvxSHfM4AjEv//g5plXBU3I/2n9CXTym2Z7jyZOCqcs9
xiVACmr8zNJwIe3hPsqYKR8Whhcl4ZSpwLjZWapOWSE7GylNpU04AE6lEVYqqlHp
IsjnKZ0+neM/xjXgnXoEeyTAY3jOR22lyCxUh1GOR91XbnZh7dCYe5aeX2M4H6Hk
Y/MB7JGJXeUGtW4qjFTWnfrlxUQl9H8Ny3kvXQ5tl8TvajHY3mF9c0qeih8kiXXY
HQ4eyIz6Tm2pNDsNw2dfF3vzgkhd9LY7KgagmzFjbK+Ua54fRtc8FRpvDWiuj71D
1RKRC9lbju1CsOBkQmWmuoEJIPuHTgzBwaUgeYXx
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org