Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132302e302f32342d3234203d3e203338353133.roa
File:                     33362e33372e3132302e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          1KPJyRj3oTxMdIlTBRaXFj/QTQw2pqgbi3iyxMmcgik=
Subject key identifier:   7C:E4:7B:6E:92:D7:84:9D:71:36:2C:03:B9:4F:B5:84:32:E0:07:8D
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       5E1723BF581B79BE029B412192E5AFEFB2747199
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132302e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 01 Jul 2024 01:03:20 +0000
ROA not before:           Mon 01 Jul 2024 00:58:20 +0000
ROA not after:            Mon 30 Jun 2025 01:03:20 +0000
asID:                     38513
IP address blocks:        36.37.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Mar 2025 00:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:17:23:bf:58:1b:79:be:02:9b:41:21:92:e5:af:ef:b2:74:71:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:20 2024 GMT
            Not After : Jun 30 01:03:20 2025 GMT
        Subject: CN=7CE47B6E92D7849D71362C03B94FB58432E0078D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:df:8e:4b:1d:90:c9:4b:14:2c:20:b5:ca:
                    c9:31:2a:83:6e:f3:32:f8:34:6f:6d:27:31:f1:11:
                    3a:c0:03:28:d9:eb:56:1f:d2:10:34:29:82:1d:0e:
                    89:1e:c1:92:65:48:ff:96:02:55:37:4c:58:38:a3:
                    3c:74:47:91:01:cb:0c:96:67:6d:15:1f:35:2d:8d:
                    4c:cf:90:fd:7a:63:9d:00:82:ad:de:c9:49:f9:80:
                    61:b5:5a:50:91:98:ca:ff:92:7a:af:ff:ba:1a:51:
                    e8:17:c3:d3:6a:2c:76:f8:79:86:ea:f8:37:8f:72:
                    0b:ff:7d:4c:1f:70:a5:68:6b:43:0d:a7:83:3f:f5:
                    a3:a3:98:62:95:b8:d6:53:73:47:fd:53:b1:af:b8:
                    04:ff:01:03:ef:be:73:af:f6:a4:71:81:22:d2:66:
                    64:b2:98:e1:13:44:3e:8b:a1:3e:2b:46:d0:51:a3:
                    57:42:2c:5d:c6:21:b3:7d:30:83:b4:06:6c:f6:4e:
                    ee:2e:97:7f:b5:4c:51:aa:fb:ba:30:16:b4:46:e5:
                    d7:29:1f:99:7e:8d:d7:81:a4:e9:61:8d:5e:24:a3:
                    72:37:74:71:c0:7b:c9:de:ca:cd:bd:db:b8:f0:9d:
                    ac:b7:35:4e:bc:a4:1a:0a:ee:40:9a:0c:b4:70:9a:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E4:7B:6E:92:D7:84:9D:71:36:2C:03:B9:4F:B5:84:32:E0:07:8D
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132302e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:2d:98:04:f7:98:26:25:12:49:27:28:3a:48:96:0b:e6:
         f3:4c:a1:af:4a:35:8f:80:c2:c4:f2:06:19:9f:5e:f7:30:dd:
         07:54:6a:28:5e:be:73:bf:cc:12:68:7a:1c:f8:8c:d1:d6:a1:
         14:3e:e4:8a:35:71:aa:de:86:2b:13:40:59:e3:a7:f8:af:d0:
         04:ee:11:c3:e8:14:b5:c6:4f:e8:d4:19:10:2a:8b:02:7b:d1:
         20:a1:59:51:5f:a0:44:b0:db:38:e7:a2:aa:ba:f9:e4:07:49:
         16:3f:6c:d5:41:54:30:5e:ba:19:4f:3a:e5:8c:c1:64:75:39:
         d8:37:9e:65:de:8a:0f:4e:59:0f:44:49:08:87:b1:ef:4b:29:
         01:1f:33:b0:f0:ee:22:d6:d2:dc:87:a9:cf:b0:97:d7:eb:ab:
         a3:70:4a:b5:ba:1f:ff:98:f4:95:2f:da:91:83:e0:74:ed:55:
         bb:cf:4d:b2:27:5c:55:45:1e:6d:92:48:98:5f:30:35:4b:97:
         40:55:39:fd:9d:1f:d6:4e:ed:5d:75:29:5d:2d:69:e9:3d:aa:
         c0:c8:33:f9:aa:ce:f4:eb:b8:c8:ff:06:4c:ae:53:c1:06:58:
         e3:70:03:b2:49:c1:3f:be:24:65:08:d6:0d:58:ed:1b:40:fd:
         7f:84:04:e0
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUXhcjv1gbeb4Cm0EhkuWv77J0cZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yNDA3MDEwMDU4MjBaFw0yNTA2MzAwMTAzMjBaMDMxMTAvBgNV
BAMTKDdDRTQ3QjZFOTJENzg0OUQ3MTM2MkMwM0I5NEZCNTg0MzJFMDA3OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCri9+OSx2QyUsULCC1yskxKoNu
8zL4NG9tJzHxETrAAyjZ61Yf0hA0KYIdDokewZJlSP+WAlU3TFg4ozx0R5EBywyW
Z20VHzUtjUzPkP16Y50Agq3eyUn5gGG1WlCRmMr/knqv/7oaUegXw9NqLHb4eYbq
+DePcgv/fUwfcKVoa0MNp4M/9aOjmGKVuNZTc0f9U7GvuAT/AQPvvnOv9qRxgSLS
ZmSymOETRD6LoT4rRtBRo1dCLF3GIbN9MIO0Bmz2Tu4ul3+1TFGq+7owFrRG5dcp
H5l+jdeBpOlhjV4ko3I3dHHAe8neys2927jwnay3NU68pBoK7kCaDLRwmrOfAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUfOR7bpLXhJ1xNiwDuU+1hDLgB40wHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMzMzYyZTMzMzcyZTMxMzIzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAkJXgwDQYJKoZIhvcN
AQELBQADggEBAB8yLZgE95gmJRJJJyg6SJYL5vNMoa9KNY+AwsTyBhmfXvcw3QdU
aihevnO/zBJoehz4jNHWoRQ+5Io1carehisTQFnjp/iv0ATuEcPoFLXGT+jUGRAq
iwJ70SChWVFfoESw2zjnoqq6+eQHSRY/bNVBVDBeuhlPOuWMwWR1Odg3nmXeig9O
WQ9ESQiHse9LKQEfM7Dw7iLW0tyHqc+wl9frq6NwSrW6H/+Y9JUv2pGD4HTtVbvP
TbInXFVFHm2SSJhfMDVLl0BVOf2dH9ZO7V11KV0taek9qsDIM/mqzvTruMj/Bkyu
U8EGWONwA7JJwT++JGUI1g1Y7RtA/X+EBOA=
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:03:29 2025 by rpki-client