Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132312e302f32342d3234203d3e203338353133.roa
File:                     33362e33372e3132312e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          AVLPUP5/8B3i6afvXEpeu6R3ibaMpa1yZDo0wXPWo1Q=
Subject key identifier:   0B:85:C0:0E:E0:B7:B1:D9:4C:BD:47:B1:3E:DC:A7:24:81:5D:92:EE
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       7AF72C276022D8F6B719E390CD8EFEC9848EBEA1
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132312e302f32342d3234203d3e203338353133.roa
Signing time:             Wed 17 Apr 2024 05:00:00 +0000
ROA not before:           Wed 17 Apr 2024 04:55:00 +0000
ROA not after:            Wed 16 Apr 2025 05:00:00 +0000
asID:                     38513
IP address blocks:        36.37.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f7:2c:27:60:22:d8:f6:b7:19:e3:90:cd:8e:fe:c9:84:8e:be:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Apr 17 04:55:00 2024 GMT
            Not After : Apr 16 05:00:00 2025 GMT
        Subject: CN=0B85C00EE0B7B1D94CBD47B13EDCA724815D92EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:d1:2c:bc:f1:c9:69:45:f3:ae:d9:69:ca:
                    05:31:46:df:87:c0:bc:34:30:5d:86:28:16:23:f4:
                    0a:80:84:c8:44:83:2b:71:a0:6c:06:c9:08:99:87:
                    66:98:5c:9e:51:9b:0e:38:23:4a:e6:1e:f4:3f:87:
                    47:62:04:24:7b:e9:f6:65:a9:c1:8f:f9:27:1f:5d:
                    7b:4a:08:df:75:c1:0b:7a:c2:19:2d:17:6d:b4:a0:
                    2c:96:0c:83:6e:0b:d7:34:e8:be:bf:f2:bf:da:f8:
                    f6:bb:92:dc:fb:d0:c2:77:15:16:6e:b3:ac:99:84:
                    c8:ea:17:2d:fa:17:72:7d:26:2f:90:e8:bb:ad:14:
                    7e:51:1c:79:75:83:be:0c:b1:6d:ea:5a:b0:3a:b5:
                    70:15:f0:f1:c0:92:63:f7:a2:0c:55:bf:01:bf:7f:
                    b9:60:71:e1:6c:fc:3a:d9:7d:cd:4b:91:87:c2:94:
                    20:91:87:ca:38:f1:b8:1b:bc:83:30:a8:f6:df:db:
                    e6:85:ad:69:00:10:08:4a:16:2a:23:86:f9:08:ff:
                    99:e6:31:4f:86:9f:b5:cd:9a:d2:a4:6f:8e:68:d0:
                    f4:a3:cd:35:34:b7:b8:1f:93:0a:da:ea:f8:d9:5c:
                    fd:18:fe:35:61:a5:24:ce:b8:05:7c:70:8d:98:b6:
                    72:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:85:C0:0E:E0:B7:B1:D9:4C:BD:47:B1:3E:DC:A7:24:81:5D:92:EE
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132312e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:45:e6:ad:9c:20:58:22:b1:5f:9d:36:1e:cb:c2:c8:be:
         18:b8:9c:61:ff:23:8b:d6:3e:da:5b:93:81:e3:b0:f8:18:f2:
         eb:c5:09:f7:15:36:cc:43:bf:4a:4c:d9:af:39:67:8e:e3:a5:
         d1:74:97:86:3e:60:cd:ed:06:74:bf:4c:ca:e4:a1:90:90:ac:
         87:8a:28:bf:f9:11:b2:46:ea:2d:d1:00:2d:17:59:8e:c4:09:
         d0:c8:4a:2a:9e:68:36:8d:3d:65:d1:9e:e4:78:08:3f:63:8c:
         45:73:09:8e:81:ac:f8:d0:81:43:b5:db:ef:0d:4d:dd:af:07:
         7d:00:a0:9e:e5:11:9b:59:02:16:10:30:5c:03:10:9e:83:51:
         4c:f0:5f:d4:02:84:b6:4e:5e:88:ba:d5:ee:77:3c:e1:cc:8f:
         6a:91:13:2a:6d:ea:47:ba:2f:46:0d:54:e5:90:33:40:7f:b4:
         90:d6:0b:e1:0d:94:77:85:9d:ed:83:2f:14:e1:f8:eb:d4:d5:
         01:0a:ea:83:c9:53:56:f6:c9:ac:6a:1d:17:e6:ea:20:85:a9:
         99:21:ed:2c:bd:99:6f:b4:7d:92:bd:3b:ba:6c:a5:74:d5:01:
         46:93:98:b5:0b:94:f5:58:e5:fd:05:0d:98:f1:20:77:5c:4e:
         51:2b:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org