Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132322e302f32342d3234203d3e203338353133.roa
File:                     33362e33372e3132322e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          DrL9RJ6W1TUiMScODRJKyrkrOzxqqgaiUN4CPrI6ueU=
Subject key identifier:   79:F0:DA:49:2E:0F:50:76:A2:DE:8D:6A:88:3D:5E:33:A0:B5:4F:E7
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       3559A9110CD0A38853DF8B2F10A37071668D12A4
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132322e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 01 Jul 2024 01:03:20 +0000
ROA not before:           Mon 01 Jul 2024 00:58:20 +0000
ROA not after:            Mon 30 Jun 2025 01:03:20 +0000
asID:                     38513
IP address blocks:        36.37.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:59:a9:11:0c:d0:a3:88:53:df:8b:2f:10:a3:70:71:66:8d:12:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:20 2024 GMT
            Not After : Jun 30 01:03:20 2025 GMT
        Subject: CN=79F0DA492E0F5076A2DE8D6A883D5E33A0B54FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8a:65:3d:fd:44:0d:0c:4b:80:75:ed:95:aa:
                    36:34:3d:81:17:52:82:2e:0e:d0:8d:27:89:1f:ed:
                    2a:10:eb:ef:91:c4:c1:d3:44:79:39:2b:9f:b8:8d:
                    bd:de:8c:c2:9c:9a:02:57:9e:24:c3:90:4b:ba:c7:
                    7c:4e:e2:78:4c:95:4f:fe:1f:34:23:8a:14:42:27:
                    70:e6:91:2f:7e:f0:0f:60:e2:3c:d2:64:d3:84:87:
                    78:2b:86:72:85:95:49:df:6c:f7:73:80:f3:20:2a:
                    41:9e:f1:1b:f3:a5:8b:c1:d2:78:13:a6:ef:1f:09:
                    90:d5:61:23:3f:ca:0b:6a:f7:db:c7:0a:bc:17:39:
                    b5:62:dc:7c:1c:3b:9d:e2:c2:85:95:5b:af:1d:d6:
                    26:3d:49:89:21:9a:ff:7b:b2:1c:7a:c4:6b:0f:1c:
                    28:ad:c3:ae:d6:c3:1e:ef:2d:bc:4d:9f:2a:d3:c5:
                    5d:28:a5:0d:a0:83:fc:14:5f:ed:46:d2:44:69:e9:
                    2f:76:e0:d8:a2:ed:55:a2:8d:ed:90:12:4f:2a:31:
                    d0:06:39:bf:8c:20:e2:1a:96:9e:d8:77:be:0b:03:
                    45:24:2c:fb:10:bc:d1:c6:7b:09:ee:b5:49:08:67:
                    e3:d1:66:9f:1a:3f:59:d7:e5:3a:75:11:97:57:32:
                    7f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F0:DA:49:2E:0F:50:76:A2:DE:8D:6A:88:3D:5E:33:A0:B5:4F:E7
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132322e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:df:26:20:5d:bd:5b:62:ad:b5:6c:8d:38:88:08:3b:14:63:
         b3:b8:0c:e3:de:5f:08:f5:5b:db:f9:aa:ec:9b:72:05:24:9d:
         e0:f4:ad:ae:39:cb:20:1a:dd:69:7a:b2:52:cc:b4:f4:a4:ff:
         ff:1f:b7:03:ac:09:57:f4:24:75:24:a3:c4:5e:d1:00:bf:be:
         88:eb:7c:cf:20:7b:88:2b:df:71:81:d9:49:57:e9:f6:88:9f:
         7d:56:1c:3b:0e:f0:88:6c:f6:1b:4c:34:91:aa:7f:e3:d1:9e:
         95:d0:56:c3:27:ef:b1:2b:7a:d6:c4:99:e6:34:fb:02:8f:24:
         8f:f6:5a:99:c0:2d:15:70:9f:1c:f4:33:bb:ca:a6:bf:f8:ae:
         91:ca:43:c7:fb:d7:18:1e:69:c1:34:08:bd:6d:2b:8b:7a:b4:
         83:c3:d6:5a:f8:f9:de:7f:f9:ed:21:2e:78:ac:0d:95:de:1a:
         b3:eb:cc:43:78:75:9f:37:cf:af:bf:52:36:eb:01:a4:a5:80:
         0c:05:a1:88:d9:72:84:91:df:26:ac:4b:f1:88:5a:ac:a9:7f:
         fd:d0:d0:26:b7:4d:b9:58:51:67:32:8a:24:d9:13:ba:37:4c:
         86:02:6d:5e:6f:74:08:f9:44:f7:61:ce:74:df:ad:de:8b:8b:
         92:9c:ed:99
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUNVmpEQzQo4hT34svEKNwcWaNEqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yNDA3MDEwMDU4MjBaFw0yNTA2MzAwMTAzMjBaMDMxMTAvBgNV
BAMTKDc5RjBEQTQ5MkUwRjUwNzZBMkRFOEQ2QTg4M0Q1RTMzQTBCNTRGRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbimU9/UQNDEuAde2VqjY0PYEX
UoIuDtCNJ4kf7SoQ6++RxMHTRHk5K5+4jb3ejMKcmgJXniTDkEu6x3xO4nhMlU/+
HzQjihRCJ3DmkS9+8A9g4jzSZNOEh3grhnKFlUnfbPdzgPMgKkGe8RvzpYvB0ngT
pu8fCZDVYSM/ygtq99vHCrwXObVi3HwcO53iwoWVW68d1iY9SYkhmv97shx6xGsP
HCitw67Wwx7vLbxNnyrTxV0opQ2gg/wUX+1G0kRp6S924Nii7VWije2QEk8qMdAG
Ob+MIOIalp7Yd74LA0UkLPsQvNHGewnutUkIZ+PRZp8aP1nX5Tp1EZdXMn+fAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUefDaSS4PUHai3o1qiD1eM6C1T+cwHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMzMzYyZTMzMzcyZTMxMzIzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAkJXowDQYJKoZIhvcN
AQELBQADggEBAAXfJiBdvVtirbVsjTiICDsUY7O4DOPeXwj1W9v5quybcgUkneD0
ra45yyAa3Wl6slLMtPSk//8ftwOsCVf0JHUko8Re0QC/vojrfM8ge4gr33GB2UlX
6faIn31WHDsO8Ihs9htMNJGqf+PRnpXQVsMn77EretbEmeY0+wKPJI/2WpnALRVw
nxz0M7vKpr/4rpHKQ8f71xgeacE0CL1tK4t6tIPD1lr4+d5/+e0hLnisDZXeGrPr
zEN4dZ83z6+/UjbrAaSlgAwFoYjZcoSR3yasS/GIWqypf/3Q0Ca3TblYUWcyiiTZ
E7o3TIYCbV5vdAj5RPdhznTfrd6Li5Kc7Zk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org