Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36342e302f31382d3234203d3e2034383030.roa
File:                     33362e33372e36342e302f31382d3234203d3e2034383030.roa (raw, json)
Hash identifier:          jHcTTAhjYN2J1wmGkFicvXaioeaepmny1srdgaLZ4wk=
Subject key identifier:   17:82:35:48:32:05:BC:19:6D:E2:F6:88:E8:D1:34:CC:27:31:20:D4
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       6420E946734E9BB18F2F2E00AEDA7E3209C0F25F
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36342e302f31382d3234203d3e2034383030.roa
Signing time:             Mon 01 Jul 2024 01:03:18 +0000
ROA not before:           Mon 01 Jul 2024 00:58:18 +0000
ROA not after:            Mon 30 Jun 2025 01:03:18 +0000
asID:                     4800
IP address blocks:        36.37.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:20:e9:46:73:4e:9b:b1:8f:2f:2e:00:ae:da:7e:32:09:c0:f2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:18 2024 GMT
            Not After : Jun 30 01:03:18 2025 GMT
        Subject: CN=178235483205BC196DE2F688E8D134CC273120D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:dc:05:78:90:8f:4e:bd:c2:c4:4d:e4:31:
                    97:79:92:98:9e:74:15:8e:c0:97:d0:ce:0b:af:dc:
                    17:67:47:1d:f0:dc:97:3a:ee:5b:cb:f4:7e:8f:34:
                    e5:11:86:98:5f:8f:d0:b4:8f:82:59:4c:c2:79:87:
                    50:d0:c4:78:a7:0f:0f:4a:0a:1b:9e:e5:de:8b:da:
                    28:61:ef:26:0f:b1:17:31:93:4e:34:01:9b:0a:92:
                    20:b4:de:12:a7:4a:bb:5e:12:f1:7d:b3:4f:56:03:
                    6e:a7:d4:3d:70:80:d0:ce:7d:1b:43:7f:ec:11:96:
                    0f:e4:8c:d8:53:ae:f0:cb:b5:02:5e:86:a5:b2:f2:
                    bd:a4:4f:8f:3c:a6:11:c3:cd:32:87:fb:aa:34:5a:
                    83:cd:a4:6b:3d:a4:c7:6a:63:4a:af:62:cd:2c:c0:
                    07:05:f8:92:95:41:e0:ca:e9:c9:6e:83:da:dc:ce:
                    1c:56:3f:60:5b:e6:2e:e6:9f:57:f4:d2:eb:78:cf:
                    58:51:08:83:ed:61:61:fc:63:03:8f:ac:a5:7e:18:
                    85:3c:af:c4:85:83:5e:2b:ed:dc:5e:f7:bf:c4:42:
                    e9:8a:a0:20:a7:fb:99:10:d7:f5:6d:7b:bb:8f:bf:
                    fa:6a:1a:ec:85:fa:a2:24:dc:18:62:03:79:1b:34:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:82:35:48:32:05:BC:19:6D:E2:F6:88:E8:D1:34:CC:27:31:20:D4
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36342e302f31382d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         60:c4:48:d3:f5:ff:e8:f1:a4:27:78:d5:46:57:e7:32:c4:2d:
         ea:15:7b:3a:6b:f3:09:38:bc:b0:cc:2d:e0:42:ad:e3:41:9e:
         a1:a7:47:eb:3c:7e:a6:fd:d3:46:73:1f:f4:6d:27:dd:48:8a:
         67:52:dd:b1:3a:7e:ad:82:01:c0:8d:5d:b9:68:ac:c5:d5:30:
         d8:88:be:68:6a:ad:1d:48:9b:a2:23:45:0a:f1:7d:39:2c:76:
         e5:9b:91:7e:3d:ef:c1:50:09:5a:4f:6b:09:29:bf:1f:14:82:
         8d:3d:b8:fd:5b:72:b2:79:47:b8:fc:39:50:ee:50:7e:84:d2:
         b1:fc:13:ba:16:eb:fb:b4:4c:c6:9b:55:21:0b:26:13:90:eb:
         2f:9f:34:33:b7:97:90:25:fc:36:75:dd:31:fe:11:bc:b6:75:
         63:bd:ce:b1:46:22:51:6c:96:d6:44:e8:d2:e1:0b:a4:b2:b6:
         37:27:99:79:d4:c7:8d:8f:bf:4b:80:d5:59:26:59:d0:55:9d:
         5a:8b:00:e1:b6:30:f7:39:b3:45:80:b9:85:ab:a7:ca:3a:a1:
         28:2c:4c:6f:a9:b4:4c:bb:00:0e:6f:fe:91:8f:d2:13:cc:9b:
         98:b9:94:59:7b:b4:cb:c5:25:d3:87:78:64:5f:ef:08:4b:2e:
         65:4b:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:10 2024 by rpki-client on console-ams.rpki-client.org