Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36342e302f31382d3234203d3e2034383030.roa
File:                     33362e33372e36342e302f31382d3234203d3e2034383030.roa (raw, json)
Hash identifier:          w05yB+X7e2zhs5gS+OXMX9gAcO9FLx+t3WR7WFwTjiw=
Subject key identifier:   EF:F6:17:B7:92:1E:4C:04:F0:95:ED:1E:85:03:E2:A7:10:E0:8C:54
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       0CA557B5873AF691729824BC3F4C6EE941A0F6C9
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36342e302f31382d3234203d3e2034383030.roa
Signing time:             Mon 31 Jul 2023 00:04:32 +0000
ROA not before:           Sun 30 Jul 2023 23:59:32 +0000
ROA not after:            Mon 29 Jul 2024 00:04:32 +0000
asID:                     4800
IP address blocks:        36.37.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Jun 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a5:57:b5:87:3a:f6:91:72:98:24:bc:3f:4c:6e:e9:41:a0:f6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:32 2023 GMT
            Not After : Jul 29 00:04:32 2024 GMT
        Subject: CN=EFF617B7921E4C04F095ED1E8503E2A710E08C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:9f:c7:ac:b6:f7:83:b7:d2:fd:50:54:16:
                    af:53:27:bf:7e:67:f8:ea:36:96:b7:83:a4:cc:eb:
                    f9:25:66:e5:dd:8d:c7:aa:51:3d:2b:34:c1:c1:3e:
                    7e:23:8d:7a:fa:75:57:cf:dc:55:a8:bc:77:27:d6:
                    af:c0:c7:90:1a:1d:db:42:4f:13:c4:13:91:15:26:
                    cc:90:40:62:3a:ae:36:42:d4:ba:d3:f4:31:db:e3:
                    8f:6c:88:2e:ee:7c:fc:40:e8:cc:f1:9f:d3:21:5c:
                    04:7b:3a:65:47:4e:4e:11:4d:63:be:7c:3e:92:75:
                    64:08:e1:24:2c:38:4a:fb:2f:79:d0:df:1b:27:b1:
                    1c:4b:ed:ee:b1:42:13:79:30:cf:01:a3:97:2a:b6:
                    62:3e:c6:32:c4:68:67:50:4f:a8:79:3f:a7:5a:bd:
                    f2:73:68:7a:e0:00:4c:c4:80:be:a9:f3:86:9d:77:
                    af:8f:fe:b2:c6:29:1c:2a:6a:ec:bc:59:4c:cc:f0:
                    58:cf:74:6e:74:ce:9c:cd:c3:8d:89:84:04:28:4f:
                    20:07:6b:78:90:12:34:a3:44:f5:59:08:00:06:da:
                    88:08:32:9d:e4:60:c0:25:ae:cf:f4:ff:b8:d8:64:
                    90:19:8a:0e:b5:72:0f:9c:6e:6d:30:f9:f9:59:82:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F6:17:B7:92:1E:4C:04:F0:95:ED:1E:85:03:E2:A7:10:E0:8C:54
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36342e302f31382d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:52:17:f0:2e:57:1d:3c:4f:84:c9:15:f6:6b:08:7a:91:
         13:00:b0:d4:9a:e8:e6:31:aa:75:4e:72:75:f6:4a:da:2c:03:
         f1:fc:ec:b5:e9:71:9e:2a:26:24:ab:82:d6:58:b1:ec:04:50:
         4a:3e:ff:6e:59:7f:88:18:68:c9:60:82:5b:a8:91:e5:a0:6d:
         ab:e6:fd:3c:58:a7:83:a0:64:be:a2:37:ec:18:e7:1e:18:0a:
         c8:c7:7b:3a:91:6e:47:85:52:05:0d:14:73:8b:fb:52:bb:ac:
         87:cd:70:e9:08:e0:2e:4e:80:f9:e5:93:4c:91:9e:f3:4f:fa:
         4f:77:66:3f:7a:ee:15:be:19:91:e0:63:2b:4f:04:b1:5a:d8:
         a0:68:8d:ed:e9:d6:ab:8e:91:57:48:a7:e5:80:45:78:49:2a:
         62:e2:d9:0f:8b:ec:13:83:9e:cb:2e:39:e8:ed:ee:c2:87:f3:
         ea:6f:c3:b9:ee:9e:9e:71:78:71:66:30:74:2a:76:ff:48:3d:
         68:92:f3:d7:5b:f1:c7:4e:e2:51:01:a5:e0:ad:b6:e8:95:32:
         98:e2:2f:e5:29:f9:b0:ee:c5:fb:c4:8f:56:57:c5:36:59:39:
         c0:ad:9a:df:fe:2d:a8:46:78:35:bb:fc:7e:de:4a:53:61:bc:
         91:6b:6d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:36:27 2024 by rpki-client on console-ams.rpki-client.org