Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36362e302f32342d3234203d3e20313331373138.roa
File:                     33362e33372e36362e302f32342d3234203d3e20313331373138.roa (raw, json)
Hash identifier:          63lQXdsy9I5SEMr24t+AI0SKxQ5cKD5tJm9bcAsxJEo=
Subject key identifier:   5D:E8:ED:C4:F7:BD:63:36:9F:4D:D1:7C:EF:FF:C7:EE:44:FD:E4:7D
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       0FE2BD3F36B740788E6B095064AE54C6D0F631FC
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36362e302f32342d3234203d3e20313331373138.roa
Signing time:             Mon 01 Jul 2024 01:03:20 +0000
ROA not before:           Mon 01 Jul 2024 00:58:20 +0000
ROA not after:            Mon 30 Jun 2025 01:03:20 +0000
asID:                     131718
IP address blocks:        36.37.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e2:bd:3f:36:b7:40:78:8e:6b:09:50:64:ae:54:c6:d0:f6:31:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:20 2024 GMT
            Not After : Jun 30 01:03:20 2025 GMT
        Subject: CN=5DE8EDC4F7BD63369F4DD17CEFFFC7EE44FDE47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:e5:19:96:19:9a:a1:60:ec:60:69:82:b9:
                    8e:dd:1b:91:10:29:34:b6:d5:c3:e1:e3:47:6c:be:
                    eb:60:85:30:82:2a:22:b8:91:f1:09:ea:26:61:c3:
                    03:03:6f:8d:2f:70:68:5d:c2:88:cc:b4:91:c0:82:
                    76:7a:5a:7c:7d:d9:36:1a:91:97:12:98:56:04:14:
                    79:50:52:e2:77:1f:27:b6:d0:11:b7:1d:5b:de:de:
                    85:ef:3f:93:27:32:5c:6d:97:75:54:44:0f:c4:7f:
                    b3:cf:85:7f:4d:ae:94:6a:8d:5c:05:dc:89:29:2b:
                    70:8a:fa:89:1b:36:91:03:f8:17:27:18:06:43:fc:
                    61:c6:33:ba:08:11:30:3a:41:06:87:8c:85:51:39:
                    3e:33:b2:a8:cf:ab:cd:63:9e:48:50:70:27:32:76:
                    51:3e:ab:24:f9:a5:64:c3:2c:22:c0:04:fd:c7:0f:
                    f9:25:43:e3:8f:10:1c:db:91:c8:ab:c5:36:6e:26:
                    f9:9b:d5:8d:4f:8c:33:ea:f0:9f:b7:2e:8b:8c:f3:
                    25:f9:ff:e1:2a:a0:84:a7:d7:1e:e5:d3:2c:83:de:
                    b3:e4:fd:3f:cc:86:62:b8:10:68:26:a0:f6:bf:ab:
                    14:42:07:3e:c4:7e:a5:08:00:27:04:de:fc:d0:a2:
                    e9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E8:ED:C4:F7:BD:63:36:9F:4D:D1:7C:EF:FF:C7:EE:44:FD:E4:7D
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e36362e302f32342d3234203d3e20313331373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:15:b4:78:f2:a4:3d:4a:6f:06:d6:6f:94:37:d1:e1:68:d3:
         da:e4:e8:de:28:b7:73:8d:51:2d:c4:29:57:6e:fe:a8:2b:7a:
         ec:36:64:80:d4:94:c4:17:6d:9d:0d:79:bc:2d:99:0f:9e:c0:
         03:10:11:1a:e9:90:a0:52:c6:65:be:d2:6b:73:18:f1:77:ac:
         31:05:60:70:21:53:db:74:f2:ac:02:31:f6:7b:77:d9:f3:37:
         e8:76:92:e5:c2:41:68:76:61:e9:46:0b:d3:e2:61:49:6c:7f:
         02:4f:37:65:98:7e:46:b6:fb:70:6c:e4:ff:58:19:9b:89:3b:
         a4:1d:e8:ad:c1:85:2d:aa:a3:b7:94:7f:7c:66:4d:5f:21:4e:
         a9:a0:c9:0c:02:32:1b:52:cd:56:c7:be:0a:d5:cb:0e:c1:f2:
         41:1d:09:37:19:2d:b7:aa:14:a0:23:6b:49:3e:94:5d:ba:12:
         b9:c0:8b:f3:85:65:13:61:4f:aa:7c:8f:d2:4d:6c:2c:4a:48:
         50:47:72:32:39:e8:b7:e5:cf:1a:08:cb:10:8a:a6:e5:29:9d:
         8c:ec:09:93:ab:24:90:c3:10:54:f3:cc:45:75:b4:88:ed:33:
         02:36:63:52:e7:f7:d5:26:f1:0e:c5:c3:9a:e8:d7:de:63:3e:
         c9:8b:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org