Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/36312e382e36342e302f32302d3234203d3e2034383030.roa
File:                     36312e382e36342e302f32302d3234203d3e2034383030.roa (raw, json)
Hash identifier:          SpeebXZGPJDQtwyJBmgQgLxVOQLDchUJhGJVKbzkQ2Y=
Subject key identifier:   51:BB:41:26:BF:D6:7F:02:BD:E4:62:3A:12:DA:C0:DD:81:CC:97:90
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       1E1E5AC736D66A8E5E84217C80D456A6E32D8562
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/36312e382e36342e302f32302d3234203d3e2034383030.roa
Signing time:             Mon 02 Jun 2025 01:03:21 +0000
ROA not before:           Mon 02 Jun 2025 00:58:21 +0000
ROA not after:            Mon 01 Jun 2026 01:03:21 +0000
asID:                     4800
IP address blocks:        61.8.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 03:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1e:5a:c7:36:d6:6a:8e:5e:84:21:7c:80:d4:56:a6:e3:2d:85:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 00:58:21 2025 GMT
            Not After : Jun  1 01:03:21 2026 GMT
        Subject: CN=51BB4126BFD67F02BDE4623A12DAC0DD81CC9790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:04:54:9c:10:b7:6c:72:f2:e4:0a:9c:2e:
                    e2:d2:1c:3f:eb:24:b9:d5:fa:7e:91:40:79:74:6b:
                    b0:e6:c8:a5:6e:7a:cd:55:d9:3a:3e:cc:6f:2e:f2:
                    7f:29:c6:56:5a:5d:2b:d3:ac:14:7e:9c:5c:a3:2d:
                    ae:9d:73:e3:89:eb:5d:54:7c:7b:33:13:48:d5:06:
                    3c:ce:03:53:44:1a:4e:cb:41:7c:96:25:f2:6d:d1:
                    dd:af:f7:e1:ac:03:26:92:34:4c:e9:ec:24:6e:ed:
                    e9:45:5f:fd:82:ea:e2:e3:fb:f3:39:72:39:25:24:
                    00:f7:df:70:bd:e8:56:f8:12:12:09:2e:92:93:8a:
                    68:c8:3a:c7:9c:d2:db:f2:dd:4b:13:86:eb:9d:da:
                    08:7f:17:4f:3a:d4:ae:0a:34:42:77:63:8c:aa:03:
                    fa:4b:2c:00:46:ed:5b:73:26:33:71:af:48:e7:15:
                    09:ff:26:bc:e8:16:a6:da:1a:d2:64:27:f9:af:c9:
                    c0:88:72:e3:1a:85:47:0a:55:9d:c9:a7:24:ea:8f:
                    96:b8:38:33:9e:4f:9c:09:99:15:49:39:0f:74:2a:
                    29:8b:14:73:96:08:04:07:dd:2f:33:c5:46:47:4a:
                    6a:44:a8:6c:24:43:24:e6:63:1d:af:4d:1b:f5:dc:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BB:41:26:BF:D6:7F:02:BD:E4:62:3A:12:DA:C0:DD:81:CC:97:90
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/36312e382e36342e302f32302d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.8.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:36:ec:e3:5c:f7:a3:c6:d0:20:f0:1e:12:fd:61:d5:91:
         ee:ed:83:c0:e0:17:21:a1:5c:9d:c7:34:81:7b:be:b7:da:8a:
         54:7b:46:89:57:df:1d:22:40:21:17:d0:fd:59:1a:2d:2a:29:
         ee:35:5e:80:7b:65:99:78:3a:13:ce:c4:90:e7:3d:0f:f3:63:
         8a:85:dc:8e:86:8f:0b:85:91:11:62:7f:5e:c5:06:b5:85:09:
         0c:ec:ba:30:11:0d:7f:b7:5f:74:a4:cb:4e:76:b2:4a:5a:1c:
         53:52:02:2a:57:6c:52:8c:02:ca:08:2d:77:37:15:e6:96:bd:
         35:d5:51:fb:e9:a6:92:1d:59:55:a5:30:10:1b:49:5a:ea:8d:
         c7:11:ea:f6:17:02:be:21:59:02:fe:41:77:7b:c0:54:ff:ce:
         fa:61:f9:68:87:1a:5a:46:73:ac:4b:df:17:88:a5:56:cb:c8:
         23:49:51:d0:5e:eb:8a:0d:03:5d:36:33:cd:1b:19:be:97:0b:
         67:cf:f7:f3:a9:53:f3:41:3f:f7:03:56:a0:cf:39:e5:2e:d8:
         e5:a0:d3:7c:4d:96:a4:1f:3b:ec:1c:5d:3a:5c:ff:1b:22:86:
         4b:4e:4e:f3:f8:60:c0:14:3f:9c:c0:61:9a:3f:fb:90:43:58:
         9f:b8:39:74
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUHh5axzbWao5ehCF8gNRWpuMthWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yNTA2MDIwMDU4MjFaFw0yNjA2MDEwMTAzMjFaMDMxMTAvBgNV
BAMTKDUxQkI0MTI2QkZENjdGMDJCREU0NjIzQTEyREFDMEREODFDQzk3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PQRUnBC3bHLy5AqcLuLSHD/r
JLnV+n6RQHl0a7DmyKVues1V2To+zG8u8n8pxlZaXSvTrBR+nFyjLa6dc+OJ611U
fHszE0jVBjzOA1NEGk7LQXyWJfJt0d2v9+GsAyaSNEzp7CRu7elFX/2C6uLj+/M5
cjklJAD333C96Fb4EhIJLpKTimjIOsec0tvy3UsThuud2gh/F0861K4KNEJ3Y4yq
A/pLLABG7VtzJjNxr0jnFQn/JrzoFqbaGtJkJ/mvycCIcuMahUcKVZ3JpyTqj5a4
ODOeT5wJmRVJOQ90KimLFHOWCAQH3S8zxUZHSmpEqGwkQyTmYx2vTRv13HrLAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUUbtBJr/WfwK95GI6EtrA3YHMl5AwHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTVjZTM2ZGUtZjkyMS00Mjc0LTg0
OTctMjk4N2Q5MDk1NDNlLzAvMzYzMTJlMzgyZTM2MzQyZTMwMmYzMjMwMmQzMjM0
MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD0IQDANBgkqhkiG9w0BAQsFAAOC
AQEAOuo27ONc96PG0CDwHhL9YdWR7u2DwOAXIaFcncc0gXu+t9qKVHtGiVffHSJA
IRfQ/VkaLSop7jVegHtlmXg6E87EkOc9D/NjioXcjoaPC4WREWJ/XsUGtYUJDOy6
MBENf7dfdKTLTnaySlocU1ICKldsUowCyggtdzcV5pa9NdVR++mmkh1ZVaUwEBtJ
WuqNxxHq9hcCviFZAv5Bd3vAVP/O+mH5aIcaWkZzrEvfF4ilVsvII0lR0F7rig0D
XTYzzRsZvpcLZ8/386lT80E/9wNWoM855S7Y5aDTfE2WpB877BxdOlz/GyKGS05O
8/hgwBQ/nMBhmj/7kENYn7g5dA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:28:31 2025 by rpki-client