Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/36312e382e36342e302f32302d3234203d3e2034383030.roa
File:                     36312e382e36342e302f32302d3234203d3e2034383030.roa (raw, json)
Hash identifier:          eJaKgEBzg1E8agWMwjJDnCRTFHC55QpiPQ8bAcdV5Wc=
Subject key identifier:   8D:8D:72:04:E7:ED:93:EA:9A:4E:2F:A4:8F:31:37:8A:81:3B:6F:F9
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       37FD105DB863CBC4FE272A5C1A09FEE293F22734
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/36312e382e36342e302f32302d3234203d3e2034383030.roa
Signing time:             Mon 01 Jul 2024 01:03:18 +0000
ROA not before:           Mon 01 Jul 2024 00:58:18 +0000
ROA not after:            Mon 30 Jun 2025 01:03:18 +0000
asID:                     4800
IP address blocks:        61.8.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fd:10:5d:b8:63:cb:c4:fe:27:2a:5c:1a:09:fe:e2:93:f2:27:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:18 2024 GMT
            Not After : Jun 30 01:03:18 2025 GMT
        Subject: CN=8D8D7204E7ED93EA9A4E2FA48F31378A813B6FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:0b:b7:b8:88:8f:c8:5b:c2:8d:c0:ac:39:
                    1f:20:10:18:03:d7:f0:0b:7c:29:b7:ad:49:0c:ee:
                    37:0c:0e:97:06:4c:fb:6c:1b:06:45:2a:d3:2b:be:
                    a8:81:eb:93:d2:20:2f:f6:99:78:06:6e:6c:eb:86:
                    eb:d3:af:be:17:71:39:73:6d:15:2e:ca:5f:5c:a5:
                    72:22:d5:ad:70:da:28:99:12:ba:16:0c:26:e1:e8:
                    f7:d8:f0:0f:ea:8d:8f:9a:4c:d0:92:49:36:47:db:
                    e5:8b:6f:5b:3b:d3:5a:7c:45:97:d9:93:5c:58:9b:
                    fb:14:51:b7:27:36:94:c5:b9:8a:cb:75:b3:d6:31:
                    e4:aa:df:c0:d6:a5:e7:dd:7d:1f:3a:6e:21:13:34:
                    37:62:49:a5:cc:64:c4:ac:88:81:8e:7f:e4:81:25:
                    cd:f9:03:d3:5d:b3:7f:d5:13:47:3b:62:6b:6d:57:
                    03:bc:45:d0:06:ca:25:60:d5:d1:fc:a0:19:c3:54:
                    12:87:b6:a4:d8:b0:8a:2b:69:38:61:8f:f8:1c:bc:
                    43:73:fb:59:39:e5:4a:17:15:5d:c6:70:b7:80:d3:
                    7e:a0:e0:54:2f:cb:6b:47:e7:8b:63:dc:8f:d9:b2:
                    e1:db:e1:23:24:6e:62:8c:44:e7:54:31:72:fb:b9:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8D:72:04:E7:ED:93:EA:9A:4E:2F:A4:8F:31:37:8A:81:3B:6F:F9
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/36312e382e36342e302f32302d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.8.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:f2:30:9b:7c:4b:8b:e6:57:df:8c:96:95:2a:35:ef:17:e2:
         8d:eb:96:2d:03:4f:67:16:b0:0b:dd:3f:ce:94:b4:47:eb:bf:
         6f:94:90:01:95:fb:69:0d:8b:c1:6e:20:69:ff:6f:78:13:53:
         87:8a:84:cc:ba:e3:15:56:ed:40:74:c4:cc:d8:16:7f:08:6b:
         d4:4d:59:de:7d:cc:00:24:f3:1c:46:07:91:87:a5:48:df:70:
         7e:7a:21:f3:59:8b:d2:eb:0e:77:54:c0:88:35:3d:20:43:7e:
         ff:2c:18:8e:a4:24:7c:2e:b2:31:8a:c9:00:0b:e0:9a:7a:1a:
         ac:62:08:a7:68:84:51:3e:7b:bd:87:b3:22:a1:a3:4c:30:10:
         5a:3c:43:23:cc:71:2b:76:90:92:92:ee:f5:f5:e3:96:a3:d4:
         28:72:98:6f:58:be:75:94:82:7a:a3:54:98:65:25:27:16:86:
         06:1c:3c:38:42:7e:a2:5d:c3:86:8e:a6:d2:61:62:7c:28:03:
         1c:47:13:df:85:b7:03:6c:00:71:2b:14:e9:da:93:d2:11:d6:
         70:61:13:74:b0:7a:a9:26:a3:26:7f:96:b1:e2:da:14:87:73:
         be:8a:89:60:fa:d4:ec:8b:02:95:09:88:36:ec:ad:fa:be:6d:
         50:20:66:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:13:45 2024 by rpki-client on console-fra.rpki-client.org