Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32332d3233203d3e20313437313238.roa
File:                     33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (raw, json)
Hash identifier:          b6fZwvmtLaBbbvobz8/5GWV8iuq3VMQzkLs1xAq/Suw=
Subject key identifier:   69:0E:56:2E:03:97:21:44:BD:83:C1:09:21:00:B2:2B:5F:97:AC:38
Certificate issuer:       /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E
Certificate serial:       4B466C303DFF57F368AB790EE9A8E62B40707932
Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32332d3233203d3e20313437313238.roa
Signing time:             Sat 11 May 2024 12:20:50 +0000
ROA not before:           Sat 11 May 2024 12:15:50 +0000
ROA not after:            Sat 10 May 2025 12:20:50 +0000
asID:                     147128
IP address blocks:        36.50.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl
                          rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:46:6c:30:3d:ff:57:f3:68:ab:79:0e:e9:a8:e6:2b:40:70:79:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E
        Validity
            Not Before: May 11 12:15:50 2024 GMT
            Not After : May 10 12:20:50 2025 GMT
        Subject: CN=690E562E03972144BD83C1092100B22B5F97AC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:d0:63:25:df:28:5e:9f:f1:31:88:57:9d:
                    f5:0b:66:d9:84:d0:1f:4e:87:7e:d6:f2:c2:23:b6:
                    ed:24:63:bf:57:ec:62:70:83:d0:77:1e:1f:04:8f:
                    4f:63:40:0e:75:69:ba:17:c8:be:b1:c9:5f:25:af:
                    e4:d0:7a:c7:d7:f9:54:93:db:3e:c9:e3:3f:87:f3:
                    ff:c3:e7:3f:c9:82:e0:3a:c9:cb:68:63:06:ed:44:
                    16:82:f1:52:d1:00:2c:73:c7:5e:e3:e5:b6:d3:cc:
                    8f:15:e1:14:0d:42:12:84:3e:ef:08:f2:e0:b2:ea:
                    17:83:32:ad:7c:90:57:23:6d:81:a0:ba:c1:aa:7d:
                    82:6a:86:3e:ef:5f:46:dc:9f:11:ac:78:c8:42:97:
                    17:e8:aa:c5:64:ea:ec:a0:d2:67:03:1e:9e:06:17:
                    1f:e9:d4:06:79:99:e2:a7:79:17:a9:b8:fb:35:82:
                    c6:3f:cf:2e:a7:89:e4:31:a9:7a:c9:63:06:dd:41:
                    69:41:cc:d9:39:bd:49:7d:d8:04:c3:0b:30:53:c3:
                    eb:5e:0e:33:3c:66:20:ed:fc:6e:8e:57:5c:7c:ba:
                    1f:f9:95:d9:02:f6:ed:2c:54:74:74:4c:61:f1:c9:
                    6a:17:fe:5d:e5:fe:db:a6:20:ed:6a:29:ec:31:f5:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0E:56:2E:03:97:21:44:BD:83:C1:09:21:00:B2:2B:5F:97:AC:38
            X509v3 Authority Key Identifier:
                keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32332d3233203d3e20313437313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:42:e1:ab:40:8e:9e:50:a5:78:d0:e5:12:d4:5e:b8:ca:
         c1:ad:98:05:bb:f3:b7:ad:da:84:58:df:79:03:b3:e8:05:78:
         6b:fa:75:38:c0:34:1a:e9:3e:76:c7:8f:1f:4a:4b:b0:1f:c9:
         db:6c:21:e7:6e:8e:8b:8f:cf:e2:e4:10:ec:ba:ee:fb:5c:2e:
         90:90:ca:bb:eb:64:5e:98:dc:d7:ed:b1:bb:01:c4:18:c5:52:
         b9:f3:53:23:4f:a0:ac:61:11:50:56:fd:1f:f8:ef:5d:09:c4:
         41:7f:f7:c1:b5:69:d3:d0:3e:7a:08:aa:b3:e7:1e:b2:a0:fc:
         0a:89:37:b2:2c:ac:b2:6e:26:bb:93:e6:d4:c0:85:f6:0b:46:
         48:8a:69:8c:75:fa:99:0a:98:52:ee:cd:45:bb:cf:df:58:8a:
         85:37:d7:95:f5:0f:c7:0d:11:11:50:7b:20:d4:64:7e:2e:13:
         0d:ec:6e:db:bc:3f:84:d3:ae:7c:46:8c:ad:81:e2:aa:5c:d9:
         ee:b5:a9:63:8e:f3:ff:38:79:69:4f:a9:ee:6a:ab:31:3b:87:
         7a:ac:61:2a:ed:34:33:6e:c2:e6:c2:b8:48:f6:a5:f6:6b:ed:
         51:de:30:34:4a:3e:ea:2b:38:a9:d3:02:9f:cd:22:09:24:c3:
         2e:fc:34:3f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUS0ZsMD3/V/Noq3kO6ajmK0BweTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3
QTk4MDk5RTAeFw0yNDA1MTExMjE1NTBaFw0yNTA1MTAxMjIwNTBaMDMxMTAvBgNV
BAMTKDY5MEU1NjJFMDM5NzIxNDRCRDgzQzEwOTIxMDBCMjJCNUY5N0FDMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpgNBjJd8oXp/xMYhXnfULZtmE
0B9Oh37W8sIjtu0kY79X7GJwg9B3Hh8Ej09jQA51aboXyL6xyV8lr+TQesfX+VST
2z7J4z+H8//D5z/JguA6yctoYwbtRBaC8VLRACxzx17j5bbTzI8V4RQNQhKEPu8I
8uCy6heDMq18kFcjbYGgusGqfYJqhj7vX0bcnxGseMhClxfoqsVk6uyg0mcDHp4G
Fx/p1AZ5meKneRepuPs1gsY/zy6nieQxqXrJYwbdQWlBzNk5vUl92ATDCzBTw+te
DjM8ZiDt/G6OV1x8uh/5ldkC9u0sVHR0TGHxyWoX/l3l/tumIO1qKewx9dCfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUaQ5WLgOXIUS9g8EJIQCyK1+XrDgwHwYDVR0j
BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE
NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4
MDk5RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1OTg5ZmFmLTQ4ZmItNGY0MC05
ZTc3LTI0M2Q3OGE1YjVjNC8wLzMzMzYyZTM1MzAyZTMyMzEzNjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzQzNzMxMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASQy2DANBgkqhkiG
9w0BAQsFAAOCAQEAXnBC4atAjp5QpXjQ5RLUXrjKwa2YBbvzt63ahFjfeQOz6AV4
a/p1OMA0Guk+dsePH0pLsB/J22wh526Oi4/P4uQQ7Lru+1wukJDKu+tkXpjc1+2x
uwHEGMVSufNTI0+grGERUFb9H/jvXQnEQX/3wbVp09A+egiqs+cesqD8Cok3siys
sm4mu5Pm1MCF9gtGSIppjHX6mQqYUu7NRbvP31iKhTfXlfUPxw0REVB7INRkfi4T
Dexu27w/hNOufEaMrYHiqlzZ7rWpY47z/zh5aU+p7mqrMTuHeqxhKu00M27C5sK4
SPal9mvtUd4wNEo+6is4qdMCn80iCSTDLvw0Pw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org