Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e352e302f32342d3234203d3e203435333233.roa
File:                     34392e35302e352e302f32342d3234203d3e203435333233.roa (raw, json)
Hash identifier:          vCGogsEiAUaqchjA3dIL1XGssuEnBTxgxvBgfhJvgpU=
Subject key identifier:   A2:81:66:50:55:55:9B:4A:B7:E3:FD:1A:4E:CA:27:D9:05:3B:C9:FC
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       03008BC83D572ECE780E585208DCD3932F4E9E79
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e352e302f32342d3234203d3e203435333233.roa
Signing time:             Wed 04 Dec 2024 14:00:02 +0000
ROA not before:           Wed 04 Dec 2024 13:55:02 +0000
ROA not after:            Wed 03 Dec 2025 14:00:02 +0000
asID:                     45323
IP address blocks:        49.50.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Mar 2025 03:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:00:8b:c8:3d:57:2e:ce:78:0e:58:52:08:dc:d3:93:2f:4e:9e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Dec  4 13:55:02 2024 GMT
            Not After : Dec  3 14:00:02 2025 GMT
        Subject: CN=A281665055559B4AB7E3FD1A4ECA27D9053BC9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:44:54:f3:d2:48:24:f9:eb:47:cd:89:e4:
                    21:9a:72:a3:85:95:d9:da:21:5d:b7:09:02:2b:79:
                    3b:8e:cf:05:a0:be:8c:e6:33:dc:ed:44:43:64:c5:
                    89:da:2e:a8:b8:26:58:74:94:3a:32:f9:bb:1a:ec:
                    eb:59:c6:48:dd:7d:f9:0b:77:32:83:95:c8:42:26:
                    25:f5:4a:b5:7c:c7:ea:d1:d3:ab:c3:f5:ed:1d:07:
                    7f:86:dd:26:86:09:4b:2f:4e:30:af:6f:f4:b9:51:
                    43:e3:a8:6a:e1:a2:6c:19:9a:15:32:51:c5:25:5f:
                    88:b8:5d:57:9b:30:af:e9:9f:b9:9d:26:f8:9f:35:
                    d0:5c:ba:c3:84:4d:b1:29:3f:a4:be:79:b7:4c:c5:
                    b7:74:a4:87:85:cd:3f:51:51:df:49:b9:c0:07:f4:
                    0c:e8:12:8a:eb:39:f9:b1:8d:44:07:64:d6:ae:08:
                    1a:05:67:14:ee:56:54:be:af:d1:30:52:3f:66:2a:
                    c7:8e:7e:0a:0a:89:e0:43:48:ad:20:ec:b9:8f:d2:
                    10:62:d2:2e:e0:eb:fb:d7:9b:56:10:eb:35:c1:8b:
                    3f:48:3d:c1:e8:6e:44:9a:26:8c:aa:ef:47:ac:d4:
                    ad:32:ff:7e:64:18:4e:05:07:fb:ce:28:3b:5f:e2:
                    44:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:81:66:50:55:55:9B:4A:B7:E3:FD:1A:4E:CA:27:D9:05:3B:C9:FC
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e352e302f32342d3234203d3e203435333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.50.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:00:fd:72:be:93:84:67:93:b6:a3:d4:a4:03:1f:bb:16:b3:
         54:39:38:c2:36:e8:8f:d5:b6:a6:68:7e:c2:9d:c0:58:fb:65:
         e3:c9:0f:f1:3a:c2:b9:92:25:99:ea:24:b1:63:16:29:3f:fc:
         3b:6f:3e:24:66:44:fc:66:ff:31:59:0a:99:f7:3f:61:ed:b6:
         c9:b2:9d:9f:9a:7b:1b:26:c6:1a:8d:f7:d1:c3:a4:02:fb:0f:
         d3:bc:cf:f1:87:3c:a3:e7:4b:e9:41:84:5f:67:6a:00:f8:2d:
         d9:ab:4e:58:2a:7e:ad:bd:79:aa:11:11:55:9d:2c:5c:53:4a:
         07:52:57:b5:58:0b:3c:aa:0d:75:6a:9f:01:fe:07:bf:38:4c:
         bb:95:44:5c:e2:65:d6:ba:a3:c1:8a:6a:8b:da:fa:a4:fb:7d:
         88:c3:19:ac:6c:b5:a3:67:37:7b:bf:b4:62:fc:ab:e4:44:01:
         73:c1:94:55:1d:f9:67:80:39:51:3a:d1:14:c4:9f:2b:9b:8d:
         05:72:1c:41:57:27:f1:4d:5c:f1:62:9d:b8:f7:4f:43:6e:d5:
         ed:d3:fb:f9:79:d7:af:cf:76:ef:08:db:57:6b:cb:dc:e3:80:
         88:4a:8a:f0:6b:46:e9:3a:00:3b:67:ee:31:f8:0d:b2:69:03:
         42:fe:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:32 2025 by rpki-client