Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133362e302f32322d3233203d3e203538343034.roa
File:                     34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (raw, json)
Hash identifier:          g0FFTgDxa4Hez+HwVNQ7bFyBpeqsTBamtra1C6gMee0=
Subject key identifier:   63:AC:29:B0:1C:9D:F5:FB:47:CC:F7:05:4A:1D:64:65:01:F1:B9:46
Certificate issuer:       /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
Certificate serial:       4C55E850DADF5F8D4805B46CD34212379D66CBA8
Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133362e302f32322d3233203d3e203538343034.roa
Signing time:             Mon 05 Aug 2024 07:53:34 +0000
ROA not before:           Mon 05 Aug 2024 07:48:34 +0000
ROA not after:            Mon 04 Aug 2025 07:53:34 +0000
asID:                     58404
IP address blocks:        43.252.136.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl
                          rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:55:e8:50:da:df:5f:8d:48:05:b4:6c:d3:42:12:37:9d:66:cb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
        Validity
            Not Before: Aug  5 07:48:34 2024 GMT
            Not After : Aug  4 07:53:34 2025 GMT
        Subject: CN=63AC29B01C9DF5FB47CCF7054A1D646501F1B946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:54:42:6b:16:f5:93:71:6d:44:11:64:32:
                    52:07:0b:bf:77:d4:37:46:44:45:17:aa:9c:83:7c:
                    9e:df:34:e7:ee:e4:9e:be:99:9a:a7:c2:e4:28:1d:
                    9b:31:8d:31:44:30:cf:92:66:19:91:1c:b1:59:cb:
                    9e:a0:f5:c1:5e:59:eb:cc:18:a5:9e:d7:25:82:34:
                    6c:14:2d:9c:ab:f7:ee:04:77:33:5b:b6:ac:bf:72:
                    4f:16:3b:b4:de:5e:dc:8b:90:8b:ae:ad:35:b0:7c:
                    18:c0:b0:f7:2a:2e:9a:2d:2d:50:80:c2:58:82:f2:
                    f6:b8:4d:b8:7d:c8:79:20:a7:a2:fd:76:4f:69:ca:
                    fe:58:8f:f6:9a:de:4b:3c:65:81:c8:4e:dc:47:9c:
                    54:d1:28:a1:10:fb:f5:ac:ae:d9:44:6f:1c:aa:85:
                    e7:a9:93:3f:2b:f8:83:42:f0:db:be:33:18:e4:0f:
                    3b:2f:9f:ce:3f:da:c3:47:ec:63:20:64:67:cd:fa:
                    73:d4:3f:18:f2:d9:9f:73:04:8b:99:61:f0:0e:81:
                    db:34:85:fd:c5:fd:03:75:18:45:c6:ca:27:b0:d9:
                    b9:ba:88:e0:44:4d:94:f9:67:3b:39:82:c6:72:04:
                    3f:2b:bc:36:7a:fc:c9:3e:cd:89:fd:6a:03:22:fe:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AC:29:B0:1C:9D:F5:FB:47:CC:F7:05:4A:1D:64:65:01:F1:B9:46
            X509v3 Authority Key Identifier:
                keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133362e302f32322d3233203d3e203538343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.252.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:5b:56:75:9d:97:3a:0f:47:54:87:34:8d:0a:5e:4c:9c:9d:
         5d:6a:70:7a:01:e1:8c:9d:84:e5:22:03:f1:a4:de:76:5b:89:
         e3:a1:38:55:3f:00:9f:d3:d3:67:b2:74:a0:ff:39:94:03:70:
         a5:4b:c4:b2:fe:61:01:f7:5d:62:16:7c:de:32:8d:14:df:a7:
         e8:6d:a2:be:f4:38:ec:70:76:f1:7f:55:1b:0c:b4:34:1c:9d:
         28:94:d9:aa:0c:df:ca:c3:f7:60:7d:6f:8e:94:45:75:ef:5c:
         f2:03:af:8b:72:c0:eb:a6:1e:af:de:28:ba:0c:fa:eb:4e:09:
         67:3a:6e:60:40:96:d4:43:6f:4f:19:2e:d2:53:26:c4:2f:a0:
         9e:d2:99:67:26:f0:b1:83:bb:0f:ee:79:11:06:c0:09:8c:ef:
         ed:0a:7e:85:e9:0c:d2:6e:e6:58:0f:f3:b3:f2:54:dc:15:63:
         27:e5:4e:d5:e4:08:8e:b5:46:01:02:4b:9f:fe:6d:de:8f:09:
         12:59:99:9a:25:57:99:2f:89:11:47:92:31:37:71:0f:51:bb:
         f7:69:a3:48:df:d9:69:be:f4:eb:99:4e:12:b1:4f:d1:d5:fc:
         cf:3b:fc:8d:e9:1b:cd:b3:bf:56:5f:3d:33:c6:d7:2a:b0:a6:
         5c:d9:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org