Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231372e302f32342d3234203d3e203535363638.roa
File:                     34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (raw, json)
Hash identifier:          H4NcwKMHZWp/1t+VaORtVjcYwchaFn3uLMivXIQw5rM=
Subject key identifier:   D8:DD:B2:87:E9:92:DA:67:59:C0:74:B1:D7:5C:0A:28:23:60:EB:19
Certificate issuer:       /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
Certificate serial:       6CC4408ADAAA56D17FD68C046FBD16378F2D909D
Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231372e302f32342d3234203d3e203535363638.roa
Signing time:             Fri 08 Dec 2023 04:00:01 +0000
ROA not before:           Fri 08 Dec 2023 03:55:01 +0000
ROA not after:            Fri 06 Dec 2024 04:00:01 +0000
asID:                     55668
IP address blocks:        49.236.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl
                          rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 05:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c4:40:8a:da:aa:56:d1:7f:d6:8c:04:6f:bd:16:37:8f:2d:90:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
        Validity
            Not Before: Dec  8 03:55:01 2023 GMT
            Not After : Dec  6 04:00:01 2024 GMT
        Subject: CN=D8DDB287E992DA6759C074B1D75C0A282360EB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:55:ea:24:38:04:8f:c0:2a:52:6f:db:58:
                    03:f2:0a:8f:94:c9:9a:6e:80:ee:32:42:db:c8:19:
                    be:c6:23:2d:5e:87:76:92:56:f5:fb:b9:80:c9:7b:
                    c6:fa:4b:3b:1c:31:a7:95:61:cf:32:53:8e:8a:dd:
                    14:80:9c:6e:07:fe:da:4f:c8:78:3c:f2:5e:01:a1:
                    0e:7a:fa:3c:fd:c4:77:cf:5a:96:95:8e:4e:d6:cc:
                    f5:74:db:a6:c6:7e:c4:30:05:f9:a2:d6:8a:3b:91:
                    3e:12:37:45:07:c6:f1:25:db:e7:ad:d5:2f:f1:ef:
                    e8:65:70:a1:8f:71:c8:67:5e:24:a6:ae:6a:da:7b:
                    c7:15:a5:d9:12:21:20:e0:48:66:34:64:92:7c:b0:
                    b9:9a:79:46:8a:28:cc:05:8b:e9:df:20:a0:e7:67:
                    1a:a3:47:8e:cc:2d:f4:8f:1f:31:aa:90:85:9d:67:
                    22:e8:d5:60:a2:71:45:c1:00:de:3b:1b:f4:90:a7:
                    87:de:39:4e:27:cb:b9:06:a1:c1:d0:af:bf:c8:2b:
                    95:15:26:3b:0d:c5:8f:9c:9a:6e:33:f9:42:ac:1d:
                    de:7a:32:c2:83:b2:3e:bf:78:d3:dc:6f:0b:94:85:
                    2e:ca:68:19:82:24:80:74:13:c3:09:10:55:9c:eb:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DD:B2:87:E9:92:DA:67:59:C0:74:B1:D7:5C:0A:28:23:60:EB:19
            X509v3 Authority Key Identifier:
                keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231372e302f32342d3234203d3e203535363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.236.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:13:d3:a3:c8:d5:c9:ae:a3:05:50:88:0f:de:ec:11:63:69:
         cb:69:a4:2d:a8:e7:8c:c0:64:c1:0c:3e:dc:e5:16:7f:a7:ae:
         65:1b:b4:05:5e:e1:65:49:db:79:8e:c3:43:7d:14:bd:4b:4e:
         52:cb:6c:51:eb:bb:9f:3a:bf:96:35:83:7e:aa:1b:47:da:f4:
         80:4e:40:e6:7b:ce:5e:ef:44:34:d5:92:8b:22:b9:c4:97:12:
         c4:f7:85:10:5c:8a:11:6b:8d:01:60:9b:26:ac:28:4a:bc:f0:
         99:88:c5:de:f6:99:0c:5e:79:4d:5e:da:64:97:56:56:c2:81:
         9b:64:6b:c9:2b:40:e3:26:f6:fa:bb:db:a4:eb:71:99:ed:e3:
         f3:cb:37:d9:af:24:7a:71:40:fa:6e:e9:b0:a5:da:de:75:d5:
         19:b5:eb:9a:82:b2:64:f0:3e:64:d9:be:a4:cb:f5:94:0f:50:
         2c:6e:07:ff:68:b0:f4:95:5f:5e:05:84:19:c9:87:e6:e0:46:
         5b:00:95:13:52:cd:5d:8d:b9:92:11:9d:7a:4f:38:ba:86:04:
         f5:85:da:47:90:37:5d:84:c5:f3:8d:12:a1:19:ad:4d:43:94:
         90:fa:5c:75:8b:1a:df:dd:69:f3:4c:f5:a7:e1:5d:5a:f7:99:
         86:9c:d1:86
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbMRAitqqVtF/1owEb70WN48tkJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx
QkYxMzA2MTAeFw0yMzEyMDgwMzU1MDFaFw0yNDEyMDYwNDAwMDFaMDMxMTAvBgNV
BAMTKEQ4RERCMjg3RTk5MkRBNjc1OUMwNzRCMUQ3NUMwQTI4MjM2MEVCMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC441XqJDgEj8AqUm/bWAPyCo+U
yZpugO4yQtvIGb7GIy1eh3aSVvX7uYDJe8b6SzscMaeVYc8yU46K3RSAnG4H/tpP
yHg88l4BoQ56+jz9xHfPWpaVjk7WzPV026bGfsQwBfmi1oo7kT4SN0UHxvEl2+et
1S/x7+hlcKGPcchnXiSmrmrae8cVpdkSISDgSGY0ZJJ8sLmaeUaKKMwFi+nfIKDn
ZxqjR47MLfSPHzGqkIWdZyLo1WCicUXBAN47G/SQp4feOU4ny7kGocHQr7/IK5UV
JjsNxY+cmm4z+UKsHd56MsKDsj6/eNPcbwuUhS7KaBmCJIB0E8MJEFWc6zCzAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU2N2yh+mS2mdZwHSx11wKKCNg6xkwHwYDVR0j
BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz
OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx
MzA2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkMGY5OWMzLWU1NjctNDFhZS1h
YTAwLTI2Y2I5NzgxZmJlOS8wLzM0MzkyZTMyMzMzNjJlMzIzMTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADHs2TANBgkqhkiG
9w0BAQsFAAOCAQEArxPTo8jVya6jBVCID97sEWNpy2mkLajnjMBkwQw+3OUWf6eu
ZRu0BV7hZUnbeY7DQ30UvUtOUstsUeu7nzq/ljWDfqobR9r0gE5A5nvOXu9ENNWS
iyK5xJcSxPeFEFyKEWuNAWCbJqwoSrzwmYjF3vaZDF55TV7aZJdWVsKBm2RryStA
4yb2+rvbpOtxme3j88s32a8kenFA+m7psKXa3nXVGbXrmoKyZPA+ZNm+pMv1lA9Q
LG4H/2iw9JVfXgWEGcmH5uBGWwCVE1LNXY25khGdek84uoYE9YXaR5A3XYTF840S
oRmtTUOUkPpcdYsa391p80z1p+FdWveZhpzRhg==
-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:11 2024 by rpki-client on console-ams.rpki-client.org