Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231372e302f32342d3234203d3e203535363638.roa
File:                     34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (raw, json)
Hash identifier:          SptXDMlN81cXVQItr4QSDBANvjvdA+fjiFu71V/b7e4=
Subject key identifier:   F1:14:53:E8:8F:A4:1F:48:C9:8A:15:84:FA:D6:36:15:60:85:4F:5A
Certificate issuer:       /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
Certificate serial:       1E3B657639117887F728C12DA8FD00B110BE738A
Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231372e302f32342d3234203d3e203535363638.roa
Signing time:             Fri 08 Nov 2024 05:00:01 +0000
ROA not before:           Fri 08 Nov 2024 04:55:01 +0000
ROA not after:            Fri 07 Nov 2025 05:00:01 +0000
asID:                     55668
IP address blocks:        49.236.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl
                          rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3b:65:76:39:11:78:87:f7:28:c1:2d:a8:fd:00:b1:10:be:73:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
        Validity
            Not Before: Nov  8 04:55:01 2024 GMT
            Not After : Nov  7 05:00:01 2025 GMT
        Subject: CN=F11453E88FA41F48C98A1584FAD6361560854F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:f5:74:d2:9f:6b:82:7f:b6:4c:14:7e:71:
                    47:0b:6e:94:93:ba:a8:93:1b:ec:59:96:38:f1:00:
                    95:96:73:c5:19:96:2a:48:53:86:01:32:8a:fc:f8:
                    cb:db:fd:0c:ee:c8:87:1b:95:62:3b:8f:db:b6:9f:
                    f4:8a:8b:96:bb:9c:45:3e:e6:e5:8f:86:e3:a8:5f:
                    38:83:d3:ce:43:c0:aa:76:9f:74:01:3c:28:89:93:
                    38:3c:d4:4f:79:a8:6b:2b:f4:44:3c:6f:8b:68:a0:
                    a7:2c:79:2d:12:ee:1e:7b:e9:0b:c1:9f:b9:97:88:
                    a1:a9:b2:55:9b:01:e4:43:cc:c8:74:37:37:30:e3:
                    d1:33:90:0e:19:f2:f8:ac:b4:e1:33:23:2d:6c:eb:
                    38:ce:90:76:10:f0:ab:9b:01:9c:ff:80:73:57:aa:
                    e2:82:62:9f:03:bf:2a:27:d4:b6:56:db:a7:d6:fd:
                    c0:f7:b1:e0:08:b5:1a:c9:e3:a9:1c:9e:33:d5:50:
                    74:c6:40:5f:ff:1c:23:df:ca:75:35:dc:0e:02:77:
                    ba:a5:b9:5d:62:50:b9:4a:0e:70:13:24:32:09:b5:
                    7c:84:48:a1:b0:ed:7c:bc:05:b8:21:01:b0:bd:36:
                    ab:30:6f:38:3c:5b:67:3a:d0:89:68:f0:e8:f1:dc:
                    b7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:14:53:E8:8F:A4:1F:48:C9:8A:15:84:FA:D6:36:15:60:85:4F:5A
            X509v3 Authority Key Identifier:
                keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3231372e302f32342d3234203d3e203535363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.236.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:7a:cb:19:c0:9d:e7:e4:15:0e:60:74:75:ad:24:0a:eb:36:
         c5:d2:94:e6:fa:fa:27:79:56:4e:19:c9:33:d0:30:63:f7:07:
         ea:16:d6:6c:bd:19:36:0d:84:c4:19:62:95:7c:8f:1e:83:06:
         2e:91:84:fa:a0:2e:03:c8:d7:ef:aa:b5:15:24:b9:cb:36:23:
         be:8b:68:e8:93:37:fa:dc:28:e1:73:e4:22:7f:98:c9:48:2c:
         60:41:e9:4a:eb:ef:da:af:72:17:b7:a7:5b:61:2e:fa:b7:9c:
         33:4d:20:b0:9c:5f:4a:8f:42:69:6f:f8:77:be:ce:f6:74:eb:
         ec:a4:14:7d:f6:18:55:30:a7:03:68:41:8c:f3:84:2b:ee:69:
         f7:ac:94:b7:87:cc:33:b7:21:d2:af:05:62:95:44:e1:4d:28:
         29:f4:17:96:97:46:1a:35:16:dc:8c:ba:41:71:a8:2e:db:ce:
         25:84:4c:b8:eb:29:05:98:d2:d8:b6:93:c1:fb:a4:89:61:91:
         7f:32:b9:00:8e:07:c0:af:53:91:05:56:bb:f8:0e:64:86:90:
         be:9b:58:4c:9b:eb:ca:fb:4a:01:9f:79:d7:5f:54:2c:07:1c:
         d3:d2:c4:ca:55:28:b3:71:21:5a:23:0a:50:fc:0e:36:ad:dd:
         4f:ad:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 10:18:21 2024 by rpki-client on console-fra.rpki-client.org