Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3232322e302f32342d3234203d3e203535363638.roa
File:                     34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (raw, json)
Hash identifier:          7nW2fdNzQ/pw6iueKs/nit/sd4D7nCLJjKMOnmFO3+c=
Subject key identifier:   1F:57:91:59:85:BE:08:DB:2B:74:0A:5A:ED:F6:E4:1C:06:99:8B:22
Certificate issuer:       /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
Certificate serial:       4D263DB36C0D3A471AFFF02ED8995D77D8B27D09
Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3232322e302f32342d3234203d3e203535363638.roa
Signing time:             Fri 08 Nov 2024 04:00:01 +0000
ROA not before:           Fri 08 Nov 2024 03:55:01 +0000
ROA not after:            Fri 07 Nov 2025 04:00:01 +0000
asID:                     55668
IP address blocks:        49.236.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl
                          rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:26:3d:b3:6c:0d:3a:47:1a:ff:f0:2e:d8:99:5d:77:d8:b2:7d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
        Validity
            Not Before: Nov  8 03:55:01 2024 GMT
            Not After : Nov  7 04:00:01 2025 GMT
        Subject: CN=1F57915985BE08DB2B740A5AEDF6E41C06998B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:45:9c:04:2e:ff:18:09:78:8f:95:f5:e4:
                    25:4b:10:cd:1f:41:e4:d9:59:a6:ac:03:df:8a:86:
                    ce:49:e9:28:9a:ef:25:4b:25:dc:9e:02:c3:3d:2c:
                    7e:64:0f:59:3c:44:71:cf:e9:0c:49:2c:d4:ec:8e:
                    1e:10:2a:3c:e0:72:65:3f:6e:28:c3:fb:bd:bd:65:
                    67:b0:ed:80:18:88:d1:1e:53:b3:a7:f2:86:c5:9b:
                    65:28:61:25:a5:a2:b8:1b:a3:94:e6:fe:bf:8f:be:
                    68:12:d7:dd:fc:7f:e5:94:29:45:f9:69:b0:e4:28:
                    ce:d3:d5:a2:66:97:8a:09:57:ae:bb:b3:5f:95:68:
                    c5:84:7a:8a:ed:8b:c8:f7:94:bb:76:cb:e8:9d:b8:
                    86:87:ca:5c:5f:b4:e7:4e:99:d0:04:ae:6f:24:c0:
                    b5:e4:a8:2f:ff:5f:4a:1d:c9:81:63:8d:aa:3c:bc:
                    b7:80:86:3e:0c:0f:63:02:ad:c1:fd:9e:75:3f:a8:
                    f8:df:79:32:54:7e:aa:5f:a6:8d:a7:be:5c:49:0d:
                    1b:af:89:16:f7:5e:b0:4f:22:51:55:23:cc:81:e4:
                    24:63:d6:6c:c8:af:c9:54:37:c3:94:10:5e:c0:32:
                    80:a5:33:13:eb:c6:08:11:24:f9:a4:cc:44:3c:29:
                    4b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:57:91:59:85:BE:08:DB:2B:74:0A:5A:ED:F6:E4:1C:06:99:8B:22
            X509v3 Authority Key Identifier:
                keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3232322e302f32342d3234203d3e203535363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.236.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:15:70:de:68:d3:d3:ff:1a:24:89:ba:b0:24:84:21:70:
         ca:c9:65:cd:3e:38:ac:69:d3:5e:c5:ed:02:f9:dc:26:70:a0:
         88:0c:78:29:45:7e:f0:78:0a:e3:12:26:b8:b2:ac:b7:f3:86:
         d1:4b:b3:01:f6:a7:fe:a2:3c:74:ec:06:76:1b:41:57:e6:6f:
         b5:3c:6c:2c:3c:d7:a8:ef:93:e3:47:f3:a5:31:34:bd:ac:6d:
         51:5f:10:40:f8:e3:15:19:3b:2f:df:e3:5d:92:c4:30:d0:87:
         a4:57:85:8b:34:cb:ad:a0:3f:4e:dc:ab:f8:c5:1c:55:9e:85:
         ea:4f:10:5b:22:ac:72:3c:80:a2:f6:98:51:57:59:eb:11:93:
         aa:f9:4d:6d:c1:ab:bc:d1:01:da:74:ac:4c:a3:92:8b:ff:8f:
         6f:7f:7a:9a:64:53:77:8c:bf:2f:1d:e6:9e:42:6a:91:b7:86:
         df:18:ca:3a:df:f2:87:0a:3e:86:52:c6:2a:90:cb:be:e8:0c:
         dd:e4:23:53:c1:b0:a9:76:00:53:5f:51:89:e4:66:e3:57:f2:
         44:21:b1:9e:55:5e:07:20:58:65:9d:e2:60:b4:66:4e:ac:dd:
         15:2b:1f:a2:95:9b:74:58:26:1c:85:f0:7e:82:52:dc:46:bd:
         87:fb:44:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:23:25 2024 by rpki-client on console-ams.rpki-client.org