Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3232332e302f32342d3234203d3e203535363638.roa
File:                     34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (raw, json)
Hash identifier:          pDyhKy8yP2IUi/Ybfw8w4Yvis1OtFP3QQw5zyF9au28=
Subject key identifier:   B9:31:0F:76:CF:BD:3C:02:F3:98:48:30:EF:7D:62:45:82:E4:47:8B
Certificate issuer:       /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
Certificate serial:       1177093DF0F525A644111A97744F3D9838E96327
Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3232332e302f32342d3234203d3e203535363638.roa
Signing time:             Fri 08 Dec 2023 04:00:01 +0000
ROA not before:           Fri 08 Dec 2023 03:55:01 +0000
ROA not after:            Fri 06 Dec 2024 04:00:01 +0000
asID:                     55668
IP address blocks:        49.236.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl
                          rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 05:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:77:09:3d:f0:f5:25:a6:44:11:1a:97:74:4f:3d:98:38:e9:63:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
        Validity
            Not Before: Dec  8 03:55:01 2023 GMT
            Not After : Dec  6 04:00:01 2024 GMT
        Subject: CN=B9310F76CFBD3C02F3984830EF7D624582E4478B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:e9:bb:20:a2:c4:ed:56:46:01:0d:41:89:
                    99:cf:84:53:91:ea:a0:a6:ba:da:77:ba:bb:2d:97:
                    fd:a7:a8:37:6f:c1:cd:ad:c4:f4:c7:ee:16:65:fd:
                    8e:1e:4f:ef:a8:37:c6:17:91:8d:cc:2a:8e:ee:26:
                    0f:64:bc:05:7b:d2:87:4d:cb:64:17:fe:de:37:4c:
                    b1:a5:df:c6:b9:44:20:83:ff:65:d8:9f:1a:12:39:
                    38:f3:70:ed:03:5b:0c:11:33:5b:3c:e6:07:83:39:
                    49:17:0d:4f:40:d4:f9:ff:41:b0:d8:f1:cc:4d:27:
                    45:32:14:4d:16:9c:20:fd:c9:27:66:a4:2c:5b:6c:
                    55:25:e8:13:21:e3:e3:ae:a3:ef:bd:ec:f5:c6:a4:
                    0c:6e:4f:4d:e8:51:8d:4c:20:fb:bb:5f:2c:93:06:
                    f2:d2:2b:93:d0:89:dc:0f:14:72:d6:50:2e:71:01:
                    15:3f:d9:85:34:31:3e:a8:7b:c1:1a:31:76:83:dc:
                    30:64:21:51:04:8c:7c:cc:fa:71:17:e1:37:ff:a5:
                    7a:73:a3:af:6d:5d:f7:a1:21:88:34:5a:02:0c:f9:
                    6a:50:4b:d0:e5:7a:cd:00:79:79:22:2a:e6:c8:2b:
                    29:7b:51:03:cf:79:4d:f8:fa:2a:a4:0a:62:2e:90:
                    4b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:31:0F:76:CF:BD:3C:02:F3:98:48:30:EF:7D:62:45:82:E4:47:8B
            X509v3 Authority Key Identifier:
                keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/34392e3233362e3232332e302f32342d3234203d3e203535363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.236.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:c5:e4:ad:08:45:6a:bc:97:a2:85:b0:2e:f5:7d:dd:32:bb:
         c1:86:4f:c9:a9:f3:4d:48:91:b0:25:71:13:b9:da:98:96:ee:
         4b:9d:b7:09:9a:1d:ed:1a:92:df:25:b5:b2:07:91:19:96:ca:
         28:66:6f:ab:95:16:01:25:7c:82:dc:17:9b:5f:b3:0c:2a:3f:
         91:75:07:17:39:c0:e4:5b:5f:ce:bf:46:b9:1b:ab:35:5e:8f:
         27:2b:25:e8:ba:6f:ee:0c:59:b5:b9:51:c6:f1:26:41:50:54:
         91:dc:3e:3b:83:62:2f:64:cc:ef:4c:53:e3:7c:ca:f9:cd:1e:
         6e:6b:0a:ee:2c:98:c4:3d:60:2a:26:90:69:06:e4:f7:8e:3c:
         88:d7:f0:7f:48:ca:47:70:d7:2a:8f:74:18:69:f1:01:4e:6a:
         1b:98:7f:1b:f6:57:0a:cf:c2:9a:bf:68:66:d9:cf:e3:04:ba:
         f2:cd:ba:88:4c:10:3b:da:e1:45:9a:b0:47:9b:f9:e8:1b:94:
         5f:2f:0d:68:81:c0:87:3b:04:7b:d4:46:19:ee:ed:d5:81:24:
         71:dc:d5:d5:17:e7:b0:cb:8a:31:09:1d:2c:25:0f:a6:cd:99:
         6e:be:e8:e8:13:b1:4a:84:47:ff:57:dc:22:d7:4b:e9:ac:90:
         d3:82:5e:f7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEXcJPfD1JaZEERqXdE89mDjpYycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx
QkYxMzA2MTAeFw0yMzEyMDgwMzU1MDFaFw0yNDEyMDYwNDAwMDFaMDMxMTAvBgNV
BAMTKEI5MzEwRjc2Q0ZCRDNDMDJGMzk4NDgzMEVGN0Q2MjQ1ODJFNDQ3OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tem7IKLE7VZGAQ1BiZnPhFOR
6qCmutp3urstl/2nqDdvwc2txPTH7hZl/Y4eT++oN8YXkY3MKo7uJg9kvAV70odN
y2QX/t43TLGl38a5RCCD/2XYnxoSOTjzcO0DWwwRM1s85geDOUkXDU9A1Pn/QbDY
8cxNJ0UyFE0WnCD9ySdmpCxbbFUl6BMh4+Ouo++97PXGpAxuT03oUY1MIPu7XyyT
BvLSK5PQidwPFHLWUC5xARU/2YU0MT6oe8EaMXaD3DBkIVEEjHzM+nEX4Tf/pXpz
o69tXfehIYg0WgIM+WpQS9Dles0AeXkiKubIKyl7UQPPeU34+iqkCmIukEtvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUuTEPds+9PALzmEgw731iRYLkR4swHwYDVR0j
BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz
OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx
MzA2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkMGY5OWMzLWU1NjctNDFhZS1h
YTAwLTI2Y2I5NzgxZmJlOS8wLzM0MzkyZTMyMzMzNjJlMzIzMjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADHs3zANBgkqhkiG
9w0BAQsFAAOCAQEAW8XkrQhFaryXooWwLvV93TK7wYZPyanzTUiRsCVxE7namJbu
S523CZod7RqS3yW1sgeRGZbKKGZvq5UWASV8gtwXm1+zDCo/kXUHFznA5Ftfzr9G
uRurNV6PJysl6Lpv7gxZtblRxvEmQVBUkdw+O4NiL2TM70xT43zK+c0ebmsK7iyY
xD1gKiaQaQbk9448iNfwf0jKR3DXKo90GGnxAU5qG5h/G/ZXCs/Cmr9oZtnP4wS6
8s26iEwQO9rhRZqwR5v56BuUXy8NaIHAhzsEe9RGGe7t1YEkcdzV1RfnsMuKMQkd
LCUPps2Zbr7o6BOxSoRH/1fcItdL6ayQ04Je9w==
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:58:28 2024 by rpki-client on console-fra.rpki-client.org