Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32332d3233203d3e20313532303239.roa
File:                     33362e35302e35362e302f32332d3233203d3e20313532303239.roa (raw, json)
Hash identifier:          Mi5/M/1lJfPAiXyMJDKiii6kN0vBXjdI6P331jA4kqc=
Subject key identifier:   54:49:1F:DD:F5:CD:5A:47:2E:EB:5C:50:84:FE:EB:63:DA:12:7B:91
Certificate issuer:       /CN=9A97A919AD61446780D593589DED8D76DE76F83A
Certificate serial:       6FC414591C1A572118FABE280FF07C5E763FBE10
Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32332d3233203d3e20313532303239.roa
Signing time:             Thu 04 Jan 2024 06:32:04 +0000
ROA not before:           Thu 04 Jan 2024 06:27:04 +0000
ROA not after:            Thu 02 Jan 2025 06:32:04 +0000
asID:                     152029
IP address blocks:        36.50.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl
                          rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c4:14:59:1c:1a:57:21:18:fa:be:28:0f:f0:7c:5e:76:3f:be:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A
        Validity
            Not Before: Jan  4 06:27:04 2024 GMT
            Not After : Jan  2 06:32:04 2025 GMT
        Subject: CN=54491FDDF5CD5A472EEB5C5084FEEB63DA127B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:23:5c:ea:57:fa:af:47:74:a5:67:20:4f:
                    9e:72:ca:cb:b3:82:99:7c:d8:9a:03:b0:6a:ca:90:
                    9f:7b:ea:a6:20:14:c7:2a:7a:5e:25:6b:27:4a:79:
                    49:61:b2:c0:d7:2c:42:3d:c1:a4:17:3f:2c:80:83:
                    49:18:36:4b:8c:25:fa:28:4a:b0:bb:6f:ad:a9:36:
                    0d:3f:bb:0f:f2:ac:4b:65:37:f2:bc:11:71:04:db:
                    40:b1:40:4a:7a:e9:a2:cb:06:5f:13:76:64:71:f8:
                    f3:3b:3b:68:8a:35:dd:a8:ef:3c:dc:1c:31:bb:eb:
                    48:b4:6b:12:a9:83:1a:23:8d:2b:96:0c:45:48:19:
                    8c:ca:40:7d:5b:23:22:5d:1b:8e:bc:fe:f9:27:e3:
                    6d:f0:90:73:ce:a2:76:3f:cb:7d:47:be:bb:9e:c4:
                    d4:bd:70:4f:0f:fd:a5:ac:43:be:6a:c6:84:44:2d:
                    13:9b:5a:7f:9a:8a:c3:a8:9b:99:d6:17:57:43:65:
                    cf:0b:93:67:94:b6:55:47:12:b2:2e:39:ed:6c:fc:
                    33:99:9a:ac:f8:09:52:15:c1:5d:b9:69:10:04:6f:
                    08:61:e4:50:a6:ca:31:25:8e:56:22:58:aa:b8:d1:
                    b2:de:3b:fd:43:df:f6:bf:49:9f:5f:71:c2:a2:d3:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:49:1F:DD:F5:CD:5A:47:2E:EB:5C:50:84:FE:EB:63:DA:12:7B:91
            X509v3 Authority Key Identifier:
                keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32332d3233203d3e20313532303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:02:63:38:9c:10:8d:28:3f:f6:4d:39:1c:fa:11:22:fe:c5:
         f3:07:77:3c:71:dd:16:8d:02:ce:8b:ab:09:8d:26:e0:3e:a3:
         c4:d7:6b:5f:cd:c9:27:9a:81:05:8b:9d:45:fb:09:b1:7f:ae:
         10:45:53:1f:e1:8a:f3:47:98:15:f6:3a:15:49:e5:bc:d5:16:
         e8:bf:58:a6:a5:ab:9e:66:3d:a4:51:d5:b7:ba:03:57:59:d7:
         4d:78:c4:59:22:48:b5:69:05:87:7c:dd:51:bb:ca:55:81:c1:
         79:27:db:a3:80:5e:2e:66:02:7e:e4:2f:f9:2a:9c:f6:0b:79:
         64:53:d7:99:2a:3c:b1:60:23:49:56:16:47:70:75:19:9c:6f:
         91:31:d0:f4:90:3b:7f:67:3e:c8:4b:e3:07:f3:59:e3:2e:9d:
         50:50:50:d5:c5:73:62:22:cb:dc:1e:b1:a2:c1:c8:e2:fb:71:
         7e:25:0c:db:a1:d8:d8:4b:5c:22:09:05:1a:23:e0:b8:f0:ac:
         1c:42:4c:84:6b:7b:8c:0d:83:85:f0:12:9c:1c:29:da:89:51:
         96:d3:e3:f5:19:d2:47:95:df:c0:8b:9e:90:cc:09:0c:6c:2c:
         40:50:8a:33:88:cf:ca:44:58:0a:f6:f0:00:76:f5:2c:6b:de:
         64:5e:21:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:31 2024 by rpki-client on console-fra.rpki-client.org