Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36342e302f32342d3234203d3e203338373533.roa
File:                     34352e3131352e36342e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          2hRfSzBprLPHi3hWiqHJuHj931uASSxWQP4yZcrSe90=
Subject key identifier:   C3:FF:6D:C0:08:36:44:09:A4:AD:73:4D:12:41:6F:51:A6:54:60:F6
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       779B1146140536A0C767A007B19D7E5F3ECCE24D
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36342e302f32342d3234203d3e203338373533.roa
Signing time:             Fri 31 May 2024 07:00:01 +0000
ROA not before:           Fri 31 May 2024 06:55:01 +0000
ROA not after:            Fri 30 May 2025 07:00:01 +0000
asID:                     38753
IP address blocks:        45.115.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9b:11:46:14:05:36:a0:c7:67:a0:07:b1:9d:7e:5f:3e:cc:e2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: May 31 06:55:01 2024 GMT
            Not After : May 30 07:00:01 2025 GMT
        Subject: CN=C3FF6DC008364409A4AD734D12416F51A65460F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:39:ee:6e:77:6f:49:c6:73:1b:e9:b2:8f:
                    5b:bf:12:e1:1e:8c:93:c9:bd:f5:26:82:fd:64:c6:
                    24:b5:6e:6f:5c:3e:76:ba:7f:f9:a7:ad:1d:6f:dd:
                    d1:56:35:88:a9:fa:40:e4:14:96:f8:b2:f7:a1:6c:
                    f7:ca:82:15:22:60:2b:cb:e8:29:f3:58:54:41:75:
                    61:1c:1a:94:ef:cb:54:1c:03:cc:b8:ab:96:8f:53:
                    01:07:9c:88:32:59:8b:77:fa:f7:2f:c5:d1:6e:e7:
                    77:85:a3:a8:c4:e7:db:2c:c9:72:c7:95:ac:d0:82:
                    4f:5d:bd:b5:a2:c2:83:94:d1:36:1c:f0:b6:75:a7:
                    c9:37:62:22:4a:aa:5c:67:9d:45:09:8c:3f:2b:96:
                    d2:a1:9d:7f:dc:a4:2b:3f:79:47:55:01:8e:ab:db:
                    c3:10:52:eb:9d:32:02:5d:af:2d:5c:19:b8:c7:1b:
                    22:46:84:77:d4:7a:54:77:0a:55:67:28:18:00:ce:
                    e2:09:63:93:f0:2b:0c:7a:39:f0:5c:5f:b6:2b:80:
                    9c:27:06:b9:9f:f7:00:43:fb:75:c4:67:3b:03:df:
                    c4:04:93:c5:46:c9:cf:28:2f:a0:3c:f7:75:0f:0b:
                    c7:f6:bd:85:82:42:3c:98:cc:5c:21:8c:fd:92:95:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FF:6D:C0:08:36:44:09:A4:AD:73:4D:12:41:6F:51:A6:54:60:F6
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36342e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b6:ca:9b:09:8b:98:f5:31:7f:cc:b2:af:ca:7a:9e:87:02:
         52:5a:ca:fb:65:f9:71:7c:98:c1:3f:d5:2e:ec:73:0c:52:e7:
         a4:f5:92:8a:e9:e8:b2:43:58:b1:32:ef:ac:76:1a:7d:01:ad:
         e4:ce:35:2c:0c:d9:fb:03:34:8f:22:96:28:f2:ae:19:d0:23:
         24:39:e4:11:4a:9c:79:ef:be:49:e0:81:65:4a:e1:f2:e2:d7:
         fd:e2:eb:ee:4c:9b:5c:29:23:ef:26:1e:4c:5c:99:43:ec:9c:
         59:78:59:c3:ea:f8:b5:d0:c4:77:51:20:f5:50:92:62:6c:95:
         10:4b:59:cf:ef:82:e6:c0:cb:9d:e0:be:e0:46:86:eb:bb:72:
         5f:ce:b3:8f:4d:99:e3:81:69:a0:c6:4a:4c:2f:9f:f2:31:a5:
         3b:55:67:7e:87:b9:27:b4:a0:cd:07:a9:65:38:d3:e4:05:78:
         36:30:55:ca:e7:a2:1f:e9:4a:d7:83:14:2c:ab:40:59:c1:2a:
         57:a3:bf:d7:38:62:61:f1:09:39:61:ef:aa:77:4b:9a:e3:e9:
         4a:10:e8:1e:ea:cd:25:87:c3:c4:4a:79:40:a9:75:f2:87:5b:
         c3:71:c8:c9:2b:53:77:bd:a1:a0:b8:56:67:da:cc:d2:06:9f:
         99:5e:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org