Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36352e302f32342d3234203d3e203338373533.roa
File:                     34352e3131352e36352e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          1XMSp/2n75IEMVx9Qz3JMSVa+5tBzohtJmBgu5vnxB8=
Subject key identifier:   76:C1:D4:D1:FA:D3:20:E2:3C:8D:64:28:40:85:13:BE:DF:4E:F9:8E
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       77CD5D6418E29CA5531A06869FDD7EFE653CCF96
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36352e302f32342d3234203d3e203338373533.roa
Signing time:             Fri 04 Oct 2024 06:00:01 +0000
ROA not before:           Fri 04 Oct 2024 05:55:01 +0000
ROA not after:            Fri 03 Oct 2025 06:00:01 +0000
asID:                     38753
IP address blocks:        45.115.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cd:5d:64:18:e2:9c:a5:53:1a:06:86:9f:dd:7e:fe:65:3c:cf:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Oct  4 05:55:01 2024 GMT
            Not After : Oct  3 06:00:01 2025 GMT
        Subject: CN=76C1D4D1FAD320E23C8D6428408513BEDF4EF98E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:11:55:45:87:10:d1:6b:a7:81:19:92:72:
                    90:50:07:d4:ae:da:1b:0b:53:23:74:14:ff:00:a2:
                    8f:83:5d:de:d9:a2:b0:1c:95:d6:df:f7:b4:8c:7d:
                    c2:bb:2e:f3:a7:36:e6:14:4d:85:46:3b:b3:e5:a4:
                    1e:9d:63:49:46:d9:20:ac:4c:cf:80:f7:88:13:53:
                    da:60:87:b3:fd:9b:15:ea:9b:55:3b:21:64:90:9f:
                    e8:d4:2b:e0:3d:5a:f6:1b:cb:fc:6e:e3:34:50:4e:
                    a7:c3:13:6f:67:62:8b:e7:ee:05:31:d3:ea:ba:7e:
                    bb:72:75:07:d5:b6:73:09:82:21:98:72:24:56:b0:
                    f3:3f:30:5a:4b:d7:c4:22:81:8d:f1:28:fc:49:84:
                    01:75:9d:9a:43:cc:30:c8:18:00:e7:08:b8:9e:49:
                    00:1b:5e:93:32:e9:28:a8:fb:ed:30:bc:a3:60:a6:
                    d9:5c:b8:e4:0e:d2:eb:9b:8c:6b:71:f5:c3:cb:8e:
                    17:ef:e6:a0:5b:72:b1:a2:3f:f8:c6:c3:af:f1:4a:
                    32:3f:49:55:bc:86:e8:2b:bc:8b:18:db:66:26:2e:
                    a3:c8:a0:82:30:d9:d4:ac:32:13:52:9a:4e:8f:07:
                    21:5a:ee:a8:f0:69:90:95:e8:9d:9c:af:3d:36:59:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C1:D4:D1:FA:D3:20:E2:3C:8D:64:28:40:85:13:BE:DF:4E:F9:8E
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36352e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a9:62:ec:b3:b3:a9:f7:17:b7:4a:bb:fc:15:5e:eb:11:0d:
         84:f4:e4:75:67:42:5a:eb:87:67:c7:8e:c4:39:59:9c:68:f1:
         7b:89:28:0e:30:5c:99:4b:01:59:df:ee:0f:8e:76:07:63:2b:
         a9:67:ea:94:75:c6:22:5e:18:aa:42:ce:26:b2:75:00:d8:fb:
         ce:cc:dc:02:c8:4f:6a:ff:a6:dc:6b:3b:97:8e:00:68:b5:c8:
         a8:7a:a4:63:16:b8:10:1f:6e:c5:ee:7b:4c:aa:d9:bb:7b:62:
         af:09:31:75:a5:ca:25:ad:ae:02:1e:90:e8:01:e8:4d:94:42:
         3d:63:38:7b:d1:fe:20:6d:1b:7e:17:68:8d:87:f5:6f:3c:b1:
         33:61:2e:b1:2f:23:aa:db:56:c9:c1:03:e9:28:ed:b5:86:e3:
         a9:95:ef:5c:42:a3:81:4f:b5:00:a9:a4:03:76:36:6e:ed:11:
         2e:9c:8a:c6:83:0a:f8:2f:4f:ca:cc:32:e7:fc:9f:95:79:0f:
         23:88:64:3b:ab:a5:43:14:c3:66:ed:f7:36:c4:2e:fc:54:f2:
         69:f0:4e:f4:78:ed:53:70:11:5f:8a:09:54:27:f9:3d:84:2c:
         c9:9d:0d:bc:a1:96:d0:a2:9b:3f:6f:00:e7:9c:b7:04:fb:00:
         56:84:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org