Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32342d3234203d3e203338373533.roa
File:                     34352e3131352e36362e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier:          XVq4XGIDWAz1L60d3xFAriKW+ewZiI+33lavgnikWFE=
Subject key identifier:   9A:3E:52:FF:C4:E4:D8:33:6E:2E:8A:9B:03:4E:11:6D:D4:23:35:B6
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       5D2D86E901D467FB11CB7114B19BF7DF378C1E41
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32342d3234203d3e203338373533.roa
Signing time:             Fri 31 May 2024 07:00:01 +0000
ROA not before:           Fri 31 May 2024 06:55:01 +0000
ROA not after:            Fri 30 May 2025 07:00:01 +0000
asID:                     38753
IP address blocks:        45.115.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2d:86:e9:01:d4:67:fb:11:cb:71:14:b1:9b:f7:df:37:8c:1e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: May 31 06:55:01 2024 GMT
            Not After : May 30 07:00:01 2025 GMT
        Subject: CN=9A3E52FFC4E4D8336E2E8A9B034E116DD42335B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0a:9d:4b:44:4c:64:c1:14:e3:50:79:aa:93:
                    5f:3a:c6:d1:ee:4f:95:73:5c:20:ed:55:4f:15:fc:
                    c1:e8:13:ad:9e:14:e1:af:c9:f4:78:a0:81:68:70:
                    74:9b:df:8d:1e:ae:05:78:24:ff:bc:ad:06:f3:e0:
                    60:ae:2c:80:69:c7:5b:15:e4:ae:6f:06:41:f0:db:
                    a2:a8:ed:35:21:b3:e5:f2:da:37:c5:d7:64:90:4f:
                    b4:a7:35:65:ce:a7:74:2e:11:91:9b:81:af:2d:09:
                    17:f1:1d:2e:e6:ab:f0:ef:48:e5:d9:45:ec:08:a9:
                    f1:5d:10:67:89:b6:ab:ce:00:a1:b5:a6:9b:71:ec:
                    e0:0d:ac:36:53:fd:83:29:c1:95:96:fc:34:4a:52:
                    f0:80:b9:62:d6:c6:b7:50:39:f6:39:ab:6c:c2:31:
                    c5:75:06:ad:91:b1:e8:91:75:9f:c3:39:fc:3b:7d:
                    14:17:6b:b4:c0:59:19:ff:3c:28:2b:3b:08:e0:5e:
                    6f:a9:f1:88:e4:77:66:12:63:63:f0:70:1f:5b:f5:
                    fb:bd:5f:ef:82:e5:b2:31:52:bb:e5:56:e7:26:be:
                    25:e0:57:8a:f8:1c:7e:81:48:42:52:e9:31:5b:1d:
                    d1:6e:ad:a6:f1:7c:54:42:3b:e8:e5:8b:82:e5:89:
                    e9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3E:52:FF:C4:E4:D8:33:6E:2E:8A:9B:03:4E:11:6D:D4:23:35:B6
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32342d3234203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:34:44:19:ee:39:cb:e3:50:9a:ab:67:a2:34:0c:70:b0:e0:
         55:ad:a1:9a:c9:4e:dd:99:7e:40:cc:f7:a0:5c:2e:d1:65:96:
         f2:fa:5e:a3:bb:43:b3:7e:09:e5:64:e8:ec:01:b5:50:84:f3:
         14:23:a2:3e:f8:ec:6d:83:37:7f:bd:0f:58:d8:08:21:3d:75:
         73:00:cd:ad:51:97:f3:ad:17:5f:7a:62:3b:82:33:6c:dd:ef:
         32:b2:b5:c6:49:6a:e4:39:5f:76:18:4e:7d:4d:cd:78:ee:fc:
         e6:0b:97:e6:ae:bf:1c:7e:f7:2c:dc:de:f9:0f:cf:54:94:b7:
         30:ca:01:20:65:19:e1:e5:a1:2a:6f:a4:e1:15:05:fd:d4:49:
         31:19:39:e3:88:b7:97:d9:e7:6b:6b:8b:ba:bd:a9:98:fc:36:
         28:cd:ec:64:ce:f0:d1:e4:21:da:87:f6:46:bc:76:ce:04:6a:
         0c:97:0f:af:32:56:15:76:64:68:90:89:90:1d:71:45:38:63:
         aa:5c:2f:70:19:2c:c1:da:b1:ab:0a:d7:35:9d:02:ad:f7:e7:
         c3:44:6e:fb:ca:3a:39:04:59:45:7f:96:ae:0e:79:11:64:cc:
         29:a2:77:ab:ca:b5:b9:77:3f:93:66:07:ad:15:a1:9f:c5:cf:
         ff:8e:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org