Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32332d3233203d3e203633353031.roa
File:                     36312e31342e3235302e302f32332d3233203d3e203633353031.roa (raw, json)
Hash identifier:          Jr+YPy99MnWwkm/TCQpHXGXl3HFe50JeW7l96DEfQPY=
Subject key identifier:   D5:21:EB:AF:3B:93:77:1B:CC:AE:1D:61:06:FF:8F:65:65:B7:CC:6F
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       72EC93459D8386F8A3B796036BB7E761DCF7EF7B
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32332d3233203d3e203633353031.roa
Signing time:             Sun 23 Jul 2023 17:00:02 +0000
ROA not before:           Sun 23 Jul 2023 16:55:02 +0000
ROA not after:            Sun 21 Jul 2024 17:00:02 +0000
asID:                     63501
IP address blocks:        61.14.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ec:93:45:9d:83:86:f8:a3:b7:96:03:6b:b7:e7:61:dc:f7:ef:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jul 23 16:55:02 2023 GMT
            Not After : Jul 21 17:00:02 2024 GMT
        Subject: CN=D521EBAF3B93771BCCAE1D6106FF8F6565B7CC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:3f:5c:73:42:7f:b9:7f:7f:ec:e8:62:78:
                    90:9a:5b:f4:5f:04:3b:88:bb:22:d0:42:b4:71:5d:
                    71:f8:b2:66:c7:de:d1:fe:ee:10:4a:f5:0e:06:7e:
                    46:a9:df:cc:d3:26:97:98:4d:ec:8b:e5:a3:39:ee:
                    1d:f5:cb:ad:c6:01:e4:fc:a1:c0:82:b2:83:07:78:
                    e1:60:1e:25:23:52:d3:b1:7d:bf:cf:8b:84:81:d1:
                    39:c1:34:04:c9:97:a0:d7:85:8a:72:e3:60:f6:1e:
                    a9:a4:fa:5d:84:ff:cd:fc:81:a6:a0:85:15:fa:77:
                    88:2a:0d:3d:68:0d:b3:c2:b9:a6:31:4a:0e:3e:23:
                    0f:5a:33:65:66:3d:20:22:1d:4d:cc:f3:fc:8c:c2:
                    03:40:4d:e0:dc:d2:5d:51:0e:b1:5f:a8:3d:15:c5:
                    9a:a4:b5:22:8d:81:4d:1c:4d:b7:8a:20:c4:40:6c:
                    78:97:cf:de:0a:ac:d8:03:af:62:4d:47:f5:b8:2e:
                    71:c3:3f:e7:8d:9c:ae:7f:fa:cb:7a:52:b3:47:01:
                    58:f5:fd:a4:ba:b8:b7:10:cd:0e:4c:7a:1d:bd:6e:
                    df:d6:cc:59:59:f4:e4:4c:5b:47:df:a9:f9:c2:80:
                    a8:69:ab:18:88:20:05:2b:d2:78:7e:b6:a5:b2:06:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:21:EB:AF:3B:93:77:1B:CC:AE:1D:61:06:FF:8F:65:65:B7:CC:6F
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32332d3233203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.14.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:f6:d2:c3:da:35:bc:d3:32:6d:ad:40:73:1c:32:db:02:24:
         fb:fc:fc:6f:45:92:84:6f:54:16:c3:d4:38:d8:94:3b:1d:6c:
         46:51:cb:5c:db:e5:24:65:9a:2c:c9:38:2d:01:1a:27:95:49:
         74:83:47:ce:dc:d6:ed:df:8b:10:19:9e:fc:1a:72:d7:de:93:
         8d:63:57:8c:64:9c:33:d8:b7:e4:58:45:dd:6e:37:27:8d:6c:
         ac:b7:c3:88:c4:ea:76:17:79:5f:e5:a4:39:ce:01:c0:da:28:
         a9:97:c0:df:b6:3a:e2:f0:7f:57:58:cc:c3:b2:27:e4:fa:27:
         87:7c:59:56:e1:23:13:b7:4d:42:72:aa:e8:9b:eb:be:65:92:
         68:9f:f3:b9:41:4a:27:dd:80:22:d3:71:f9:9d:d6:88:bf:e8:
         50:59:53:ce:cd:84:64:93:2d:fa:80:07:f5:7c:74:e4:2d:cf:
         93:9d:10:2b:9e:6d:7e:b7:8f:54:7b:35:ba:20:44:fb:83:71:
         fc:cf:a1:c3:4f:9b:eb:dd:6e:f6:e6:ba:c6:30:1d:83:5a:7a:
         f2:9c:b9:18:1d:50:a8:dd:df:a7:a9:f7:65:10:d7:e0:61:10:
         3b:f7:8e:0a:46:5e:5f:8a:38:83:15:2e:db:e8:6a:f1:19:e3:
         95:cf:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:06:33 2024 by rpki-client on console-fra.rpki-client.org