Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235312e302f32342d3234203d3e203633353031.roa
File:                     36312e31342e3235312e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          tDeUesIT5hmczsW6BTxsBHwiYbeaF0RWGWq+DrgqHBc=
Subject key identifier:   A7:EB:1E:AD:A6:80:D7:BE:69:F2:32:90:8F:5E:EA:78:97:9A:0B:F7
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       7936813B7C72C553EE76D49182604F9999FA5832
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235312e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 23 Jun 2024 18:00:02 +0000
ROA not before:           Sun 23 Jun 2024 17:55:02 +0000
ROA not after:            Sun 22 Jun 2025 18:00:02 +0000
asID:                     63501
IP address blocks:        61.14.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:36:81:3b:7c:72:c5:53:ee:76:d4:91:82:60:4f:99:99:fa:58:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jun 23 17:55:02 2024 GMT
            Not After : Jun 22 18:00:02 2025 GMT
        Subject: CN=A7EB1EADA680D7BE69F232908F5EEA78979A0BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:4b:fd:9b:f9:f3:fe:a5:85:ca:84:53:ae:
                    19:72:9d:b6:b3:e4:a0:dc:de:d3:fd:69:0d:14:ca:
                    8c:06:b7:28:8b:50:ee:1f:a5:99:76:6a:83:e0:a9:
                    4b:c5:54:0b:ac:a9:6a:20:29:a9:69:10:57:87:76:
                    2d:bc:73:54:3d:04:05:76:33:cc:b3:43:08:54:58:
                    aa:3b:e3:1c:db:73:3c:ea:a8:04:cb:9b:c6:83:9b:
                    97:41:ac:b4:00:26:1b:10:83:63:7c:4d:63:e8:73:
                    6c:fc:8f:1d:5a:43:e0:b3:6a:ab:40:f4:62:32:6c:
                    e6:73:4e:6f:d5:2e:fb:a6:fe:61:50:fb:8a:37:92:
                    dd:45:58:9f:a6:40:58:6b:a0:ed:86:87:2e:a6:ba:
                    ed:ec:8b:1f:a4:84:a4:7b:77:e2:a9:e5:b9:31:6e:
                    00:81:5a:a5:d7:f7:bc:93:7a:bb:8f:59:28:54:aa:
                    c2:58:88:20:8f:2f:0d:ff:af:fa:39:82:35:bf:83:
                    17:c0:88:13:db:f2:af:b4:5e:a3:a6:3c:87:98:6c:
                    4d:fb:1c:9c:7e:0e:84:2a:47:f2:37:e8:d9:22:48:
                    49:a5:d3:2c:a5:89:54:b8:46:f4:9d:08:26:95:00:
                    c2:29:89:aa:06:a9:e9:65:39:1b:85:c4:39:cf:76:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EB:1E:AD:A6:80:D7:BE:69:F2:32:90:8F:5E:EA:78:97:9A:0B:F7
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235312e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.14.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:18:c4:46:97:87:bb:90:d8:e7:1b:6e:dc:08:34:71:25:f1:
         49:9c:41:2f:af:b1:07:e8:26:83:35:bd:b2:46:bb:2b:e4:d0:
         3c:c4:3c:d9:5b:4c:da:ed:a4:6d:e2:49:0e:94:49:cd:e3:ac:
         be:93:b3:58:cf:c9:39:76:bb:5a:d9:d5:a2:fb:fa:e6:f3:4f:
         86:aa:5c:ae:a9:db:38:d8:41:4d:4e:5c:e7:c8:e8:60:2f:a7:
         a5:10:5c:41:be:05:86:30:c0:81:ae:2a:1a:35:3b:c0:89:7d:
         15:18:35:ee:91:ab:12:2e:a9:10:13:15:18:3a:4e:a9:7f:82:
         a5:9e:4a:13:4e:43:16:04:83:23:c1:5a:63:b1:e8:7e:24:1d:
         78:3e:e9:26:6c:50:5f:b8:a6:0a:5e:a0:66:dc:c9:4e:f1:c4:
         5b:03:a2:4d:1c:c4:d7:f6:1c:31:22:63:7d:16:68:cb:c8:c2:
         0b:19:02:55:c2:7f:4f:5a:bc:8b:eb:8a:9c:a6:9d:a5:f0:21:
         55:3c:8b:e2:0f:2d:6f:08:3b:b9:4c:8f:6a:b6:e2:ff:37:99:
         7d:b6:b8:a5:30:ee:9b:e2:ab:39:ec:54:cf:81:f9:c4:59:53:
         1d:87:92:b4:a8:39:75:b4:bb:13:5f:68:cd:23:49:cd:2c:a2:
         7e:4d:45:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org