Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31322e302f32342d3234203d3e203338353030.roa
File:                     3133372e35392e31322e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          9ZD4XjjXO7B3DBSExvL2GyZwmYeeqEO+IiQe0UZ79o0=
Subject key identifier:   F3:6A:1B:59:42:A4:F3:FC:85:2A:F5:C6:A1:D4:88:BC:F0:35:D9:18
Certificate issuer:       /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial:       2D327C6FA64B4FD48C55F8B3CF17C93BB6A5B68C
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31322e302f32342d3234203d3e203338353030.roa
Signing time:             Mon 01 Jul 2024 01:04:41 +0000
ROA not before:           Mon 01 Jul 2024 00:59:41 +0000
ROA not after:            Mon 30 Jun 2025 01:04:41 +0000
asID:                     38500
IP address blocks:        137.59.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
                          rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:32:7c:6f:a6:4b:4f:d4:8c:55:f8:b3:cf:17:c9:3b:b6:a5:b6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
        Validity
            Not Before: Jul  1 00:59:41 2024 GMT
            Not After : Jun 30 01:04:41 2025 GMT
        Subject: CN=F36A1B5942A4F3FC852AF5C6A1D488BCF035D918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:e6:6d:bf:47:4f:92:6d:58:37:b2:2f:c6:
                    ff:3d:6d:16:0c:d9:65:97:f4:23:b7:39:67:d0:97:
                    67:a6:1d:7c:75:d4:16:92:ba:81:67:f4:6e:71:19:
                    00:46:88:19:1b:19:e9:a3:ab:01:48:1c:f2:8f:5e:
                    b6:8e:d8:f5:be:ec:29:47:f8:c2:4a:1a:83:ca:6d:
                    90:76:8b:ca:82:8d:1e:1a:42:02:5d:36:c6:56:dd:
                    c8:d3:02:4b:8c:42:45:76:e3:64:69:8d:54:71:93:
                    cc:bb:d6:ff:6b:48:83:8c:27:30:35:64:04:49:a1:
                    70:e2:32:06:d5:02:60:48:ef:d4:f4:91:35:8f:3d:
                    63:dd:7d:9f:c0:4f:e1:3f:5d:f8:b3:cd:11:d0:ac:
                    a8:06:3a:85:d7:eb:9f:ea:8c:3c:b9:82:8d:0d:ee:
                    03:ae:83:ca:26:6c:7d:2e:10:29:77:bb:3a:30:74:
                    0c:d2:1b:5f:b0:a5:7e:f9:70:ec:76:fa:c7:13:e7:
                    38:7e:44:33:1d:9d:99:1c:98:1d:9f:8e:b5:03:33:
                    a3:51:42:f8:3c:b0:df:3d:5a:90:42:c1:43:0e:3a:
                    e9:84:91:6f:dc:cf:b6:7d:04:7b:12:fd:8d:61:d5:
                    f8:bf:53:c7:f7:6c:2e:28:c9:1d:3a:a2:f0:ef:5a:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6A:1B:59:42:A4:F3:FC:85:2A:F5:C6:A1:D4:88:BC:F0:35:D9:18
            X509v3 Authority Key Identifier:
                keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31322e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.59.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:1b:de:17:78:3e:a3:b7:68:fd:c8:31:36:9f:cb:85:7f:
         c0:2f:76:48:21:04:d8:7a:96:8a:fe:53:f0:d4:75:fe:3f:d0:
         81:09:cf:5e:52:3c:25:d3:67:19:70:68:8c:9d:20:3b:01:df:
         08:6e:70:bb:94:c9:81:a1:e3:f6:f9:96:23:a7:d0:34:86:fd:
         90:fb:05:2b:75:9e:f1:96:35:11:e2:b1:2b:a5:0a:43:9c:a0:
         b3:53:24:2c:9c:8d:c8:49:3d:23:1b:34:a7:fd:2d:dc:0d:47:
         13:5c:6a:18:d3:6f:c2:7a:35:1d:b6:eb:61:c8:4c:69:ad:d1:
         57:49:50:5b:c7:70:1b:d5:0d:e5:59:d4:a6:a1:df:76:78:13:
         4e:6f:07:72:c9:45:51:83:bf:ea:3e:ac:e9:d6:79:f2:98:ac:
         25:e7:19:ad:fb:18:42:60:ce:16:bf:41:18:f6:5c:d2:af:38:
         b3:46:21:35:e2:44:0e:29:be:8b:b0:87:75:38:af:bf:09:35:
         d4:c1:6a:90:01:d6:f7:f3:e7:ed:4c:a6:32:69:2e:ae:9a:d3:
         e3:cf:2f:5a:37:6f:27:34:af:b5:fa:63:2c:bd:f2:1c:43:a3:
         90:9a:c4:9a:40:c8:b4:04:65:bf:da:15:2b:d7:d7:74:7d:d0:
         16:54:3c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org