Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133322e302f32342d3234203d3e203538343737.roa
File:                     34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          6P/MnisWmadZujdf0MdzBBem1MXVl8xw/vKYXqNcxoU=
Subject key identifier:   6D:36:16:56:F8:A1:0A:D4:AF:81:2A:46:96:83:19:BC:23:67:EA:5E
Certificate issuer:       /CN=BD809D8A065DB595DC069383736A1A9C4A96B267
Certificate serial:       2B4EBA2EA9D5574164FDF5DEA04FB42867EA6F86
Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133322e302f32342d3234203d3e203538343737.roa
Signing time:             Mon 02 Jun 2025 02:05:07 +0000
ROA not before:           Mon 02 Jun 2025 02:00:07 +0000
ROA not after:            Mon 01 Jun 2026 02:05:07 +0000
asID:                     58477
IP address blocks:        45.127.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl
                          rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 20:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4e:ba:2e:a9:d5:57:41:64:fd:f5:de:a0:4f:b4:28:67:ea:6f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267
        Validity
            Not Before: Jun  2 02:00:07 2025 GMT
            Not After : Jun  1 02:05:07 2026 GMT
        Subject: CN=6D361656F8A10AD4AF812A46968319BC2367EA5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2c:cf:09:f4:dc:d3:25:98:48:a6:58:d6:fb:
                    e5:01:e2:34:fa:67:dd:0a:58:03:e3:03:b0:96:56:
                    24:2a:88:d7:0e:ba:8b:b3:c8:fb:23:01:4e:73:76:
                    e1:cc:cd:e4:52:0f:19:dd:f3:1e:ec:f3:f4:86:2b:
                    d2:ac:23:d3:8d:9a:80:3e:07:1c:8c:77:31:d2:03:
                    e6:d8:f6:92:71:a5:6d:99:8c:3b:f9:ee:ce:6c:e4:
                    cb:73:ea:a1:c9:8f:35:21:58:35:a9:8d:fa:f4:57:
                    9c:b6:2f:7b:64:6a:7e:be:7c:34:42:d0:bf:8c:29:
                    f8:db:f5:c1:6c:e2:cf:40:86:5d:0e:50:ce:2b:db:
                    d3:3e:dc:33:a5:ac:09:03:9a:72:e3:b5:5d:e4:05:
                    8d:a0:a8:d1:01:e9:bf:11:8a:20:69:e6:d3:3c:04:
                    52:46:0c:3f:8c:2b:97:a5:49:a2:63:53:cf:f8:87:
                    7c:1e:61:6f:31:0f:7e:7c:2d:46:17:10:89:40:e7:
                    57:75:33:ed:cb:bc:f7:43:46:c3:e0:93:23:7a:4d:
                    91:e4:25:f2:29:6a:6a:fb:be:bc:e7:f4:32:cc:a6:
                    79:60:ae:05:78:f1:7b:8a:02:f1:eb:cc:98:77:47:
                    74:ec:16:ec:a9:55:3a:f5:3f:0f:7c:53:18:a0:d4:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:36:16:56:F8:A1:0A:D4:AF:81:2A:46:96:83:19:BC:23:67:EA:5E
            X509v3 Authority Key Identifier:
                keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/34352e3132372e3133322e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.127.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:a4:34:b4:a9:1f:b3:55:8f:8f:5f:c6:13:64:32:6c:d9:
         66:09:84:62:48:23:60:ea:99:0a:12:0f:4a:d4:f5:19:b8:28:
         64:df:39:39:30:f8:b9:cf:78:bf:7a:f1:7c:ab:73:f6:63:a0:
         a4:f8:28:ca:5e:4f:b5:4c:c9:8c:c0:7e:10:cd:94:82:ce:62:
         c5:56:60:8d:f3:06:ee:87:d3:07:00:c1:9a:db:9f:e3:41:ea:
         a3:76:fe:80:02:8c:f8:84:c6:ce:1d:84:79:8b:1a:fc:db:0d:
         39:58:6b:f5:92:d6:91:d7:b9:9b:4a:5b:6a:58:80:bf:81:bc:
         3a:95:c5:50:c5:ed:46:c5:6b:c4:ce:58:a3:5e:67:30:d3:a6:
         68:c1:28:4d:57:66:99:9e:83:27:48:70:9d:1e:90:4a:61:d9:
         74:3c:c9:70:03:c6:fb:82:d9:4f:4d:3b:f3:d5:23:1b:2b:d8:
         d3:cb:1f:c9:24:c0:aa:b9:2e:d2:16:c1:9a:86:bf:04:e7:79:
         84:19:b0:28:97:42:c0:33:20:8d:42:3b:68:20:67:72:87:dd:
         4c:53:25:4b:85:7e:7a:40:86:ca:2d:56:d7:75:ef:e9:7a:17:
         52:83:01:a7:01:96:fe:3a:8e:ec:6a:38:82:60:98:8e:45:da:
         21:f6:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:18:45 2025 by rpki-client