Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/33362e35302e3135342e302f32332d3234203d3e20313532303738.roa
File:                     33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (raw, json)
Hash identifier:          qwTtWBYi7rJ9MiRmHT0aPuVn4Q/HdC0kRQGNXWYVUNE=
Subject key identifier:   EE:56:66:3B:4A:18:B3:EE:D6:EB:3B:BF:98:05:3C:2F:DF:8F:35:CA
Certificate issuer:       /CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756
Certificate serial:       67DD467D0AB57A458BF5DBA8251C9F1A624E9E6E
Authority key identifier: 7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/33362e35302e3135342e302f32332d3234203d3e20313532303738.roa
Signing time:             Fri 16 Aug 2024 02:58:38 +0000
ROA not before:           Fri 16 Aug 2024 02:53:38 +0000
ROA not after:            Fri 15 Aug 2025 02:58:38 +0000
asID:                     152078
IP address blocks:        36.50.154.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl
                          rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 22:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:dd:46:7d:0a:b5:7a:45:8b:f5:db:a8:25:1c:9f:1a:62:4e:9e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756
        Validity
            Not Before: Aug 16 02:53:38 2024 GMT
            Not After : Aug 15 02:58:38 2025 GMT
        Subject: CN=EE56663B4A18B3EED6EB3BBF98053C2FDF8F35CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:07:89:b6:aa:d0:24:9d:66:4a:58:ca:cd:99:
                    79:45:86:21:c9:8c:b4:20:3c:4d:4c:35:ae:3f:4f:
                    f0:c3:92:35:d1:ab:fd:ee:90:f6:ee:5a:16:a6:8d:
                    4d:b2:5d:8d:b6:3f:ec:a9:f7:82:e1:7b:fb:34:37:
                    db:8c:38:fe:19:5b:66:51:1d:35:d6:63:51:8b:5a:
                    ca:ec:48:c2:5c:0d:79:c3:db:dd:7d:ae:90:eb:29:
                    22:26:9e:f7:07:22:47:56:21:b4:0b:1f:3c:27:f0:
                    37:c2:dc:a6:35:37:50:c4:3a:21:78:6b:2f:06:89:
                    80:cd:b5:0d:87:6d:b4:9d:aa:99:1b:00:10:12:9a:
                    8a:3c:95:39:18:7f:e8:ef:fe:83:c4:e8:f9:0e:9f:
                    17:28:ba:5b:4e:10:07:c1:52:5f:28:48:e0:ae:bd:
                    02:aa:ad:78:a6:59:70:30:db:9a:21:9b:0b:73:ac:
                    e5:67:5f:79:40:b3:3b:f2:7b:fe:01:af:83:3d:b1:
                    94:8d:d1:04:34:15:b9:47:ab:67:16:1f:dc:ea:4d:
                    b8:31:5d:2b:60:ff:15:c5:11:cc:e2:2e:ec:b4:f4:
                    d2:0f:b2:74:f1:30:89:28:9b:90:a6:50:2e:65:51:
                    31:fc:16:85:fa:45:f2:f1:d6:79:78:bc:82:bf:40:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:56:66:3B:4A:18:B3:EE:D6:EB:3B:BF:98:05:3C:2F:DF:8F:35:CA
            X509v3 Authority Key Identifier:
                keyid:7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/33362e35302e3135342e302f32332d3234203d3e20313532303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:b0:ff:ab:cc:ea:91:2e:c2:97:b3:92:1c:bd:0e:55:81:e8:
         5a:62:68:e4:e8:d9:79:b6:85:04:80:ad:8f:b7:31:63:84:f1:
         aa:42:14:4d:71:6e:1e:bc:ee:15:5c:17:25:3e:f5:10:b6:92:
         a3:3d:25:dd:f7:b9:a6:ec:74:59:f8:df:e9:a6:a6:30:ee:8b:
         1b:a3:eb:e9:70:b7:ad:b0:4a:87:98:27:43:c9:5e:da:4e:4e:
         2c:fe:61:19:34:c3:aa:7c:cc:ba:b2:fa:3e:d2:05:0f:d7:41:
         8a:3f:03:b4:a7:b5:d6:23:0e:42:21:9e:c9:c9:f4:d1:19:27:
         6e:2c:15:e7:63:28:5c:2d:26:db:82:93:87:88:8a:27:e5:7e:
         e9:3e:fe:ea:5a:93:ba:32:bd:1d:e0:0e:92:75:d4:a7:89:c2:
         e3:bd:71:a4:ee:50:51:32:c9:6f:9b:30:2b:90:b6:bd:03:ef:
         b2:4a:8a:ab:05:9d:ad:9e:53:bc:6a:8e:85:96:76:e6:a8:4e:
         2a:5d:8e:74:a5:72:05:4e:fe:a2:54:70:0d:7a:62:43:65:e0:
         ed:96:b7:16:3a:b3:9d:1c:22:8c:1f:63:10:ec:de:1a:e9:cb:
         0f:01:8c:15:15:ba:d8:bb:e6:09:83:5b:06:34:5d:d7:66:3b:
         7e:ab:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org