Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34392e302e302e302f32322d3234203d3e203535373031.roa
File:                     34392e302e302e302f32322d3234203d3e203535373031.roa (raw, json)
Hash identifier:          yzJFuCgJdtqHHRWns+YkV15nd/BuBUJW5VOi1zg7H6Q=
Subject key identifier:   48:EE:D6:F6:EC:3F:20:87:AB:0C:D4:D7:50:13:51:10:93:6E:3C:7D
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       22A2860FA88C255F420C8262259EDA5F127DB4EA
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34392e302e302e302f32322d3234203d3e203535373031.roa
Signing time:             Wed 16 Apr 2025 13:34:46 +0000
ROA not before:           Wed 16 Apr 2025 13:29:46 +0000
ROA not after:            Wed 15 Apr 2026 13:34:46 +0000
asID:                     55701
IP address blocks:        49.0.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a2:86:0f:a8:8c:25:5f:42:0c:82:62:25:9e:da:5f:12:7d:b4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: Apr 16 13:29:46 2025 GMT
            Not After : Apr 15 13:34:46 2026 GMT
        Subject: CN=48EED6F6EC3F2087AB0CD4D750135110936E3C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:9a:66:4e:ae:d3:b2:ef:fa:18:b6:ea:b5:
                    20:7f:75:ac:38:d3:b8:41:96:0f:df:73:0c:4e:93:
                    36:d5:3d:05:63:68:9a:90:30:b3:c5:5c:3d:9f:c7:
                    2e:01:fb:dc:38:77:7d:03:e0:0d:0d:7a:29:5f:f0:
                    34:4e:88:84:14:73:cd:15:32:7a:3c:5e:c8:04:e8:
                    66:23:b1:d6:4a:47:78:3f:76:0e:04:65:40:db:6b:
                    0c:9b:b5:8c:74:38:6a:2e:fd:c8:0f:18:6e:f2:de:
                    a5:3d:29:97:3c:1e:c1:64:28:03:e7:73:e3:e0:33:
                    32:67:57:0f:b6:a3:48:09:74:79:f5:a6:65:2b:b5:
                    d3:6f:88:8b:8d:2d:12:40:93:0c:4d:77:b7:98:f6:
                    91:f8:89:29:df:ff:c3:48:03:46:c1:98:9e:da:4a:
                    77:12:c2:2e:58:81:29:42:45:a8:90:88:01:0a:f4:
                    fe:15:97:e4:7c:f1:af:0b:93:23:84:5a:98:c2:88:
                    8b:5f:f6:55:02:60:29:96:12:31:ae:c1:54:42:8c:
                    c7:af:f2:21:81:63:d8:20:64:cb:02:a7:ce:fe:54:
                    95:7c:a4:0b:69:f3:7f:f1:b6:ce:49:85:b5:79:df:
                    65:e3:59:86:22:f7:7f:33:15:09:7f:76:15:ef:56:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:D6:F6:EC:3F:20:87:AB:0C:D4:D7:50:13:51:10:93:6E:3C:7D
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34392e302e302e302f32322d3234203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.0.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:05:cd:91:58:42:cf:1d:ea:71:ef:75:7a:0c:89:bb:88:0c:
         b1:d7:b1:40:b7:9b:42:54:5d:70:88:b6:47:0d:46:7f:2b:e3:
         69:a0:ad:ed:48:34:82:68:34:95:a0:b2:ff:78:dd:19:36:a5:
         b2:1a:40:39:cd:d8:98:78:db:5c:ae:b3:56:75:a8:b6:2f:39:
         93:d1:59:b5:fe:64:59:16:8c:a5:b7:19:1d:86:d2:2a:ae:28:
         c0:03:80:0b:07:83:ab:50:02:b1:1e:15:08:81:07:ef:77:df:
         2a:52:67:54:13:47:74:e1:6f:1a:73:82:32:4c:88:cb:f9:e2:
         83:db:c2:1c:7a:60:e4:82:ed:61:79:fc:aa:09:35:56:37:81:
         c1:97:9a:6c:b2:84:0e:95:af:35:86:c0:db:33:14:bc:48:a2:
         7b:4d:59:d7:c1:6a:fb:c3:f8:fb:f9:64:9c:4c:c8:ac:ec:6a:
         6b:17:0e:e8:f9:1c:df:56:ad:5a:c3:03:82:3c:f2:0b:d2:e8:
         f2:1d:d6:de:61:f1:cd:73:51:ee:44:e0:4e:7c:f5:21:e7:d6:
         84:d7:b9:94:bb:92:20:7e:03:3b:a6:14:c0:81:7a:d9:01:80:
         bf:3c:37:fc:30:b1:66:bf:38:15:95:d0:ec:5d:7f:3e:e5:8a:
         75:4e:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net