Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132312e302f32342d3234203d3e203338353133.roa
File:                     33362e33372e3132312e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          kVdgZTJL6asStVgCgQeWoPe+PVgtbnXCmwFaZHfH5BA=
Subject key identifier:   2E:67:35:21:D1:26:C2:51:50:CC:AF:41:FE:0D:CB:F5:1F:B5:74:63
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       7FB6CA8B3CF7BE74C96CC872A8C7DD14B1D7F8A7
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132312e302f32342d3234203d3e203338353133.roa
Signing time:             Wed 19 Mar 2025 05:00:00 +0000
ROA not before:           Wed 19 Mar 2025 04:55:00 +0000
ROA not after:            Wed 18 Mar 2026 05:00:00 +0000
asID:                     38513
IP address blocks:        36.37.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 08:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b6:ca:8b:3c:f7:be:74:c9:6c:c8:72:a8:c7:dd:14:b1:d7:f8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Mar 19 04:55:00 2025 GMT
            Not After : Mar 18 05:00:00 2026 GMT
        Subject: CN=2E673521D126C25150CCAF41FE0DCBF51FB57463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:f1:5a:cc:55:74:71:e7:fe:fa:d3:d8:5d:
                    ba:a1:35:5d:72:30:c8:26:96:cc:0b:d7:31:e5:6f:
                    c8:41:ca:71:3e:14:66:8b:54:5d:63:7a:7b:38:28:
                    f5:6b:cb:03:2c:f4:8c:3b:d6:68:ba:86:4f:6d:50:
                    8c:82:bc:c8:e2:32:6c:ef:49:c3:98:e8:09:6e:58:
                    8b:8c:91:3f:df:40:e4:08:e6:36:19:dd:e2:c9:8d:
                    4e:2f:5f:40:fc:e4:c0:54:72:01:d5:cb:69:30:ac:
                    c5:a7:5c:a4:0d:22:8d:2a:3f:3c:58:52:a8:9d:77:
                    da:27:55:ba:af:34:fc:e5:92:d4:98:fe:4f:43:a1:
                    bc:4a:03:79:70:96:b3:2c:6b:9f:cc:9d:d8:c2:02:
                    4b:5b:db:9a:8b:bb:e3:41:57:e7:df:db:97:6d:f4:
                    ba:07:c3:9d:e8:c9:ec:5c:39:2e:36:75:64:40:4f:
                    64:88:c9:66:96:8f:da:da:6d:a5:dd:7b:67:d6:5d:
                    06:de:a9:f1:bb:8b:a9:1a:60:a7:29:39:6a:77:25:
                    62:60:8b:34:0c:c4:c0:bd:af:93:f2:92:11:1b:7f:
                    06:09:80:d0:72:66:53:d7:4a:e8:42:2d:c0:b5:3d:
                    ff:9f:5e:34:58:39:31:45:6a:0e:72:bd:6b:3e:4c:
                    d8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:67:35:21:D1:26:C2:51:50:CC:AF:41:FE:0D:CB:F5:1F:B5:74:63
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/33362e33372e3132312e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.37.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:bb:f7:14:cf:a7:c7:b5:7e:76:5d:fb:50:d9:e9:2a:56:23:
         54:e7:35:59:e3:f3:05:f5:15:85:1e:06:2e:a6:ca:78:2b:76:
         be:c0:4f:47:25:b7:4c:45:09:f4:25:29:f3:ca:23:cc:07:5a:
         4c:2c:f8:08:8e:75:74:60:1f:8e:42:2f:21:aa:85:f4:d7:38:
         18:12:c8:0a:a7:ff:7b:30:90:8b:ef:67:3f:f8:bb:99:ec:fa:
         26:99:cf:27:ec:fd:b4:41:fe:4e:40:d5:5b:50:72:b6:ad:d6:
         bb:b6:52:80:69:1c:98:52:ef:e4:47:1c:9e:d2:67:e6:63:64:
         64:9d:88:0d:9a:a6:f5:37:91:62:80:e2:1f:c7:a7:d3:e8:db:
         55:db:35:85:64:26:4b:dd:ef:3d:2e:e5:21:55:5d:9f:c2:dd:
         8a:cf:97:34:0f:ff:29:11:55:80:6f:40:28:bd:17:a1:bc:f8:
         5b:31:0d:c8:60:c6:37:c9:23:ee:99:60:c8:3f:46:7e:b0:27:
         e0:b0:ed:4e:d3:8d:62:bd:ca:99:05:93:3c:19:5a:5e:3a:35:
         01:d0:9a:e7:b5:47:be:93:12:33:ca:7f:35:03:9f:7c:e3:9d:
         12:58:d0:75:d8:93:74:a1:f2:c6:28:53:55:2a:ee:7e:7f:40:
         98:e5:ac:7a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUf7bKizz3vnTJbMhyqMfdFLHX+KcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yNTAzMTkwNDU1MDBaFw0yNjAzMTgwNTAwMDBaMDMxMTAvBgNV
BAMTKDJFNjczNTIxRDEyNkMyNTE1MENDQUY0MUZFMERDQkY1MUZCNTc0NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4fFazFV0cef++tPYXbqhNV1y
MMgmlswL1zHlb8hBynE+FGaLVF1jens4KPVrywMs9Iw71mi6hk9tUIyCvMjiMmzv
ScOY6AluWIuMkT/fQOQI5jYZ3eLJjU4vX0D85MBUcgHVy2kwrMWnXKQNIo0qPzxY
Uqidd9onVbqvNPzlktSY/k9DobxKA3lwlrMsa5/MndjCAktb25qLu+NBV+ff25dt
9LoHw53oyexcOS42dWRAT2SIyWaWj9rabaXde2fWXQbeqfG7i6kaYKcpOWp3JWJg
izQMxMC9r5PykhEbfwYJgNByZlPXSuhCLcC1Pf+fXjRYOTFFag5yvWs+TNj7AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQULmc1IdEmwlFQzK9B/g3L9R+1dGMwHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMzMzYyZTMzMzcyZTMxMzIzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAkJXkwDQYJKoZIhvcN
AQELBQADggEBACS79xTPp8e1fnZd+1DZ6SpWI1TnNVnj8wX1FYUeBi6myngrdr7A
T0clt0xFCfQlKfPKI8wHWkws+AiOdXRgH45CLyGqhfTXOBgSyAqn/3swkIvvZz/4
u5ns+iaZzyfs/bRB/k5A1VtQcrat1ru2UoBpHJhS7+RHHJ7SZ+ZjZGSdiA2apvU3
kWKA4h/Hp9Po21XbNYVkJkvd7z0u5SFVXZ/C3YrPlzQP/ykRVYBvQCi9F6G8+Fsx
DchgxjfJI+6ZYMg/Rn6wJ+Cw7U7TjWK9ypkFkzwZWl46NQHQmue1R76TEjPKfzUD
n3zjnRJY0HXYk3Sh8sYoU1Uq7n5/QJjlrHo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:31 2025 by rpki-client on console.sobornost.net