Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32342d3234203d3e20313437313238.roa
File:                     33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (raw, json)
Hash identifier:          knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=
Subject key identifier:   18:4D:F6:41:43:13:7A:A9:BB:81:92:C3:2C:63:E5:68:51:5A:FE:2D
Certificate issuer:       /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E
Certificate serial:       6074BE6D2D03F56A64BBB1A79D8F25B57C444235
Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32342d3234203d3e20313437313238.roa
Signing time:             Sat 12 Apr 2025 13:00:01 +0000
ROA not before:           Sat 12 Apr 2025 12:55:01 +0000
ROA not after:            Sat 11 Apr 2026 13:00:01 +0000
asID:                     147128
IP address blocks:        36.50.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl
                          rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 07:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:74:be:6d:2d:03:f5:6a:64:bb:b1:a7:9d:8f:25:b5:7c:44:42:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E
        Validity
            Not Before: Apr 12 12:55:01 2025 GMT
            Not After : Apr 11 13:00:01 2026 GMT
        Subject: CN=184DF64143137AA9BB8192C32C63E568515AFE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:8c:68:13:bb:b3:70:81:e2:11:96:a0:d5:
                    c2:1b:dd:af:7c:4c:2d:a1:87:43:19:20:99:8c:bd:
                    e0:9c:00:99:53:82:b1:40:3c:4e:b1:a5:d3:b7:ef:
                    94:5b:e1:ff:40:f8:d3:7b:46:02:f4:2c:e2:5d:e9:
                    0f:4d:4d:50:63:f7:97:63:d9:f8:83:0f:97:08:03:
                    ff:4d:fd:d0:41:04:b0:5d:4d:7b:36:b7:21:ef:04:
                    90:b4:c9:9f:68:54:4a:14:70:af:b6:35:c4:bb:aa:
                    51:87:44:83:f0:6c:18:ec:fc:2a:2b:91:61:95:49:
                    75:d1:f5:9c:75:0e:db:97:33:fa:c9:23:dc:ad:6f:
                    fd:08:90:c1:6c:48:cc:bd:cd:55:d3:c1:cf:55:d1:
                    a8:83:f5:97:b0:0b:c4:c8:f3:83:a8:f6:ea:9c:d8:
                    e4:15:76:87:8c:75:b9:5d:41:ad:36:e0:d8:8f:26:
                    49:72:e8:a3:ec:4a:96:1d:74:96:cf:93:38:41:46:
                    49:b2:27:9b:f7:3d:30:11:15:c2:fe:11:85:5a:bd:
                    df:60:c1:ae:10:68:3d:a6:72:2d:17:f7:22:c8:d6:
                    06:da:92:db:df:e7:9f:09:a7:6d:3a:38:26:1d:75:
                    bb:05:35:d8:ff:b1:17:cb:0f:73:d2:3e:00:ec:61:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4D:F6:41:43:13:7A:A9:BB:81:92:C3:2C:63:E5:68:51:5A:FE:2D
            X509v3 Authority Key Identifier:
                keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/33362e35302e3231362e302f32342d3234203d3e20313437313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:dd:b3:5b:20:6d:c5:b9:9d:a1:88:b2:75:e1:4d:9c:64:aa:
         7e:05:5b:e6:dc:26:54:2c:d7:10:87:8f:5d:2e:1a:c2:32:1c:
         ca:86:fc:18:17:77:df:4e:0c:88:90:0b:0f:da:04:a0:2d:71:
         6c:f9:80:56:b0:88:13:35:3b:34:82:e7:7d:96:7d:8d:aa:87:
         83:82:08:f4:72:76:a6:19:bd:01:f1:fa:ed:93:6a:5f:b8:3c:
         7e:bb:36:30:f0:a6:f4:9d:77:60:3a:d8:5f:cd:7f:3c:53:62:
         be:54:9f:69:c3:f6:2a:8a:d2:fa:7d:8d:bc:bf:7a:e9:04:b7:
         ec:92:72:b4:b3:05:c4:9b:8f:18:7e:47:a4:99:00:1c:41:4a:
         08:a6:c3:56:4f:85:fd:a1:6c:ce:1b:6c:12:13:07:9b:90:df:
         a6:d1:b3:a0:e5:18:cf:c0:0e:4b:6d:02:4d:62:d3:3b:95:52:
         c8:92:5c:81:37:22:f9:fc:cb:a6:68:e4:c3:74:98:c3:43:b2:
         b7:a6:7b:58:69:e4:05:fa:b3:a1:9a:12:40:35:78:81:b0:13:
         5c:72:83:fc:f8:b8:8f:2c:40:54:78:49:22:a9:15:9d:8b:eb:
         5a:d3:d5:c3:8b:2c:20:2d:2c:df:7c:dc:0d:30:2a:91:0b:60:
         93:dd:b3:f3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYHS+bS0D9Wpku7GnnY8ltXxEQjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3
QTk4MDk5RTAeFw0yNTA0MTIxMjU1MDFaFw0yNjA0MTExMzAwMDFaMDMxMTAvBgNV
BAMTKDE4NERGNjQxNDMxMzdBQTlCQjgxOTJDMzJDNjNFNTY4NTE1QUZFMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk64xoE7uzcIHiEZag1cIb3a98
TC2hh0MZIJmMveCcAJlTgrFAPE6xpdO375Rb4f9A+NN7RgL0LOJd6Q9NTVBj95dj
2fiDD5cIA/9N/dBBBLBdTXs2tyHvBJC0yZ9oVEoUcK+2NcS7qlGHRIPwbBjs/Cor
kWGVSXXR9Zx1DtuXM/rJI9ytb/0IkMFsSMy9zVXTwc9V0aiD9ZewC8TI84Oo9uqc
2OQVdoeMdbldQa024NiPJkly6KPsSpYddJbPkzhBRkmyJ5v3PTARFcL+EYVavd9g
wa4QaD2mci0X9yLI1gbaktvf558Jp206OCYddbsFNdj/sRfLD3PSPgDsYTpTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUGE32QUMTeqm7gZLDLGPlaFFa/i0wHwYDVR0j
BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE
NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4
MDk5RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1OTg5ZmFmLTQ4ZmItNGY0MC05
ZTc3LTI0M2Q3OGE1YjVjNC8wLzMzMzYyZTM1MzAyZTMyMzEzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzNzMxMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACQy2DANBgkqhkiG
9w0BAQsFAAOCAQEAD92zWyBtxbmdoYiydeFNnGSqfgVb5twmVCzXEIePXS4awjIc
yob8GBd3304MiJALD9oEoC1xbPmAVrCIEzU7NILnfZZ9jaqHg4II9HJ2phm9AfH6
7ZNqX7g8frs2MPCm9J13YDrYX81/PFNivlSfacP2KorS+n2NvL966QS37JJytLMF
xJuPGH5HpJkAHEFKCKbDVk+F/aFszhtsEhMHm5DfptGzoOUYz8AOS20CTWLTO5VS
yJJcgTci+fzLpmjkw3SYw0Oyt6Z7WGnkBfqzoZoSQDV4gbATXHKD/Pi4jyxAVHhJ
IqkVnYvrWtPVw4ssIC0s33zcDTAqkQtgk92z8w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net