Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/34352e36342e3235322e302f32322d3234203d3e203435323934.roa
File:                     34352e36342e3235322e302f32322d3234203d3e203435323934.roa (raw, json)
Hash identifier:          j6P4xsf0fXPdRhsIO6r4r7ICTPC6AJQrGWPof9Fj7po=
Subject key identifier:   6F:94:C2:95:50:CB:88:38:E7:42:F8:49:EF:DD:59:EA:ED:56:8E:13
Certificate issuer:       /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
Certificate serial:       49778AEBBD17646358AE47D44A8B959233A311A6
Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/34352e36342e3235322e302f32322d3234203d3e203435323934.roa
Signing time:             Mon 02 Jun 2025 02:05:11 +0000
ROA not before:           Mon 02 Jun 2025 02:00:11 +0000
ROA not after:            Mon 01 Jun 2026 02:05:11 +0000
asID:                     45294
IP address blocks:        45.64.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl
                          rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 14:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:77:8a:eb:bd:17:64:63:58:ae:47:d4:4a:8b:95:92:33:a3:11:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
        Validity
            Not Before: Jun  2 02:00:11 2025 GMT
            Not After : Jun  1 02:05:11 2026 GMT
        Subject: CN=6F94C29550CB8838E742F849EFDD59EAED568E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:a5:72:84:9a:81:03:74:c3:01:0a:f0:ac:
                    45:4e:a9:29:08:b4:c9:3a:28:11:3f:ee:7d:ed:9c:
                    35:77:e7:ec:30:e0:f4:80:4e:60:b5:f1:49:02:74:
                    e9:16:4f:79:a0:e1:9d:c8:96:5e:6b:9e:41:e2:c6:
                    e0:d3:f7:90:9a:11:55:1f:e4:25:3f:29:81:11:8f:
                    96:2c:85:31:d0:fb:04:e0:34:01:70:d1:ee:60:9d:
                    c2:6a:d4:92:4a:7b:0e:9c:65:81:96:b9:b1:e4:b4:
                    77:66:b5:e0:2a:b4:df:aa:80:bd:9d:3e:92:93:c3:
                    36:8b:0f:40:2c:6b:a6:d2:27:ff:5e:f8:86:c2:33:
                    25:fb:0a:08:dd:90:47:41:0a:8a:25:a6:3c:42:b6:
                    dc:32:de:de:15:dd:32:de:67:6b:e9:7b:21:d9:cd:
                    4d:63:de:45:89:e4:c8:c2:53:6b:51:7a:b5:e8:55:
                    7d:60:6e:81:0b:17:b0:5d:31:d1:c3:da:9c:78:e4:
                    b0:38:11:aa:a9:0e:c2:4f:d4:33:b1:4b:a6:1a:7c:
                    19:de:23:d5:23:f2:0a:47:f6:84:0b:54:26:11:80:
                    86:2d:88:bb:0e:35:42:3f:32:ad:3f:7a:85:2a:96:
                    9e:a3:fa:40:38:0a:b1:95:3d:27:0d:89:85:32:4d:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:94:C2:95:50:CB:88:38:E7:42:F8:49:EF:DD:59:EA:ED:56:8E:13
            X509v3 Authority Key Identifier:
                keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/34352e36342e3235322e302f32322d3234203d3e203435323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:53:c8:7e:1a:b5:47:79:f4:6a:b8:5a:08:db:a4:24:ad:30:
         cd:79:7d:c1:2f:f2:6d:38:ad:d0:73:bb:85:55:02:a9:15:10:
         50:52:70:33:2d:94:fc:9d:7a:a7:dc:b5:5a:f8:24:26:bb:0b:
         54:66:7c:97:68:80:20:13:73:85:24:56:e5:2d:ec:33:29:2c:
         c1:c0:eb:88:1c:3d:c1:b2:ec:88:d5:c9:11:41:07:27:1f:81:
         61:50:1d:12:64:87:9b:56:c1:d4:77:13:0e:bb:e9:48:36:20:
         12:1e:ec:a9:61:fe:00:9f:f0:e3:ac:af:67:f6:8e:f1:7e:6e:
         72:6b:94:cd:28:11:2d:8b:94:c6:e8:3a:33:57:e2:e9:c8:5b:
         8f:cb:8a:b0:c1:f6:13:59:b8:4e:4f:b4:ac:b4:15:c1:e5:df:
         c3:99:13:47:7b:67:54:87:ec:42:a8:50:9e:9b:91:35:4f:8d:
         24:c0:96:a6:e8:d8:1e:44:05:f0:98:b4:ce:1a:ca:ef:83:22:
         56:66:9a:aa:96:f8:8a:f6:c2:6d:72:a3:dd:8f:f1:92:1f:e0:
         ef:77:66:99:bb:29:0d:56:aa:45:c6:9a:77:60:5f:79:03:f8:
         21:f2:08:b6:0f:3a:79:09:6b:fe:22:50:73:22:3a:60:9a:08:
         30:19:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:00:10 2025 by rpki-client