Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36342e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e36342e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          1hVVu9NRZpi2I/K+Pf7sge3fPveE6Wa6J25u40dg0Rs=
Subject key identifier:   4F:55:63:D6:AE:5D:02:4A:A3:C4:89:AC:21:4E:30:80:65:6E:45:7F
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       2E589B27B9E614A8F02D109C28004274A5673526
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36342e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 08 Sep 2023 10:01:12 +0000
ROA not before:           Fri 08 Sep 2023 09:56:12 +0000
ROA not after:            Fri 06 Sep 2024 10:01:12 +0000
asID:                     23679
IP address blocks:        110.232.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:58:9b:27:b9:e6:14:a8:f0:2d:10:9c:28:00:42:74:a5:67:35:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Sep  8 09:56:12 2023 GMT
            Not After : Sep  6 10:01:12 2024 GMT
        Subject: CN=4F5563D6AE5D024AA3C489AC214E3080656E457F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:a7:65:ab:99:76:5a:ad:ac:dd:42:69:cb:
                    d0:09:86:17:80:e8:11:d4:20:2f:bf:13:8f:6c:61:
                    19:8b:a1:da:de:b1:53:13:f9:c2:1f:4c:d0:bd:4d:
                    d1:b0:96:a4:4d:8b:65:31:0c:fb:d6:97:fa:aa:f4:
                    a8:9c:be:bc:d7:e8:87:5d:54:cb:18:09:f7:25:f4:
                    90:c7:b1:2b:e7:2a:b6:b1:6c:05:ea:c2:9c:9b:4c:
                    8a:f0:b8:78:ff:ae:5a:c8:18:95:36:04:75:98:99:
                    b6:b4:d0:44:ac:8a:a5:c6:cb:33:7a:7d:fa:fe:d7:
                    52:9d:43:9f:8f:07:c4:0b:e0:87:2c:c2:0f:58:45:
                    45:0f:95:00:8b:c1:5a:de:a2:d5:03:ac:fc:aa:b2:
                    07:70:8c:08:90:b6:3b:e8:db:5f:e2:2f:b7:bf:02:
                    92:36:4b:4f:3c:8a:e8:80:8f:71:74:62:78:f5:a9:
                    69:c5:87:a8:cf:07:09:32:80:69:73:19:c6:10:0b:
                    29:9e:c7:65:86:7f:97:be:c3:a7:c2:13:de:19:d3:
                    4e:9c:97:d5:4e:3c:21:3a:51:52:c9:41:95:e2:c5:
                    b3:69:7a:26:ca:9f:f8:67:df:64:79:f1:c5:d6:b6:
                    eb:0a:97:e1:fe:b8:b9:4f:5e:be:bc:f6:c9:58:72:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:55:63:D6:AE:5D:02:4A:A3:C4:89:AC:21:4E:30:80:65:6E:45:7F
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36342e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:5f:66:ef:b3:c0:8e:04:df:ff:69:7f:66:d6:92:53:c1:52:
         0b:4f:6f:fb:03:6e:05:16:8c:91:4a:bd:cb:53:24:a6:b0:41:
         b6:31:ba:f7:79:24:ce:8c:91:07:6d:1a:52:aa:72:b1:33:4f:
         58:a8:34:36:0d:29:f9:9f:48:2f:1b:1f:fa:03:bd:4e:74:00:
         95:9b:88:48:1f:2f:91:15:26:b1:56:49:ae:83:c3:bd:93:a2:
         47:0d:3c:21:c2:28:0b:1d:64:e9:09:e5:a4:b9:00:90:11:61:
         1f:1c:1e:df:69:a6:74:60:93:55:85:a0:1b:6e:0b:8f:c1:34:
         33:0d:fb:40:c9:47:ee:fd:6b:9f:81:00:26:a9:50:11:7d:36:
         fa:68:1a:90:22:f6:54:ac:66:86:3c:92:bf:cf:84:a1:ab:31:
         d1:ed:33:b4:a8:d0:5c:4f:51:ee:9a:4d:ac:72:a6:d5:7a:f9:
         9a:bd:b5:80:f5:84:20:f5:cc:13:9a:09:97:a1:87:af:f9:06:
         eb:87:ce:50:67:71:ed:c6:6e:ab:68:ee:28:65:f5:5e:d9:54:
         31:f2:11:3d:60:1b:93:c8:4b:dc:44:38:d1:ed:f0:d8:17:b1:
         61:b5:ea:de:9a:0b:0c:bc:a1:6e:c1:fe:02:b7:d9:05:70:13:
         e2:f3:de:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:16 2024 by rpki-client on console-fra.rpki-client.org