Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e36372e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          02JfINrKYqWPkCwT3islOm3yDrxlIoJsqia+db/3qf8=
Subject key identifier:   C8:E8:9D:B2:61:6C:70:F1:09:4A:8C:79:EC:40:9E:1C:30:47:F9:BC
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       6440A01BBA91C3484F357386786B52E4085CD2FA
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 08 Sep 2023 10:01:10 +0000
ROA not before:           Fri 08 Sep 2023 09:56:10 +0000
ROA not after:            Fri 06 Sep 2024 10:01:10 +0000
asID:                     23679
IP address blocks:        110.232.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:40:a0:1b:ba:91:c3:48:4f:35:73:86:78:6b:52:e4:08:5c:d2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Sep  8 09:56:10 2023 GMT
            Not After : Sep  6 10:01:10 2024 GMT
        Subject: CN=C8E89DB2616C70F1094A8C79EC409E1C3047F9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:ec:66:d0:a3:d1:30:9b:45:ab:c8:1b:89:
                    c2:68:a4:42:73:44:e4:72:7b:fa:29:97:43:16:d4:
                    f3:12:a4:f8:fd:e9:2a:46:e3:9f:12:23:9f:e0:c3:
                    05:d4:94:ca:82:5c:63:29:0b:c3:f2:49:47:62:46:
                    15:89:68:b4:b6:77:60:36:cf:cb:4c:d7:b0:66:5b:
                    fc:38:2d:f4:db:70:58:ac:bd:6b:6c:50:e5:1d:72:
                    83:60:1d:53:ff:33:f5:c7:7c:17:29:e8:d5:ce:4b:
                    4e:d4:f6:2a:35:3c:71:df:b0:1d:0a:74:b3:44:c7:
                    63:d0:8c:de:4f:0d:19:09:bd:5b:b4:ea:04:3d:4b:
                    45:d6:2a:a5:c3:2a:ff:70:c1:b0:4c:3f:24:ba:8d:
                    d1:39:97:18:a5:41:43:92:d5:d3:d1:b4:bc:ff:45:
                    0e:ea:b9:7f:a2:26:97:3e:3e:9c:85:ec:54:84:ad:
                    67:e1:da:f5:cd:08:56:09:85:b7:46:80:7d:50:16:
                    d9:5e:14:2f:98:0c:8b:c4:36:31:fb:44:e5:96:6b:
                    55:be:aa:e6:41:6c:75:96:11:6c:2c:ce:fd:ee:99:
                    d9:41:ec:48:93:e4:60:1e:f2:b7:89:3c:85:38:9b:
                    aa:10:5e:57:2f:51:58:f0:1c:20:1c:84:59:5e:1b:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E8:9D:B2:61:6C:70:F1:09:4A:8C:79:EC:40:9E:1C:30:47:F9:BC
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:15:dd:81:10:05:ed:fd:53:0e:ac:b6:d3:b2:85:e1:31:e9:
         b3:53:2a:5a:8d:ac:1a:d5:b2:56:22:38:7c:73:86:44:70:22:
         fe:a1:e2:d1:8d:f2:b6:46:70:a0:fd:0a:8a:47:d1:65:e8:bf:
         b0:3f:66:ec:42:76:2c:3c:9b:9f:74:6a:85:4f:b3:0c:35:41:
         60:f6:25:e7:a9:26:c4:76:40:e2:aa:2c:92:e2:88:1e:2b:fb:
         4d:a8:da:28:77:5b:49:03:25:c8:5c:77:d9:88:f1:17:2e:9d:
         bc:7c:78:34:e3:cf:2f:b9:56:2f:17:28:0b:1e:7c:2a:a5:93:
         15:25:26:04:48:cf:45:dd:a5:4e:49:24:ec:f9:2c:b5:7a:c0:
         29:96:be:9a:0e:ac:0d:32:c8:72:60:09:df:80:0a:94:9e:1c:
         70:2c:bf:8c:15:f8:37:ee:3a:64:44:03:55:8c:01:f5:d6:7e:
         54:82:ca:3b:cf:1b:db:fb:53:50:88:66:63:f7:57:28:47:16:
         b6:19:8b:da:40:92:cc:ed:7f:35:92:9a:05:74:04:d9:97:89:
         99:10:ca:53:5f:f6:d8:3c:b7:be:f6:73:97:46:46:4e:e6:88:
         ed:f6:9d:cd:9c:fd:3c:36:b6:ab:f4:6a:29:dc:6d:fe:11:2a:
         49:9d:0d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:58:05 2024 by rpki-client on console-ams.rpki-client.org