Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37312e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e37312e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          WSbOZtmPd2TMn17P0+gYzTO7AVlukfrjlLn6y2CJBTQ=
Subject key identifier:   9E:8B:37:B6:3B:94:1C:A4:9B:7F:BD:8B:66:F1:24:91:B2:66:D6:DF
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       7F5CB82F4E10C118F87AAAF9123381C0558F9089
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37312e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 08 Sep 2023 10:01:11 +0000
ROA not before:           Fri 08 Sep 2023 09:56:11 +0000
ROA not after:            Fri 06 Sep 2024 10:01:11 +0000
asID:                     23679
IP address blocks:        110.232.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5c:b8:2f:4e:10:c1:18:f8:7a:aa:f9:12:33:81:c0:55:8f:90:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Sep  8 09:56:11 2023 GMT
            Not After : Sep  6 10:01:11 2024 GMT
        Subject: CN=9E8B37B63B941CA49B7FBD8B66F12491B266D6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b5:2d:de:a1:b2:b3:87:e3:be:2e:cb:19:30:
                    ce:b7:86:78:c3:8a:31:82:13:11:89:b3:5b:18:48:
                    7c:76:24:05:a0:5e:8a:03:1d:e9:ba:7c:85:52:71:
                    44:e3:51:cb:1a:4f:31:84:9d:b9:e7:c5:46:f5:7d:
                    40:eb:8c:9f:54:3b:08:8c:9f:3d:40:a2:0d:b4:d0:
                    32:91:7a:f1:0b:09:3a:ab:05:59:8e:72:a5:cf:8e:
                    9e:61:1b:d8:d5:e1:56:c5:8c:19:f4:66:b7:2f:7e:
                    b1:84:78:ea:57:84:ba:fc:3f:1c:fe:01:00:b4:99:
                    58:c6:9f:5f:6e:68:5d:6e:5f:a0:d4:1d:db:21:cd:
                    53:18:96:d4:5c:3f:c8:5a:33:00:6a:8b:dc:f9:fe:
                    7e:d7:24:e0:fa:61:fc:33:d3:0f:5c:0d:18:4b:5e:
                    09:94:2a:d5:d5:17:72:33:f3:6a:1e:7f:70:4b:cc:
                    87:be:34:0e:9f:60:34:d3:77:82:fe:b9:b7:69:d3:
                    c9:7f:b1:28:8c:4c:52:78:a4:69:98:06:06:86:63:
                    47:26:36:b1:c9:fb:2f:ad:04:8a:92:85:46:ae:9c:
                    c5:c8:b2:ae:56:7b:ec:38:b1:bd:91:87:12:4b:6b:
                    16:f3:af:1a:58:af:2d:fc:31:a4:06:65:08:66:03:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8B:37:B6:3B:94:1C:A4:9B:7F:BD:8B:66:F1:24:91:B2:66:D6:DF
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37312e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:1a:c3:08:2d:2d:5a:af:87:dd:03:ec:56:6a:13:cc:9e:63:
         46:fe:f2:85:b2:16:da:1d:ce:e9:f7:77:f1:f0:46:e6:7a:38:
         1a:54:a3:22:6a:f8:04:ba:3e:08:ca:12:a8:d1:ff:91:20:ce:
         6b:e6:5c:61:f2:35:e8:c8:98:37:2d:c6:04:9a:c9:a5:c5:80:
         55:21:ef:09:85:97:44:f2:e1:46:59:20:9f:f5:72:c9:05:a5:
         ed:c0:57:d2:61:85:5b:b8:be:27:5d:94:cb:de:3d:7d:1d:39:
         6e:66:e0:8b:2f:75:96:68:80:c1:7a:7e:b5:30:5d:99:de:46:
         ae:22:f0:e0:cb:2b:57:0b:77:66:3c:a0:fc:69:91:97:03:51:
         f9:0c:75:8e:47:bf:a5:00:fe:18:d2:31:81:b7:12:81:0d:6b:
         fa:bc:9f:44:d8:64:15:8b:e0:bb:ce:03:6a:3f:62:b0:d2:8c:
         1e:d5:45:3c:85:c1:b3:f6:54:c6:47:02:e8:ae:ce:3f:b7:a2:
         77:c0:16:ee:38:a3:67:77:a2:4a:31:f2:4d:32:55:df:23:91:
         72:83:a0:c9:98:64:16:ee:f6:fd:3b:dc:8d:ea:92:44:a8:a0:
         4b:05:5d:04:38:f5:6b:63:23:1b:d7:b6:39:f0:5d:5e:04:9c:
         f4:6e:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:16 2024 by rpki-client on console-fra.rpki-client.org