Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37332e302f32342d3234203d3e20313338383431.roa
File:                     3131302e3233322e37332e302f32342d3234203d3e20313338383431.roa (raw, json)
Hash identifier:          sQp/X75djwG1FiISCw+Y4Bf5dePar2arTIr9q4dJUTc=
Subject key identifier:   E6:4D:87:04:0E:01:51:2B:81:78:93:41:55:3B:8F:91:61:00:9F:C5
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       0B7A431743A44C287A02D14958C92AD94CF6A8AE
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37332e302f32342d3234203d3e20313338383431.roa
Signing time:             Fri 22 Sep 2023 05:01:48 +0000
ROA not before:           Fri 22 Sep 2023 04:56:48 +0000
ROA not after:            Fri 20 Sep 2024 05:01:48 +0000
asID:                     138841
IP address blocks:        110.232.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7a:43:17:43:a4:4c:28:7a:02:d1:49:58:c9:2a:d9:4c:f6:a8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Sep 22 04:56:48 2023 GMT
            Not After : Sep 20 05:01:48 2024 GMT
        Subject: CN=E64D87040E01512B81789341553B8F9161009FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e4:48:34:58:39:96:d3:b6:e3:04:1c:f7:d7:
                    31:64:ff:ed:67:76:1a:81:82:60:aa:e9:57:06:e2:
                    88:50:ce:74:fd:f6:f9:a3:e1:af:a3:d5:13:73:be:
                    d1:a3:08:3a:73:77:8e:1a:37:7a:c8:61:1f:fa:c3:
                    03:19:8d:2f:68:49:bd:cb:32:5d:c0:65:fa:20:a6:
                    7a:6d:cb:a7:2c:c5:d6:d8:d4:51:8e:fa:0e:44:35:
                    ef:e8:67:db:5e:07:1d:d9:23:17:64:40:d2:0e:2b:
                    4a:08:f9:ea:e6:7f:54:3a:ce:75:6e:b2:4a:ea:21:
                    74:93:95:3e:ca:bd:2f:62:89:43:1f:92:bb:e9:2e:
                    fa:25:49:8d:ec:66:61:cd:f0:b5:cb:b9:d4:5e:1c:
                    e8:dc:77:71:13:c4:8d:c4:82:4a:2a:16:74:b2:e7:
                    e1:61:34:b7:ea:73:f2:ed:1e:95:6d:51:19:e8:c0:
                    61:e9:59:e4:7e:f5:28:1c:53:4a:a6:90:84:c6:41:
                    27:33:e2:69:b3:bd:e4:15:36:b3:8e:8b:ac:04:17:
                    ab:e1:6d:dd:6f:e5:0b:99:8d:54:11:a8:a3:4a:a3:
                    2f:cf:50:eb:1d:2f:7b:86:ef:ab:1e:a6:68:53:de:
                    ec:0f:f0:3d:04:d9:93:ff:f8:b3:c1:bb:ce:af:4f:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4D:87:04:0E:01:51:2B:81:78:93:41:55:3B:8F:91:61:00:9F:C5
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37332e302f32342d3234203d3e20313338383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:86:3c:41:3b:89:9a:c5:c5:20:82:3d:58:c8:b9:2d:a9:32:
         b5:5f:a6:bc:b0:1a:39:39:8c:5e:42:25:73:b9:ae:86:da:0d:
         bc:cf:ac:a7:4a:59:d5:d4:00:a9:4e:2f:9b:5e:95:89:82:2d:
         19:23:d0:81:f6:2b:57:b2:74:95:12:ee:81:db:91:35:d2:7e:
         a6:4c:3b:55:22:d0:87:56:ee:2c:05:51:9d:8e:3e:5c:79:c5:
         e5:6e:d6:c6:90:0c:a0:74:a6:21:5f:78:7d:e9:e6:59:93:c5:
         e7:c0:59:3f:9d:75:88:d5:0b:c2:88:e9:f5:85:ee:9a:cc:dd:
         db:a4:7b:4d:29:15:63:0d:f5:08:aa:b8:e7:f0:93:30:6f:c1:
         49:4b:3f:d3:a5:88:3b:50:66:fc:4a:98:73:0e:95:9c:30:cf:
         d8:dc:7e:e1:e5:db:43:a7:aa:9b:35:53:f9:63:28:b1:47:01:
         7e:04:d4:e5:15:42:af:60:92:e3:18:8e:f1:27:55:e9:df:f0:
         34:d8:c5:32:5d:c1:68:f6:5a:e6:fb:ed:87:fb:51:80:9d:f4:
         2d:4d:f2:76:f5:53:30:12:c6:90:28:44:27:2e:2d:99:85:fa:
         93:bc:b6:bb:e1:8c:ef:38:93:f9:34:1e:29:35:b1:13:99:4c:
         b0:29:7f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:58:05 2024 by rpki-client on console-ams.rpki-client.org