Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37392e302f32342d3234203d3e20313338383431.roa
File:                     3131302e3233322e37392e302f32342d3234203d3e20313338383431.roa (raw, json)
Hash identifier:          1h1EgdnhIhj7nVrDpp/RZkFNNzSm/X50kZaQVpWMvWc=
Subject key identifier:   94:94:50:6E:91:90:1B:3D:0C:1B:9E:28:61:C6:A7:EF:3D:AF:53:4A
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       5B2063048D3BF030EA9DBC56EAA82121D8D38A27
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37392e302f32342d3234203d3e20313338383431.roa
Signing time:             Fri 22 Sep 2023 05:01:48 +0000
ROA not before:           Fri 22 Sep 2023 04:56:48 +0000
ROA not after:            Fri 20 Sep 2024 05:01:48 +0000
asID:                     138841
IP address blocks:        110.232.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:20:63:04:8d:3b:f0:30:ea:9d:bc:56:ea:a8:21:21:d8:d3:8a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Sep 22 04:56:48 2023 GMT
            Not After : Sep 20 05:01:48 2024 GMT
        Subject: CN=9494506E91901B3D0C1B9E2861C6A7EF3DAF534A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:d5:d6:ae:37:aa:29:a2:30:60:eb:73:29:
                    5e:c6:a6:85:81:45:8c:33:b5:55:0e:d4:7c:d1:91:
                    af:2e:1a:34:b0:02:b6:39:f0:95:0d:5f:1b:35:50:
                    6d:4a:03:82:39:18:b5:13:b2:e1:84:e0:dc:95:71:
                    25:b7:3c:13:6f:07:37:4e:12:56:0c:60:55:c6:97:
                    58:cd:c6:0e:12:40:27:fb:34:2f:1b:b2:7a:61:dd:
                    2f:2e:cc:d0:d3:43:ce:ae:1d:fa:af:c8:17:6e:e2:
                    fd:33:b8:b6:54:21:2c:44:f0:0a:d9:ac:ce:29:33:
                    47:f2:3b:15:36:97:1c:e3:3b:e4:5b:25:8b:2e:a9:
                    b4:14:ef:b1:0d:54:e4:81:9f:09:e6:a2:90:69:59:
                    9d:20:49:e2:0b:a4:81:7f:a8:46:58:87:39:27:d4:
                    b6:d6:e9:65:c9:b8:59:26:7b:51:f3:c4:13:e1:47:
                    43:2c:4e:2b:45:93:5a:5f:98:52:49:1b:40:bd:d3:
                    f2:d8:0c:6e:b0:b2:3f:5c:d0:e8:74:a3:1d:8a:00:
                    11:1d:8e:b9:24:8f:b1:95:89:fa:c1:de:ad:27:85:
                    99:14:df:7c:cb:20:78:48:37:62:36:5e:45:5f:f9:
                    2f:b2:2b:d6:ad:20:c6:e0:1f:bd:6c:89:5b:0d:68:
                    9a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:94:50:6E:91:90:1B:3D:0C:1B:9E:28:61:C6:A7:EF:3D:AF:53:4A
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37392e302f32342d3234203d3e20313338383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:8a:5f:c3:b2:27:71:14:3a:9a:98:09:55:5b:1f:c1:9c:87:
         32:38:c7:3b:40:ce:82:73:02:ed:79:98:a6:11:c6:d4:a0:93:
         4e:98:6a:78:c1:ce:24:d4:82:59:70:46:01:e2:24:fc:05:fa:
         bd:e5:e7:f3:47:7e:7e:ee:d1:32:b5:1b:55:12:22:69:22:c2:
         d1:b5:da:25:8a:ed:4b:0b:ae:53:ce:ef:aa:09:34:60:69:dc:
         f8:64:4a:29:0e:0f:14:b3:76:a4:a3:35:d3:0b:a4:5e:b1:8f:
         e6:70:de:cb:fa:2f:ed:44:7e:ff:fe:9b:54:45:f3:0c:61:a2:
         95:0d:8d:99:35:46:06:71:db:0a:d8:66:3c:80:c6:00:76:ac:
         24:6b:9b:4a:14:70:ff:c0:4e:9e:a6:80:c3:96:d0:71:ea:e4:
         be:a2:61:16:e5:2a:6b:b4:dd:24:b8:92:4b:0e:e2:d7:a4:3b:
         52:8f:13:75:6b:83:3a:11:10:8c:a7:03:ef:09:fd:ab:7a:4e:
         1c:e3:77:84:53:83:bf:4c:99:10:e1:99:e5:33:29:d2:5f:aa:
         90:6a:17:0b:e9:46:8f:9b:ba:19:dc:24:2d:07:9f:11:ef:43:
         9a:39:d4:01:23:c7:5f:5e:9b:f8:98:9b:94:66:b5:74:da:d7:
         bc:4b:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:58:05 2024 by rpki-client on console-ams.rpki-client.org