Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38362e302f32332d3234203d3e203233363739.roa
File:                     3131302e3233322e38362e302f32332d3234203d3e203233363739.roa (raw, json)
Hash identifier:          T4ETNgDGeQGD3kJrrOPiMarDby9HBqLiwTId/oKirMY=
Subject key identifier:   60:BE:F8:68:B9:3E:06:04:23:37:2B:85:81:A2:53:DB:06:D7:F6:05
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       336D377C214BAB1C963D9F54867C1D4618683AF7
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38362e302f32332d3234203d3e203233363739.roa
Signing time:             Fri 08 Sep 2023 10:01:10 +0000
ROA not before:           Fri 08 Sep 2023 09:56:10 +0000
ROA not after:            Fri 06 Sep 2024 10:01:10 +0000
asID:                     23679
IP address blocks:        110.232.86.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6d:37:7c:21:4b:ab:1c:96:3d:9f:54:86:7c:1d:46:18:68:3a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Sep  8 09:56:10 2023 GMT
            Not After : Sep  6 10:01:10 2024 GMT
        Subject: CN=60BEF868B93E060423372B8581A253DB06D7F605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:ae:62:5c:78:1c:ab:8f:ca:1e:7e:2a:67:
                    5c:25:b8:55:af:07:45:c8:52:44:a6:66:9a:1d:00:
                    c4:e2:84:45:f0:66:5d:1c:3a:a2:f6:15:a1:3d:97:
                    4e:c3:20:17:58:65:5b:41:44:37:03:86:85:92:bf:
                    fb:a9:5a:6b:72:95:df:8e:99:77:e1:2e:16:b4:a7:
                    1f:8f:4f:56:2c:eb:8d:c3:79:dd:0b:a7:7c:26:79:
                    b5:dc:db:52:54:33:e4:f3:2f:2e:73:33:d2:76:99:
                    e0:ee:7b:62:0e:1f:80:9f:82:cc:30:dd:00:a2:ce:
                    ac:ba:89:b7:bb:f8:97:1c:fd:a1:e7:57:12:f8:88:
                    ab:4b:64:f6:63:cc:7b:22:98:4c:4d:ab:3d:46:0d:
                    2c:50:fc:32:5b:f3:d5:52:47:14:c8:72:56:9e:ee:
                    ca:34:d2:f3:e5:f3:57:a5:eb:26:c9:7e:66:36:b8:
                    b3:5c:85:cd:f2:d0:5d:66:ff:da:8c:19:df:68:d3:
                    40:4b:09:a5:d7:27:bb:75:74:0e:60:f9:14:26:0d:
                    9e:01:46:5b:94:8b:3d:85:96:6b:60:29:d2:3d:79:
                    b5:57:79:7b:dc:45:44:63:56:34:e9:b2:fa:b8:90:
                    eb:0c:7b:6d:f2:69:61:89:92:cf:6b:54:9f:05:cf:
                    f7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BE:F8:68:B9:3E:06:04:23:37:2B:85:81:A2:53:DB:06:D7:F6:05
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38362e302f32332d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:25:4a:ed:27:74:24:e4:e9:d2:f6:a6:68:6e:7f:c4:28:55:
         a6:bf:18:2a:63:a7:09:c5:44:4d:a3:af:c8:84:e2:a2:f8:91:
         42:54:c7:c4:b1:55:67:bb:8d:1c:f3:f3:66:7c:d7:50:26:ec:
         a7:a9:3a:c1:5c:55:10:ca:28:3a:1c:ff:d8:be:be:e3:e9:41:
         69:98:35:a2:73:2d:af:43:57:ca:88:65:31:9b:f5:d2:eb:8d:
         47:b2:0f:d2:37:13:ba:1f:dc:46:cc:85:36:42:d9:b9:1c:c9:
         e4:f7:83:b5:b1:99:0e:8d:60:1e:b9:66:92:b5:e9:ac:6e:f0:
         1b:6e:d1:63:b2:f9:71:59:10:87:66:e6:0e:74:ff:ee:5a:95:
         5f:f4:45:ed:e4:1f:af:9e:0e:8b:3b:b4:c0:a2:78:0b:de:20:
         df:75:82:75:22:55:d1:18:2e:ff:f6:d7:0f:ea:59:08:e1:64:
         ca:c3:7b:c0:75:2e:f1:85:46:1d:b6:bd:5f:27:e2:c9:76:63:
         45:f0:92:30:ea:bf:85:de:92:e3:c0:87:0f:31:f5:cb:74:6e:
         a3:30:84:a0:50:e9:e9:b7:54:fb:a8:69:bd:7a:f2:bc:fa:87:
         f5:26:3c:2e:af:f7:37:da:7c:5c:cc:60:34:f1:d2:34:75:84:
         7b:be:c6:ef
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUM203fCFLqxyWPZ9UhnwdRhhoOvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0
RkE2Njk4NDAeFw0yMzA5MDgwOTU2MTBaFw0yNDA5MDYxMDAxMTBaMDMxMTAvBgNV
BAMTKDYwQkVGODY4QjkzRTA2MDQyMzM3MkI4NTgxQTI1M0RCMDZEN0Y2MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Qa5iXHgcq4/KHn4qZ1wluFWv
B0XIUkSmZpodAMTihEXwZl0cOqL2FaE9l07DIBdYZVtBRDcDhoWSv/upWmtyld+O
mXfhLha0px+PT1Ys643Ded0Lp3wmebXc21JUM+TzLy5zM9J2meDue2IOH4Cfgsww
3QCizqy6ibe7+Jcc/aHnVxL4iKtLZPZjzHsimExNqz1GDSxQ/DJb89VSRxTIclae
7so00vPl81el6ybJfmY2uLNchc3y0F1m/9qMGd9o00BLCaXXJ7t1dA5g+RQmDZ4B
RluUiz2FlmtgKdI9ebVXeXvcRURjVjTpsvq4kOsMe23yaWGJks9rVJ8Fz/ePAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUYL74aLk+BgQjNyuFgaJT2wbX9gUwHwYDVR0j
BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF
OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2
Njk4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzODM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAW7oVjANBgkqhkiG
9w0BAQsFAAOCAQEAOyVK7Sd0JOTp0vamaG5/xChVpr8YKmOnCcVETaOvyITioviR
QlTHxLFVZ7uNHPPzZnzXUCbsp6k6wVxVEMooOhz/2L6+4+lBaZg1onMtr0NXyohl
MZv10uuNR7IP0jcTuh/cRsyFNkLZuRzJ5PeDtbGZDo1gHrlmkrXprG7wG27RY7L5
cVkQh2bmDnT/7lqVX/RF7eQfr54Oizu0wKJ4C94g33WCdSJV0Rgu//bXD+pZCOFk
ysN7wHUu8YVGHba9XyfiyXZjRfCSMOq/hd6S48CHDzH1y3RuozCEoFDp6bdU+6hp
vXryvPqH9SY8Lq/3N9p8XMxgNPHSNHWEe77G7w==
-----END CERTIFICATE-----
Generated at Fri May 3 12:58:05 2024 by rpki-client on console-ams.rpki-client.org