Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e39302e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          bdHgvS9osPco5a38dWg/J4ZPVPkTr9lpNxDLBRhzEaU=
Subject key identifier:   6D:C1:98:3B:B9:12:D7:15:9A:B9:BE:83:93:4F:B4:30:81:ED:AD:F4
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       79C8677D8E624BC3BD6646504FA7F6E5C6B2F281
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 08 Sep 2023 10:01:11 +0000
ROA not before:           Fri 08 Sep 2023 09:56:11 +0000
ROA not after:            Fri 06 Sep 2024 10:01:11 +0000
asID:                     23679
IP address blocks:        110.232.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c8:67:7d:8e:62:4b:c3:bd:66:46:50:4f:a7:f6:e5:c6:b2:f2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Sep  8 09:56:11 2023 GMT
            Not After : Sep  6 10:01:11 2024 GMT
        Subject: CN=6DC1983BB912D7159AB9BE83934FB43081EDADF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:81:35:23:2f:35:b8:c1:c1:34:c5:f1:ed:4c:
                    5c:26:62:7d:44:45:21:ea:40:cc:89:2d:5a:bb:94:
                    e9:d6:dc:fe:a8:2e:4c:c9:da:1f:89:9a:80:dd:c1:
                    e8:b6:1b:8a:df:28:9b:30:9b:1a:be:ae:b5:79:5b:
                    d1:06:6a:b5:43:40:96:ac:5a:ce:e1:b2:91:5e:71:
                    bc:19:d7:66:82:f8:cf:24:fd:d5:2b:2b:c4:db:72:
                    c3:a4:8a:da:59:e4:02:9b:10:7c:05:25:ba:4c:94:
                    cf:a3:81:d9:fe:13:51:a5:f0:13:a0:bc:9b:4b:2c:
                    54:66:f5:8c:06:5f:2b:03:96:b6:cb:bd:53:10:e6:
                    0d:bd:fb:41:f7:06:f0:0a:19:f5:4e:a5:fc:74:07:
                    31:13:ca:63:5c:9e:79:69:be:00:a1:2e:c5:53:d5:
                    bd:ee:e5:ba:8b:c1:47:a3:01:e1:35:6b:f3:7b:c7:
                    10:0f:fa:8e:d9:0c:f4:43:c7:ca:ac:9a:f1:dc:21:
                    c6:0d:ad:f1:95:1f:73:35:40:92:a1:85:6b:47:bc:
                    f1:bf:65:17:e5:54:91:27:4b:bf:ce:92:b1:2a:e6:
                    67:1c:53:98:14:28:02:3f:fb:f0:53:cf:ae:cb:5a:
                    f5:73:91:fa:a1:69:ac:b1:9b:c6:c0:54:2e:94:59:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C1:98:3B:B9:12:D7:15:9A:B9:BE:83:93:4F:B4:30:81:ED:AD:F4
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:b1:7c:c2:6e:f2:1e:eb:77:1d:3d:e5:dd:0c:a9:ef:fa:
         15:37:8b:36:f1:f6:8d:a3:5b:fe:22:25:f6:39:fd:62:5e:d8:
         3c:fd:10:21:fd:f7:70:2a:31:14:7e:34:49:88:fd:4d:ff:e4:
         84:3e:c1:e5:53:99:3d:da:2f:cf:d9:27:0d:21:9a:69:4b:a0:
         5b:3f:ff:c7:f6:8b:32:a6:80:7a:db:62:c6:9e:ab:76:dd:cc:
         cc:ea:c7:01:5b:4b:e7:7a:52:ae:ba:24:8d:c8:da:6e:fc:b1:
         d7:72:62:fb:c0:85:60:88:82:64:1e:b5:e1:bf:ec:97:0e:b1:
         fb:74:64:9a:bd:39:7c:28:2a:2c:e6:e9:9a:d3:dc:1b:34:8d:
         11:f9:91:5a:7e:0d:32:ae:b8:79:cb:e8:fc:7e:6d:1c:c9:bd:
         60:eb:d9:2b:89:52:92:b8:18:26:38:2f:67:60:02:95:42:db:
         88:7e:82:40:6e:8d:49:96:21:20:52:56:fe:e8:79:83:2e:73:
         ae:f5:75:58:4d:3a:39:f0:6a:fc:8c:65:37:43:31:6c:ec:e7:
         54:6d:75:51:d3:b3:a2:cb:05:0b:dd:4c:64:3b:a5:a4:a1:4e:
         2a:89:de:6b:fa:16:c3:4e:a8:61:ad:e3:de:e1:c4:b4:dd:53:
         db:22:19:66
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUechnfY5iS8O9ZkZQT6f25cay8oEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0
RkE2Njk4NDAeFw0yMzA5MDgwOTU2MTFaFw0yNDA5MDYxMDAxMTFaMDMxMTAvBgNV
BAMTKDZEQzE5ODNCQjkxMkQ3MTU5QUI5QkU4MzkzNEZCNDMwODFFREFERjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxgTUjLzW4wcE0xfHtTFwmYn1E
RSHqQMyJLVq7lOnW3P6oLkzJ2h+JmoDdwei2G4rfKJswmxq+rrV5W9EGarVDQJas
Ws7hspFecbwZ12aC+M8k/dUrK8TbcsOkitpZ5AKbEHwFJbpMlM+jgdn+E1Gl8BOg
vJtLLFRm9YwGXysDlrbLvVMQ5g29+0H3BvAKGfVOpfx0BzETymNcnnlpvgChLsVT
1b3u5bqLwUejAeE1a/N7xxAP+o7ZDPRDx8qsmvHcIcYNrfGVH3M1QJKhhWtHvPG/
ZRflVJEnS7/OkrEq5mccU5gUKAI/+/BTz67LWvVzkfqhaayxm8bAVC6UWRCzAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUbcGYO7kS1xWaub6Dk0+0MIHtrfQwHwYDVR0j
BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF
OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2
Njk4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzOTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG7oWjANBgkqhkiG
9w0BAQsFAAOCAQEATrWxfMJu8h7rdx095d0Mqe/6FTeLNvH2jaNb/iIl9jn9Yl7Y
PP0QIf33cCoxFH40SYj9Tf/khD7B5VOZPdovz9knDSGaaUugWz//x/aLMqaAetti
xp6rdt3MzOrHAVtL53pSrrokjcjabvyx13Ji+8CFYIiCZB614b/slw6x+3Rkmr05
fCgqLObpmtPcGzSNEfmRWn4NMq64ecvo/H5tHMm9YOvZK4lSkrgYJjgvZ2AClULb
iH6CQG6NSZYhIFJW/uh5gy5zrvV1WE06OfBq/IxlN0MxbOznVG11UdOzossFC91M
ZDulpKFOKonea/oWw06oYa3j3uHEtN1T2yIZZg==
-----END CERTIFICATE-----
Generated at Fri May 3 11:55:16 2024 by rpki-client on console-fra.rpki-client.org