Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32322d3232203d3e203338353135.roa
File:                     3131372e37342e3132302e302f32322d3232203d3e203338353135.roa (raw, json)
Hash identifier:          FtSqsPHiWT0hcDRQ1EphXOa/xfreIU95nkSjcp9KYSA=
Subject key identifier:   F5:CB:D4:9D:27:EC:D3:DA:D8:42:A6:64:38:C5:62:E1:8F:C3:C1:64
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       A986850DA5B617CFFE725E8F5B9C20281B0CA8
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32322d3232203d3e203338353135.roa
Signing time:             Tue 04 Jul 2023 03:59:26 +0000
ROA not before:           Tue 04 Jul 2023 03:54:26 +0000
ROA not after:            Tue 02 Jul 2024 03:59:26 +0000
asID:                     38515
IP address blocks:        117.74.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a9:86:85:0d:a5:b6:17:cf:fe:72:5e:8f:5b:9c:20:28:1b:0c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jul  4 03:54:26 2023 GMT
            Not After : Jul  2 03:59:26 2024 GMT
        Subject: CN=F5CBD49D27ECD3DAD842A66438C562E18FC3C164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:11:25:c4:d5:c0:d1:07:ac:ad:b4:11:a0:
                    c7:ce:14:83:31:22:24:24:57:8e:a8:89:ec:fd:57:
                    71:8b:e2:cf:af:24:48:6d:8c:65:30:f7:6e:40:4b:
                    ef:d7:05:8b:5d:bb:08:56:27:ae:16:77:f6:f1:e3:
                    c3:67:68:f6:82:5e:29:34:85:24:d3:6f:15:3e:9a:
                    70:5c:fd:78:40:73:76:c7:e3:4e:53:c7:3b:61:75:
                    9e:ca:43:74:7d:1a:07:17:60:91:dd:80:2e:83:7c:
                    75:0e:42:4f:99:23:29:64:e8:87:eb:78:48:b1:ef:
                    bd:a4:a2:1b:6a:66:37:3d:e1:bb:7f:98:e7:91:6e:
                    2f:ef:c1:36:26:81:7b:7e:ec:e7:06:cf:25:f5:f9:
                    b2:b2:0a:c9:07:ad:32:ff:82:85:79:70:6a:82:89:
                    b8:3e:36:a2:4f:54:3a:80:4c:85:e3:3a:8e:48:0c:
                    5a:57:2e:14:d4:94:b6:a1:ac:fa:20:c0:30:64:08:
                    41:b4:e7:d7:5e:b0:56:06:f9:cb:f5:c1:28:8d:f5:
                    d1:18:a6:c3:94:c7:ff:bf:0f:42:b3:3e:83:b2:fa:
                    8f:f1:bf:8d:36:fc:67:1c:fe:c6:3e:ed:f5:c1:b5:
                    23:a1:e1:12:1d:4b:04:4a:d4:25:40:ec:f0:e9:b4:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CB:D4:9D:27:EC:D3:DA:D8:42:A6:64:38:C5:62:E1:8F:C3:C1:64
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32322d3232203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:aa:0d:fa:70:d1:5e:e7:80:2f:29:73:cb:a2:2f:54:69:5a:
         ce:89:25:1c:62:63:06:4e:76:70:65:f3:6d:ba:fa:40:c3:e5:
         54:01:e3:ee:9e:d3:61:c2:40:a5:28:c4:8d:24:0f:73:ac:4a:
         42:d8:53:5e:a8:f7:36:e4:d5:d4:16:fe:07:f3:29:1d:5f:73:
         76:c9:20:33:38:7e:91:5d:76:7a:f8:b5:be:f5:b6:94:34:8f:
         8f:a0:21:73:1e:06:c8:81:1e:28:d4:24:c7:d9:34:04:96:dc:
         fc:39:8f:0a:e9:6e:de:7c:3f:74:0b:75:5f:66:74:52:54:7e:
         d5:3e:0b:dd:00:ce:a3:e6:7b:8d:d0:05:42:38:48:61:48:79:
         15:55:20:19:95:27:d2:ba:43:c1:a5:12:20:cc:a2:e2:69:32:
         c1:b8:89:c2:fb:05:3a:35:2e:f0:16:bb:5e:da:42:e9:0e:0e:
         33:63:f9:e7:99:f5:69:29:91:98:ef:ea:18:02:bb:41:43:67:
         56:f8:6f:7d:fb:af:79:5b:30:ee:30:25:60:fd:4b:9d:72:33:
         3d:95:2d:e1:97:55:ac:3f:04:03:dc:c2:29:3a:e1:c2:3f:f1:
         d4:4f:73:48:89:8a:ab:5d:8f:20:19:40:93:32:de:23:06:08:
         04:28:a5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 11:44:51 2024 by rpki-client on console-ams.rpki-client.org