Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132322e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          7+gRJ0M9vG4I9Gtm0N1sxVRjYQIG9VcjdjI5D7djMg0=
Subject key identifier:   A7:BC:BF:02:A3:E5:EF:A9:34:C2:6B:2D:C4:9A:C9:CE:81:B4:08:6D
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       478319CC16515D7CADDBFC69CB1F844723ADAF8A
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132322e302f32342d3234203d3e203338353135.roa
Signing time:             Wed 07 Jun 2023 08:00:00 +0000
ROA not before:           Wed 07 Jun 2023 07:55:00 +0000
ROA not after:            Wed 05 Jun 2024 08:00:00 +0000
asID:                     38515
IP address blocks:        117.74.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:83:19:cc:16:51:5d:7c:ad:db:fc:69:cb:1f:84:47:23:ad:af:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jun  7 07:55:00 2023 GMT
            Not After : Jun  5 08:00:00 2024 GMT
        Subject: CN=A7BCBF02A3E5EFA934C26B2DC49AC9CE81B4086D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:26:d0:40:bd:40:d3:f2:21:d7:b5:ca:3f:fa:
                    8d:d7:a8:8e:d9:77:ac:4b:9b:b6:9a:ed:b7:51:cb:
                    c7:c4:f4:e0:8f:79:1e:f8:f9:94:3e:d8:24:dd:d7:
                    f1:6c:10:1e:3f:eb:59:0d:7d:ea:99:16:16:52:79:
                    d0:f8:33:51:ff:f8:48:10:06:8d:ed:b2:0e:a3:16:
                    07:e1:b6:20:bf:81:43:c0:dc:24:7c:79:9e:83:52:
                    40:bd:c9:c3:e5:c6:7a:05:8c:a0:30:e5:b3:9b:1f:
                    ae:20:ac:d0:50:db:9c:46:82:d2:f6:48:7f:cc:5f:
                    da:39:2e:04:88:89:5b:5f:cd:19:c5:52:af:5a:ec:
                    44:be:86:0a:cc:8e:7e:0b:a9:62:3e:27:42:8e:60:
                    ed:96:d6:cf:89:f0:9c:eb:bf:e4:51:2e:0c:e2:84:
                    d6:f3:e1:e9:ed:8e:b6:bb:54:ae:30:7b:36:41:b3:
                    a7:d0:22:3d:bd:0b:ad:12:2b:4d:b4:c5:4d:92:b1:
                    b4:b5:5b:94:1c:f1:72:fc:88:2c:eb:7b:21:9d:bf:
                    0e:cc:2b:8a:9c:58:83:0e:79:74:69:c0:82:3b:5d:
                    6a:9b:2b:c2:df:dc:71:e6:54:8a:7c:28:65:94:82:
                    79:ce:5c:ad:b6:ff:d9:66:40:a0:b7:f6:74:36:98:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BC:BF:02:A3:E5:EF:A9:34:C2:6B:2D:C4:9A:C9:CE:81:B4:08:6D
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132322e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:64:d2:06:be:aa:02:cf:f0:a1:ff:af:3d:2b:2f:8b:75:26:
         6d:97:7f:45:22:09:c2:9f:bf:1c:e6:25:30:7e:81:60:7c:78:
         1d:ac:52:61:9e:5f:52:7c:70:e0:0e:01:45:0f:b4:ef:b7:b4:
         ca:e9:a8:75:4a:a3:05:57:09:27:bd:11:cd:11:59:3a:ab:0d:
         35:c5:c8:6e:45:27:d0:bf:49:e6:d0:b0:7c:ba:5a:cd:67:76:
         b4:f8:85:3f:43:0a:3c:1d:5d:e3:0b:aa:ec:7f:11:22:ee:66:
         c2:97:b3:3b:c3:04:dd:e2:f5:72:37:5f:62:b8:a1:07:90:b7:
         df:fb:46:55:83:74:dc:83:5d:7a:e9:5f:31:d3:23:18:74:d6:
         b4:26:56:fb:21:b9:ab:cf:6c:b1:ea:ad:d0:bd:9e:e7:ae:d3:
         96:1d:c4:29:bd:00:c9:a0:2c:1a:02:82:3d:18:89:14:bb:6a:
         d2:cc:fd:e2:e4:b5:be:73:3e:af:7e:9d:f6:7e:ea:32:c1:5b:
         0b:86:05:ff:df:d9:5e:2d:00:b5:60:ac:60:4e:c4:0f:ae:9a:
         08:5a:67:80:ba:34:f3:4e:70:62:ab:50:10:a3:54:91:12:0d:
         cf:ee:b0:21:99:41:e6:ab:b7:8b:93:ec:64:43:0b:a8:1f:fe:
         53:e1:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 11:44:51 2024 by rpki-client on console-ams.rpki-client.org