Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          L1xeLg/ku+8cFoNMikWEj/6qETxQQ1Z5rQXV4Xp0Rrw=
Subject key identifier:   2A:BC:42:17:4B:E0:84:6E:C1:14:B1:5A:6B:47:C8:E6:BC:3A:82:DD
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       155746CC31DBD193437D7C8B9CE3DBDCD636EC27
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 31 Jul 2023 00:04:26 +0000
ROA not before:           Sun 30 Jul 2023 23:59:26 +0000
ROA not after:            Mon 29 Jul 2024 00:04:26 +0000
asID:                     38515
IP address blocks:        117.74.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:57:46:cc:31:db:d1:93:43:7d:7c:8b:9c:e3:db:dc:d6:36:ec:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jul 30 23:59:26 2023 GMT
            Not After : Jul 29 00:04:26 2024 GMT
        Subject: CN=2ABC42174BE0846EC114B15A6B47C8E6BC3A82DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:96:2a:0a:bb:b0:d6:c7:50:d7:bd:13:df:
                    30:72:ae:07:ae:66:bb:68:ad:ed:91:0e:a5:71:d4:
                    da:e9:37:c6:fe:ef:2e:e9:0b:ba:02:c6:e3:8f:16:
                    11:90:7d:b0:e5:2e:0b:ad:52:51:58:b5:c7:a9:9c:
                    66:7a:24:70:69:1f:b0:a8:f3:c2:15:a1:99:c3:9e:
                    32:90:20:0b:ce:83:0e:72:ed:e8:ee:13:16:e6:3d:
                    12:20:99:98:65:2a:7e:ff:35:4e:a7:c3:d4:14:ab:
                    cc:f8:a0:fd:87:d8:31:ae:4c:df:14:db:1f:bb:c2:
                    75:3d:67:1a:33:72:78:05:65:c6:58:41:a9:d8:b6:
                    7c:a9:d4:0b:fd:21:89:d9:f0:a3:54:93:60:cc:ff:
                    db:b0:21:9f:e3:4b:f1:4e:39:28:c8:60:09:a6:7e:
                    4c:89:34:b6:b5:24:c5:fe:9f:c1:e5:6d:c3:53:02:
                    d0:7d:e0:ce:56:c5:c1:2f:dc:8f:8e:20:a3:26:5c:
                    ea:06:4f:c2:b3:ae:66:e2:e4:95:82:f5:86:fb:82:
                    ec:9e:4b:99:8f:14:98:f6:75:f9:6c:2c:60:e3:a5:
                    26:48:71:27:14:7b:4b:ee:0e:47:60:04:4b:d9:2e:
                    97:c9:04:a0:02:30:10:92:27:d8:57:93:b3:e5:b5:
                    60:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BC:42:17:4B:E0:84:6E:C1:14:B1:5A:6B:47:C8:E6:BC:3A:82:DD
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:7d:fc:7c:70:99:74:a5:2c:1d:86:04:c0:c2:0c:39:2f:8e:
         6e:bc:29:49:97:15:f1:8b:1b:9a:a3:44:5b:63:d8:03:83:3f:
         80:d0:4b:4a:78:0f:35:6e:e8:47:84:0c:3a:6e:70:8c:0c:b6:
         c7:29:4f:7b:32:8f:b6:af:01:da:12:5c:8e:1c:0f:a3:e3:30:
         cc:04:af:89:a8:5b:4a:6b:1d:48:90:78:30:f1:2c:43:62:39:
         d2:86:b4:c9:ec:ec:eb:66:19:b2:40:3f:11:f2:02:9b:90:89:
         7d:fd:26:06:a5:01:60:e3:ae:f0:1d:ff:24:69:e2:66:e5:ad:
         25:24:3c:f7:1e:3f:7f:f8:82:78:3f:b3:34:48:cd:44:15:f2:
         f0:f5:07:8e:c2:41:b5:d5:66:d5:7b:c4:bf:5e:a7:4c:22:9d:
         35:3a:93:3e:69:3a:3f:f1:9a:10:1a:f6:84:af:e4:e4:ae:f8:
         6a:5a:48:8b:97:a9:c0:22:a4:db:b1:63:79:3d:72:30:76:30:
         24:88:19:72:9e:cd:ee:a5:0c:57:bf:ef:d1:fc:00:58:07:3f:
         f6:1a:a7:24:af:08:40:7b:9e:5e:7f:db:e0:b5:f5:2c:00:82:
         2e:fc:da:17:de:9b:16:58:a1:1c:06:c8:46:10:b2:f6:2b:48:
         3e:b5:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:53:11 2024 by rpki-client on console-fra.rpki-client.org