Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132352e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          410KxPR/23v8JouEECNIPHNKE6uth7iAvPCOCWI18k0=
Subject key identifier:   9B:CB:91:7A:1C:AD:4D:E9:41:07:6B:5A:61:C0:59:C2:61:7C:B4:F5
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       34205CDA8BDE95BC81A5DE40C4E0167A8828B837
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132352e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 31 Jul 2023 00:04:26 +0000
ROA not before:           Sun 30 Jul 2023 23:59:26 +0000
ROA not after:            Mon 29 Jul 2024 00:04:26 +0000
asID:                     38515
IP address blocks:        117.74.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:20:5c:da:8b:de:95:bc:81:a5:de:40:c4:e0:16:7a:88:28:b8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jul 30 23:59:26 2023 GMT
            Not After : Jul 29 00:04:26 2024 GMT
        Subject: CN=9BCB917A1CAD4DE941076B5A61C059C2617CB4F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:fa:73:d8:22:be:56:10:a4:9e:d3:0e:25:
                    6a:43:52:52:6a:9a:6b:3c:94:0e:a2:b4:6e:8d:cf:
                    aa:85:a9:ce:26:f3:17:eb:85:69:ec:86:a9:38:5f:
                    98:c2:fe:7a:ba:0d:8b:a5:c1:51:cf:02:96:21:0a:
                    0b:7d:33:9b:f9:ce:98:d4:76:74:fa:0a:15:7a:2e:
                    81:2b:36:a5:16:de:ca:79:36:79:37:35:ed:16:e2:
                    97:94:dc:8c:c1:20:b2:15:06:bb:39:41:be:62:f9:
                    12:2d:20:de:8d:09:1a:cb:94:39:1a:f0:05:9e:d3:
                    c5:b7:25:6c:74:b4:83:0f:59:79:3f:ef:b3:88:2d:
                    bb:90:7d:1d:87:0f:fe:a2:b9:e2:6c:3b:4c:b3:ae:
                    09:53:5b:87:98:60:24:71:1c:01:61:05:36:10:10:
                    a6:b5:92:4f:65:90:a8:4e:7a:d2:2d:7c:58:b0:9c:
                    86:ac:e4:91:c1:a2:ce:66:79:1f:9f:1a:6d:4e:d5:
                    ea:87:ae:c7:67:68:0d:b5:65:ad:f9:24:56:27:86:
                    ce:47:26:59:a5:55:d8:e4:10:33:7d:51:f9:ad:3f:
                    97:4b:c2:3e:09:3b:9f:05:36:18:1c:f7:f2:7c:13:
                    ae:6f:9d:c6:74:2e:65:20:cd:64:68:1b:c4:f9:b6:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CB:91:7A:1C:AD:4D:E9:41:07:6B:5A:61:C0:59:C2:61:7C:B4:F5
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132352e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:eb:62:77:b6:72:c8:67:9b:47:04:64:9d:6a:ce:d6:49:e2:
         e9:c8:85:7d:03:79:f4:7e:0b:c1:ea:0e:ca:2f:ef:b7:c2:02:
         12:83:76:e4:4e:d0:40:39:9d:f2:ae:2c:41:c7:6c:e2:e7:09:
         25:23:eb:68:ab:f6:0f:df:76:29:6a:d6:f9:ff:19:32:1f:c6:
         68:fc:05:dd:77:7a:8a:3e:2b:d1:1e:8a:bd:37:0e:cf:58:3d:
         2b:5b:af:de:8e:ad:4b:f9:27:9a:45:b4:26:73:e9:02:f9:16:
         e0:c5:f8:7f:5f:6c:4b:70:55:85:38:6c:b5:04:fd:7b:6e:b7:
         55:b7:ca:39:dc:79:77:f6:85:5e:c9:73:0d:5e:de:da:07:c5:
         7d:26:f8:ce:5f:78:26:3f:28:55:79:1d:03:5f:76:07:c7:7c:
         0b:cc:53:c8:98:4c:1d:c1:69:3b:bc:3b:cd:79:71:c1:1b:cf:
         9c:ac:4a:fd:26:1c:b0:45:05:d7:9d:73:77:f5:b3:a8:78:fe:
         1a:fb:6b:b8:04:80:20:16:67:58:8f:a1:95:d6:eb:31:30:59:
         f9:2a:d4:93:53:47:80:34:41:89:37:ed:ec:1a:49:df:ca:10:
         99:90:dd:3c:0e:a1:b4:59:4d:b7:8a:5f:e6:4f:1e:7d:90:55:
         28:71:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:53:11 2024 by rpki-client on console-fra.rpki-client.org