Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34322e302f32342d3234203d3e203338353234.roa
File:                     3131392e322e34322e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier:          a9WukH8uLIzlM2DYcDjX9Ov9KnqzfbNWoqRkFfqDbVc=
Subject key identifier:   2A:A1:1C:88:97:35:64:BF:68:F3:E5:39:63:67:73:C3:A7:5A:D9:36
Certificate issuer:       /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial:       17FF3AFC070C43A4520EFCE127A602A1F2AB507C
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34322e302f32342d3234203d3e203338353234.roa
Signing time:             Mon 31 Jul 2023 00:05:36 +0000
ROA not before:           Mon 31 Jul 2023 00:00:36 +0000
ROA not after:            Mon 29 Jul 2024 00:05:36 +0000
asID:                     38524
IP address blocks:        119.2.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
                          rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Mar 2024 12:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ff:3a:fc:07:0c:43:a4:52:0e:fc:e1:27:a6:02:a1:f2:ab:50:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
        Validity
            Not Before: Jul 31 00:00:36 2023 GMT
            Not After : Jul 29 00:05:36 2024 GMT
        Subject: CN=2AA11C88973564BF68F3E539636773C3A75AD936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:4a:09:25:60:99:e7:61:4c:04:97:98:4b:
                    6a:a1:78:e7:8c:a9:79:0a:af:65:fe:85:24:05:7a:
                    77:cb:c9:61:61:72:a6:aa:75:30:cc:24:70:84:13:
                    87:c4:ac:93:d7:2b:5b:27:0c:68:01:48:c6:af:09:
                    ee:51:d0:aa:33:86:e7:43:7e:77:68:83:df:0d:13:
                    ce:36:e0:86:c8:85:00:f4:ea:f1:4f:5e:25:11:6c:
                    20:45:4d:d7:ce:c1:2d:fd:c6:36:79:9e:61:10:1b:
                    69:72:dd:e9:cf:c6:f3:67:43:00:13:58:55:d3:eb:
                    1e:90:c0:30:c3:31:5d:0b:31:49:30:f1:6b:5d:96:
                    15:89:84:d4:ad:15:7b:eb:b1:ce:29:ff:a8:2a:d2:
                    7b:cf:d9:fa:4b:b4:c9:cc:ed:ce:19:e7:ee:74:74:
                    e5:0b:d5:d8:48:4f:ca:0f:9b:df:02:2d:95:42:7b:
                    67:21:dd:8b:5b:43:af:be:d6:3a:f7:8b:a3:dd:8e:
                    13:54:7b:81:ea:20:6a:58:00:13:80:b2:d5:03:e5:
                    42:ff:6a:a9:c2:17:8c:cc:4b:ee:df:1d:2a:42:fc:
                    f4:0d:16:c6:b5:13:bf:fc:24:6c:49:86:2c:7d:f5:
                    18:be:88:9b:7b:15:04:cc:ea:50:9d:16:00:60:ab:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A1:1C:88:97:35:64:BF:68:F3:E5:39:63:67:73:C3:A7:5A:D9:36
            X509v3 Authority Key Identifier:
                keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34322e302f32342d3234203d3e203338353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ea:de:f6:88:b3:40:6e:cc:11:0e:6a:c1:27:22:92:75:4c:
         a7:2b:81:3e:db:b4:21:3a:75:53:cd:41:7b:33:2e:d2:6c:5a:
         55:3a:3e:9b:f4:bd:36:aa:7d:12:c4:15:23:ce:ea:68:3d:96:
         bf:59:6d:06:79:00:06:38:a0:8b:6b:22:22:16:49:2c:13:fc:
         cc:bf:e0:0a:56:93:6f:21:b9:26:0c:83:79:fb:9b:f9:b2:7e:
         2a:d7:16:14:0e:d5:67:00:00:90:a6:a4:0b:dd:47:27:43:bf:
         ce:a3:7a:e9:e5:71:25:e8:bd:be:19:b8:79:5b:12:5c:fc:e1:
         51:20:23:37:4c:ca:13:03:d0:13:ed:dc:b9:30:16:9f:b0:e4:
         a9:03:0a:aa:d0:65:8d:09:00:88:07:d5:5d:f6:2f:ba:4a:42:
         e1:37:48:a0:36:62:65:39:a7:86:39:24:76:c1:3c:38:8d:5b:
         c3:2c:e2:ce:02:e8:63:3a:40:b8:ed:7a:b3:fc:40:4a:d9:42:
         92:5f:a7:53:6b:07:83:0b:e3:ac:39:ce:cb:5b:1d:5c:22:5b:
         60:3f:80:47:74:4d:e0:0f:82:b4:86:2c:15:41:8d:7d:20:88:
         46:cb:0b:1d:42:9a:28:ac:d3:2f:09:51:27:2e:ca:cf:8b:22:
         c1:4e:3f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 10:38:31 2024 by rpki-client on console-fra.rpki-client.org