Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34362e302f32342d3234203d3e203338353234.roa
File:                     3131392e322e34362e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier:          BVrbcg3wHHzTTlx6IYhCVPsXnJ4Rqv6w3dWvJXXn3tA=
Subject key identifier:   6C:53:00:90:3B:80:56:F0:BB:D4:DC:3C:A8:59:DC:13:D9:EC:DB:67
Certificate issuer:       /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial:       2C0039C9329C5BAA81A9BEF2BAF370B89F461958
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34362e302f32342d3234203d3e203338353234.roa
Signing time:             Mon 31 Jul 2023 00:05:36 +0000
ROA not before:           Mon 31 Jul 2023 00:00:36 +0000
ROA not after:            Mon 29 Jul 2024 00:05:36 +0000
asID:                     38524
IP address blocks:        119.2.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
                          rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 09:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:00:39:c9:32:9c:5b:aa:81:a9:be:f2:ba:f3:70:b8:9f:46:19:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
        Validity
            Not Before: Jul 31 00:00:36 2023 GMT
            Not After : Jul 29 00:05:36 2024 GMT
        Subject: CN=6C5300903B8056F0BBD4DC3CA859DC13D9ECDB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:78:ac:9d:72:05:46:5f:6a:1b:d7:1f:45:
                    24:30:16:01:ef:47:38:78:17:72:77:f9:ab:81:ee:
                    7c:1a:ca:c4:25:a4:16:8c:b8:bc:73:a8:fb:6a:32:
                    45:1c:0e:d5:7c:02:4e:d7:20:ed:0c:f1:96:c8:3b:
                    1e:ee:85:b4:8b:e7:fa:09:63:5e:e3:bf:6d:a6:ee:
                    bb:3c:bb:0c:e0:6d:48:82:27:db:ac:e9:9c:cc:a9:
                    fa:07:d0:4f:da:3a:59:81:da:7d:e9:f5:2a:fd:af:
                    f2:03:77:46:62:45:cd:72:99:f7:d7:1c:00:1b:f6:
                    2b:1c:e2:47:98:d0:20:b3:db:65:45:4b:1d:9e:91:
                    04:12:d3:c2:31:f3:5e:ad:85:17:89:be:b7:8a:ee:
                    06:51:80:04:0d:86:71:38:55:f3:95:e1:84:00:d3:
                    d3:22:4e:e9:81:f8:24:96:62:30:7f:c3:ad:d6:c8:
                    12:5b:6e:89:17:b4:22:3f:10:de:02:a4:30:49:4b:
                    9e:a4:e5:b4:d6:cd:a8:aa:77:b6:de:95:01:4d:fa:
                    cf:59:d7:ea:66:b6:1e:e8:a9:2f:8e:81:d8:42:fa:
                    ac:c3:95:97:ac:0f:7f:8e:a6:12:96:10:ef:aa:63:
                    9e:e4:61:47:94:cc:e2:3e:64:9d:78:0e:9d:7a:9b:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:53:00:90:3B:80:56:F0:BB:D4:DC:3C:A8:59:DC:13:D9:EC:DB:67
            X509v3 Authority Key Identifier:
                keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34362e302f32342d3234203d3e203338353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:72:60:4e:97:3e:ca:c9:87:6f:aa:16:46:2d:21:d0:13:f9:
         40:96:b0:19:ea:60:f7:c5:02:33:0b:8f:8c:ce:12:69:30:7d:
         4b:8d:76:29:a6:2d:cf:04:9d:3a:6f:ac:2a:5c:ee:b3:50:65:
         7b:0f:ca:4a:d6:bf:84:c0:85:be:d8:49:15:12:2f:5d:be:6d:
         d0:1d:66:9f:95:2a:55:06:95:9f:4f:a0:13:77:e4:73:4f:d2:
         ec:0c:70:4c:0d:56:48:55:93:c9:89:9a:c7:f7:5d:31:94:12:
         b6:12:9e:49:e7:67:c5:3a:16:df:4b:4d:07:77:df:41:77:5c:
         d4:7b:86:67:1d:55:88:0d:ba:03:cb:4d:eb:ae:d5:97:d8:a2:
         cb:fc:d0:51:ab:97:57:7b:24:bc:67:38:ea:46:32:97:3e:4d:
         ae:98:49:46:58:c0:62:70:b4:70:a4:0a:67:d4:65:09:93:2c:
         65:f0:44:02:a9:2a:f9:cc:10:98:41:c6:be:9a:61:67:e0:70:
         33:95:20:c1:41:4c:63:92:a0:18:63:9f:f9:e6:d4:ed:e0:82:
         9e:b8:2c:5d:53:6a:e4:57:cf:15:19:94:ce:ad:37:c2:f9:18:
         87:6f:25:20:df:d3:f8:32:c1:20:0e:4e:4a:7f:3c:ae:c5:e8:
         80:c1:8d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:16:52 2024 by rpki-client on console-ams.rpki-client.org