Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa
File:                     3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (raw, json)
Hash identifier:          PzCkuAVrPC6ULmMdsmHlDmI1kDwS+Og7na9NNMIi/hk=
Subject key identifier:   BF:E6:DD:71:28:D3:9E:AB:79:66:FA:66:8B:62:26:13:83:D7:6D:FE
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       33ADBE32A8B06EE1FA27FEE44323BFC5BFB234B1
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa
Signing time:             Wed 27 Dec 2023 04:00:00 +0000
ROA not before:           Wed 27 Dec 2023 03:55:00 +0000
ROA not after:            Wed 25 Dec 2024 04:00:00 +0000
asID:                     131706
IP address blocks:        110.76.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 16:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ad:be:32:a8:b0:6e:e1:fa:27:fe:e4:43:23:bf:c5:bf:b2:34:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Dec 27 03:55:00 2023 GMT
            Not After : Dec 25 04:00:00 2024 GMT
        Subject: CN=BFE6DD7128D39EAB7966FA668B62261383D76DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:fc:8f:8f:41:5e:5c:bb:3e:68:9b:71:16:
                    3c:68:7b:92:49:e5:ff:19:d0:fc:6f:e7:a5:ca:9a:
                    b2:1f:3a:89:89:a3:ab:a2:55:d7:b2:5a:73:79:4e:
                    e8:d3:2a:28:38:c5:72:2d:5d:fe:e4:69:a0:00:98:
                    52:67:5b:d6:49:39:c1:68:38:b8:29:49:ea:6b:ac:
                    df:39:3e:5d:e5:3f:6c:c5:a3:76:c8:49:74:90:f4:
                    88:37:c9:1c:c8:6b:ab:7a:4e:7b:f0:29:e3:05:3b:
                    4a:e7:cf:27:69:20:03:58:4d:83:ee:23:c8:6e:3c:
                    9f:9f:dd:78:d9:0d:bd:a6:9a:b5:3d:53:8f:94:2d:
                    57:55:ed:0e:58:89:e7:bd:4a:22:91:ad:7d:ab:7c:
                    2e:26:7d:f1:92:5a:32:ea:d0:76:35:3f:4f:a3:27:
                    28:c8:2a:6f:0f:0c:1f:24:15:af:2e:d6:48:9f:1a:
                    2c:c9:b7:af:31:da:d2:66:3b:b4:61:53:0c:ed:a3:
                    71:32:af:c8:cd:45:6e:4e:ee:62:c3:ba:3a:0e:ed:
                    16:18:83:3d:46:bf:69:c9:69:0a:a5:d2:09:0f:fd:
                    ac:67:48:7f:a6:76:ab:99:64:4a:c7:90:c8:f5:75:
                    6f:a7:82:f8:99:be:9e:40:a4:f0:ce:10:f3:5e:f1:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E6:DD:71:28:D3:9E:AB:79:66:FA:66:8B:62:26:13:83:D7:6D:FE
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:da:b2:df:72:73:63:2e:3d:0b:b7:2a:f6:44:59:60:5d:
         16:19:af:ad:30:df:3b:94:d8:ea:c7:9f:16:0d:90:8a:20:96:
         0a:52:39:c6:55:24:7e:ef:fd:2e:7a:fa:7c:e4:02:3d:e1:8d:
         2b:69:1f:05:73:c4:ae:a8:3c:b8:e1:f0:b8:d4:0a:7b:d3:c3:
         65:47:7c:f0:4e:ae:cf:d2:59:0f:6e:42:e4:e2:8c:f8:c4:92:
         2b:ee:0a:3a:02:a4:bb:da:32:53:1e:28:45:d3:f2:59:d3:a8:
         73:3e:ba:f2:04:ee:c3:4a:4c:c3:4d:5f:fa:49:1b:ed:90:b0:
         52:14:8f:cc:28:ef:df:e6:92:a3:79:39:b4:1d:8d:6e:67:11:
         e9:60:4d:5a:15:86:b4:42:48:cf:b3:91:38:97:8c:87:52:bf:
         13:12:6a:bd:d8:0a:94:bd:46:46:81:31:44:c1:7b:c8:d6:c8:
         68:34:4c:a8:7a:89:54:72:d8:a7:83:14:9e:12:b1:d3:32:29:
         0f:fd:a1:d6:30:d3:63:db:b2:d8:a4:27:42:8f:01:85:4b:04:
         d7:c9:cc:02:fc:7f:91:29:73:57:39:a3:ae:6a:a5:66:b9:c0:
         f7:a9:20:6d:66:ca:85:ac:b1:f1:52:13:b9:0f:23:d6:b2:55:
         38:61:ec:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:35:07 2024 by rpki-client on console-ams.rpki-client.org