Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa
File:                     3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (raw, json)
Hash identifier:          QtxnOn+DsQZotUj/1GA6XoHjabGELcjqch1wbtniJX0=
Subject key identifier:   9E:13:32:07:C2:4E:6A:90:EB:E1:A0:E8:2B:D6:1A:D4:79:12:FB:EB
Certificate issuer:       /CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989
Certificate serial:       627AB221859EA28069156450EAAAFEF91375C4EF
Authority key identifier: 8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa
Signing time:             Mon 31 Jul 2023 00:03:16 +0000
ROA not before:           Sun 30 Jul 2023 23:58:16 +0000
ROA not after:            Mon 29 Jul 2024 00:03:16 +0000
asID:                     45146
IP address blocks:        119.235.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl
                          rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Mar 2024 19:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7a:b2:21:85:9e:a2:80:69:15:64:50:ea:aa:fe:f9:13:75:c4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989
        Validity
            Not Before: Jul 30 23:58:16 2023 GMT
            Not After : Jul 29 00:03:16 2024 GMT
        Subject: CN=9E133207C24E6A90EBE1A0E82BD61AD47912FBEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:f3:d8:a9:a6:19:58:0f:53:b7:49:13:07:
                    4f:9b:b5:aa:44:ec:41:e2:1f:9a:95:f8:88:cd:22:
                    ea:ca:92:de:dd:4f:31:78:be:1f:4e:26:e6:c3:81:
                    6e:fc:ce:94:93:a8:d4:6b:5e:3a:df:33:d3:38:4f:
                    dd:f1:4e:3d:b9:30:6c:d7:1b:9c:7f:e7:59:ec:61:
                    aa:ce:a7:e0:a4:6e:53:9f:34:e8:95:14:90:aa:d9:
                    1b:2c:cd:9a:49:ec:93:ef:8d:a4:2a:4d:83:09:84:
                    93:27:85:eb:90:d5:5c:cb:96:92:6a:7f:45:49:e1:
                    02:c9:d4:78:00:12:f2:3a:5c:d4:26:6e:60:ac:37:
                    21:51:24:64:d3:2c:eb:df:a2:af:91:56:fc:e4:24:
                    00:cc:f2:25:14:d0:46:23:63:06:05:f7:6a:20:25:
                    36:26:49:65:50:cc:d6:ea:06:19:2e:7d:f6:a2:bd:
                    db:17:c9:1f:3f:b6:9a:cd:c2:1e:19:ba:9e:79:65:
                    b9:fb:0e:e3:51:f9:e0:f6:1f:0e:e2:6b:c8:5c:8b:
                    b2:cb:9f:64:97:7b:1d:b3:61:3c:37:5a:90:02:e6:
                    55:c3:21:6e:58:20:87:b7:00:27:57:49:32:2a:7d:
                    78:a4:a5:dc:b6:24:ad:23:5c:f8:2b:97:2b:5b:7e:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:13:32:07:C2:4E:6A:90:EB:E1:A0:E8:2B:D6:1A:D4:79:12:FB:EB
            X509v3 Authority Key Identifier:
                keyid:8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:ec:8d:1b:b6:03:9c:d3:3f:85:3a:7f:04:98:f3:63:ef:bb:
         71:de:c4:04:42:9a:e7:0a:0f:4d:ba:f8:f7:c3:a7:37:bf:e1:
         40:a6:85:3e:1d:e4:cf:c4:16:20:22:12:77:0e:01:5f:70:d6:
         81:f4:12:4f:49:9e:e0:92:71:55:a9:12:dd:ee:b9:9e:ee:07:
         d9:c5:f8:be:92:95:58:4d:d7:ed:8c:36:43:8d:c3:d0:93:0f:
         6c:bf:88:6f:28:4f:d7:dc:e2:6c:52:e1:b2:17:f7:ea:90:0f:
         6b:89:24:d5:bd:b0:ff:13:47:83:c9:18:48:94:16:b5:65:5e:
         c9:25:7d:d3:81:eb:c2:a3:3c:02:6c:6f:05:fd:b5:1f:69:b0:
         38:11:53:ac:6d:cc:00:e2:29:ea:17:7b:5d:94:32:f3:62:02:
         e5:10:a8:ee:67:83:41:69:a7:ef:16:ea:b6:08:0c:c3:49:b6:
         09:61:e5:e7:4a:e4:f4:f3:0e:fe:e8:73:80:93:f4:4c:6f:c2:
         4b:f0:97:d2:33:cd:3c:fa:e6:39:e9:ed:7b:5f:15:a7:e7:ee:
         6a:14:21:70:d6:05:e4:12:15:42:9c:74:c3:b4:4a:36:c8:e9:
         75:c3:a7:08:c5:81:4b:87:2d:ea:8d:21:6c:2b:36:d1:81:16:
         6d:78:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 18:21:04 2024 by rpki-client on console-ams.rpki-client.org