Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136392e302f32342d3234203d3e203234323036.roa
File:                     3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (raw, json)
Hash identifier:          47Rg2D/jYWjowFjTFBV5AjuBULeYFl9kW3yjsrRmRBU=
Subject key identifier:   ED:8E:1F:A2:F6:41:48:20:F8:23:62:03:A9:EA:96:5E:78:B1:FB:D0
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       44515F4CB8AEF1E7E58CDC21420A7C300103A238
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136392e302f32342d3234203d3e203234323036.roa
Signing time:             Fri 29 Sep 2023 15:17:45 +0000
ROA not before:           Fri 29 Sep 2023 15:12:45 +0000
ROA not after:            Fri 27 Sep 2024 15:17:45 +0000
asID:                     24206
IP address blocks:        110.44.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
                          rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 08:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:51:5f:4c:b8:ae:f1:e7:e5:8c:dc:21:42:0a:7c:30:01:03:a2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Sep 29 15:12:45 2023 GMT
            Not After : Sep 27 15:17:45 2024 GMT
        Subject: CN=ED8E1FA2F6414820F8236203A9EA965E78B1FBD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:5a:35:b3:1d:50:05:e4:fd:1e:70:54:3b:
                    6c:03:a5:1d:a4:75:68:04:ac:be:9c:af:1e:02:86:
                    d5:79:d1:b0:e2:1b:a7:6f:32:ef:4f:a9:b9:b4:a3:
                    b7:8a:7e:16:ab:7e:9f:a3:b6:e2:4b:52:51:0e:1b:
                    f6:d6:d5:cb:78:e9:37:74:6e:8c:71:86:38:08:30:
                    36:17:c7:77:49:f9:66:45:0a:5e:89:3f:11:8e:41:
                    84:54:d5:66:f2:f2:8b:01:b3:8c:5e:11:93:a5:98:
                    03:57:32:45:ec:68:3c:45:27:5e:ae:03:f5:90:ca:
                    dc:6b:8e:a1:6a:b4:71:41:a3:2e:6d:c8:1e:82:40:
                    9e:f9:c9:ab:1f:38:65:24:85:9b:e5:37:1e:b4:c2:
                    6e:b0:ed:a4:41:9e:a8:74:48:1a:bf:d4:35:d9:09:
                    94:f7:47:b3:ed:16:f3:5a:14:e4:79:71:cc:09:21:
                    ef:45:ab:34:af:f5:7e:cc:e7:1e:d8:fe:9b:a2:a2:
                    70:08:46:43:4d:3c:73:0e:ca:c8:f9:bb:ec:93:94:
                    eb:5c:dd:35:c0:74:fb:d7:c8:97:0a:4d:fe:1f:b6:
                    c3:59:8a:ad:54:11:14:c1:c4:6d:fd:8c:9b:f0:e0:
                    b0:99:e4:ab:f6:12:d6:88:75:79:ac:ab:9b:d2:9f:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8E:1F:A2:F6:41:48:20:F8:23:62:03:A9:EA:96:5E:78:B1:FB:D0
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136392e302f32342d3234203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:76:f1:a9:e0:e0:e1:85:9a:bc:ec:e9:42:ac:40:5c:3a:7f:
         bc:09:00:60:9f:7e:c0:ee:a0:b9:87:6f:bf:26:40:aa:96:cc:
         32:ea:0d:51:04:fc:4e:22:f9:5c:b4:30:0d:99:27:6a:60:6f:
         28:05:c5:08:94:9c:53:20:a6:58:f3:c5:77:a3:20:36:61:d7:
         d4:b2:13:14:3e:6f:0e:e8:73:42:03:f7:3e:f9:5c:22:66:77:
         08:f0:c0:b3:05:1b:5d:82:24:af:43:af:73:f4:63:e8:c6:05:
         10:b2:bc:72:22:bc:b6:a2:73:3d:03:4e:01:1c:31:4a:56:5a:
         bb:9c:55:c7:75:c4:cc:0f:32:8c:fd:bf:65:1c:5a:22:17:68:
         d4:9c:62:00:55:0e:84:78:ef:90:b8:27:f7:d3:a3:e7:5f:95:
         60:3d:87:9c:ba:33:85:88:aa:b3:91:52:05:c2:63:af:0a:c3:
         76:f5:17:62:5b:d8:b3:f3:8e:26:58:4b:15:26:e9:f7:d0:b9:
         21:1c:a0:04:a4:f9:96:3f:c5:e3:73:7f:6b:21:03:dd:19:06:
         90:93:dc:43:f4:42:e0:81:28:3e:05:92:9f:1c:1d:b8:6c:dd:
         a8:9f:39:c2:40:f3:e5:c8:dd:47:f1:af:07:86:24:00:66:fe:
         ce:45:db:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:17:06 2024 by rpki-client on console-ams.rpki-client.org