Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa
File:                     3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          y4tJrvbNvHgrpNzTDvkiQdjfR14Sed4krFIgqegWtNk=
Subject key identifier:   8A:6A:5F:E7:61:D9:E1:2D:EA:7E:76:AD:CB:CC:F0:F4:4D:79:29:8D
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       1E67C78C216B20EAE55A02355886DB190311391B
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa
Signing time:             Mon 31 Jul 2023 00:06:18 +0000
ROA not before:           Mon 31 Jul 2023 00:01:18 +0000
ROA not after:            Mon 29 Jul 2024 00:06:18 +0000
asID:                     55699
IP address blocks:        113.197.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Apr 2024 07:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:67:c7:8c:21:6b:20:ea:e5:5a:02:35:58:86:db:19:03:11:39:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jul 31 00:01:18 2023 GMT
            Not After : Jul 29 00:06:18 2024 GMT
        Subject: CN=8A6A5FE761D9E12DEA7E76ADCBCCF0F44D79298D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:e1:f7:d9:c6:1d:3f:d9:5d:3b:11:1c:9a:
                    af:b9:a3:cf:78:f2:c9:5b:9a:b2:5b:48:12:73:46:
                    62:cc:fc:58:ef:ab:12:75:37:49:e3:14:e4:9b:fc:
                    b4:45:c4:77:d2:51:26:2b:04:9c:86:d8:48:90:13:
                    8f:e7:71:cd:c0:62:99:6e:f1:79:89:5a:5f:72:fe:
                    c9:18:07:91:bc:8e:8c:28:fd:48:af:a4:c6:83:bc:
                    a1:5d:18:3e:85:3f:ac:c6:fd:6c:f7:ac:0b:6e:f8:
                    35:bc:6d:0d:eb:2c:51:f5:c4:67:a7:15:d8:59:af:
                    d9:2e:d2:d4:60:2e:e8:55:7c:14:00:e8:8e:d3:02:
                    fe:df:7e:d5:fe:dc:48:ab:44:07:f0:d8:66:c8:59:
                    c0:3b:37:80:cb:40:35:93:bf:f6:b8:52:07:1e:28:
                    31:6b:e9:f5:c8:40:60:61:4d:fd:db:77:f6:39:a4:
                    f1:9d:25:18:10:af:89:19:78:81:d6:6b:48:c3:90:
                    8a:ca:54:51:4d:04:36:bd:73:db:e8:7c:11:a1:ad:
                    86:b9:45:1d:20:77:ef:f0:25:20:72:70:0e:ef:48:
                    42:e3:11:92:fa:31:a4:db:a0:da:e4:ff:58:c8:0a:
                    b8:29:76:8d:bc:f9:f5:62:86:b3:bc:8c:1c:70:79:
                    74:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6A:5F:E7:61:D9:E1:2D:EA:7E:76:AD:CB:CC:F0:F4:4D:79:29:8D
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:27:d7:e4:56:b2:27:07:2f:45:7c:d8:a6:41:ae:6b:5e:0a:
         1a:33:fb:f9:84:67:4e:6e:4e:20:44:90:24:3f:59:83:80:83:
         db:af:40:5c:23:28:90:8d:10:a7:2b:24:11:0d:5b:4f:5f:47:
         e5:77:2a:b6:aa:8f:35:50:5a:a8:ff:ea:72:4c:f7:d6:a6:b8:
         51:78:09:26:37:da:a1:59:44:3b:21:78:81:79:1d:e0:f5:e8:
         4b:b7:16:2a:cc:5c:98:1b:16:28:7e:34:97:1d:3d:76:48:63:
         9f:9e:58:3e:b4:21:ac:62:bc:da:ff:3e:9f:6e:81:0f:07:70:
         26:3c:77:c9:15:d2:84:89:23:86:77:5e:5e:61:e3:19:17:e9:
         6a:c7:31:38:db:2f:cf:a4:e7:cc:22:7a:cb:c9:2c:02:56:75:
         17:a5:af:24:04:e5:8b:41:40:e1:37:21:c2:f3:09:4e:fd:18:
         99:7b:bb:e7:6f:d7:af:87:fe:a6:c7:e0:91:e9:2a:e3:22:f4:
         d4:e2:03:d5:95:7d:30:d4:ce:e8:61:3f:4b:36:b1:f1:c1:fb:
         cc:c0:1e:ff:95:0c:d5:98:26:1a:a5:de:a7:66:1f:a9:66:63:
         c9:b7:74:d5:22:62:85:97:16:12:d2:b5:7e:ee:7d:d2:d9:0a:
         09:e9:71:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:45:21 2024 by rpki-client on console-fra.rpki-client.org