Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa
File:                     3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          VhPkgJgRuRIvFBfp5KrcbqFqQDCxgmuJXLYmVyfVrlY=
Subject key identifier:   B0:A0:1E:AC:E5:15:06:21:FA:CB:01:08:5A:E1:19:CC:C0:CB:A3:97
Certificate issuer:       /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial:       047FE31A26BA71E83F755BD28745BCBF3AB22C4F
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa
Signing time:             Wed 17 Apr 2024 03:00:01 +0000
ROA not before:           Wed 17 Apr 2024 02:55:01 +0000
ROA not after:            Wed 16 Apr 2025 03:00:01 +0000
asID:                     138818
IP address blocks:        114.141.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
                          rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7f:e3:1a:26:ba:71:e8:3f:75:5b:d2:87:45:bc:bf:3a:b2:2c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
        Validity
            Not Before: Apr 17 02:55:01 2024 GMT
            Not After : Apr 16 03:00:01 2025 GMT
        Subject: CN=B0A01EACE5150621FACB01085AE119CCC0CBA397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:3b:95:95:a6:b9:7b:e6:bf:d1:e3:1c:4a:
                    df:74:71:1a:40:bc:9d:5d:40:f0:80:57:7e:6f:e0:
                    b5:f5:12:87:53:13:2e:3c:fe:8c:af:fa:ed:07:44:
                    b5:6d:a4:4a:96:59:54:80:af:3e:ab:4c:24:65:88:
                    58:2e:82:35:0f:6d:f8:d7:3c:e9:76:ef:a4:37:c0:
                    00:f4:37:9d:bf:15:57:c7:9b:39:23:2a:b9:a2:9c:
                    a1:3c:29:07:14:09:6f:82:b6:aa:f8:61:ff:5f:8c:
                    32:3b:b3:8c:7c:35:99:d0:9c:93:b7:f6:8a:43:b9:
                    bd:ae:08:ec:54:2a:8d:c3:45:5f:b4:e5:d6:f3:2c:
                    10:1f:58:77:27:4e:6a:be:d3:5d:56:49:d3:42:8a:
                    5c:64:18:70:07:e0:12:94:53:5e:c7:db:d4:fc:35:
                    24:db:bd:4b:1a:f7:11:b7:dd:9a:c2:ed:72:01:ec:
                    bd:0a:d4:0f:de:e4:b7:d3:c5:71:28:f9:01:4d:08:
                    02:e2:dc:c7:46:99:45:fc:73:6a:e3:e6:b6:18:8b:
                    01:1f:4d:1c:42:cb:8f:71:10:d0:95:b2:75:82:2e:
                    a9:23:e0:e9:20:13:39:e2:c3:09:4b:50:50:c1:99:
                    aa:2c:02:78:2f:a2:31:4c:4d:43:95:44:76:f7:da:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A0:1E:AC:E5:15:06:21:FA:CB:01:08:5A:E1:19:CC:C0:CB:A3:97
            X509v3 Authority Key Identifier:
                keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c0:c1:30:5f:ed:ee:a4:c4:de:d2:38:e4:17:d1:e1:ac:36:
         c9:bc:62:de:b2:f7:4f:a7:d9:88:a8:1a:a8:44:3c:36:8b:4e:
         67:21:a2:61:ee:da:5d:d1:62:24:0f:99:2f:ee:f3:76:45:08:
         69:25:3b:ae:a3:92:fb:8a:db:bf:df:22:2a:b6:b4:1b:33:2e:
         46:6b:aa:46:0a:38:be:23:d6:31:10:2b:9b:39:99:dd:64:84:
         f6:47:69:c4:85:61:d6:9f:26:22:cc:28:99:4c:6d:09:1d:8d:
         63:b6:1b:c8:e2:e4:4f:9e:f9:06:83:fe:1a:60:7c:15:c6:98:
         1d:91:0e:47:d5:f4:2b:ae:1f:b5:86:b6:51:31:ef:3f:2c:62:
         b7:e1:e1:bf:b8:28:bd:7b:54:71:8f:b6:28:37:04:79:c7:fc:
         f5:64:8a:2c:a0:98:f5:71:b0:6e:cf:02:73:35:24:24:30:69:
         e9:87:e8:fe:a4:c9:51:c1:a4:28:6e:a6:e4:a6:05:d6:10:19:
         83:c1:0d:d9:3d:bb:51:aa:d6:76:54:82:5c:ed:69:db:dd:78:
         6f:bf:f7:3d:fa:d5:ca:ba:89:47:cd:4a:7e:05:43:84:a1:35:
         05:3d:0c:23:5e:59:d5:17:bf:12:68:ed:b8:8c:07:54:9c:6e:
         d9:c4:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:44:53 2024 by rpki-client on console-fra.rpki-client.org