Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa
File:                     3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          1sCdYqliqmouQr9aO3moY0v3zqzk2NgBsVyNMs0i8Xo=
Subject key identifier:   F3:3B:85:80:3A:01:B9:53:E3:5A:DD:95:C1:24:75:18:85:BB:83:7D
Certificate issuer:       /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial:       17D20A367B2A59C19C58E43C7CD635184B04CE50
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa
Signing time:             Wed 17 Apr 2024 03:00:01 +0000
ROA not before:           Wed 17 Apr 2024 02:55:01 +0000
ROA not after:            Wed 16 Apr 2025 03:00:01 +0000
asID:                     138818
IP address blocks:        114.141.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
                          rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d2:0a:36:7b:2a:59:c1:9c:58:e4:3c:7c:d6:35:18:4b:04:ce:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
        Validity
            Not Before: Apr 17 02:55:01 2024 GMT
            Not After : Apr 16 03:00:01 2025 GMT
        Subject: CN=F33B85803A01B953E35ADD95C124751885BB837D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:ce:c6:05:4a:66:8c:33:90:ba:fe:2e:6f:
                    33:4c:e3:d7:96:c9:55:01:ef:9f:6a:de:65:a4:8d:
                    6e:57:b8:93:dc:d4:52:00:87:ce:c7:fc:51:f3:80:
                    ca:f7:cd:92:40:a7:d2:6c:97:9e:4b:83:53:87:78:
                    b8:e0:80:f2:91:a6:55:18:bb:e6:cd:2d:65:d6:2b:
                    5d:5d:97:95:bc:bc:f5:85:15:91:f0:49:45:39:69:
                    db:56:e5:bd:36:66:91:76:15:94:3f:ce:06:6e:e1:
                    82:c4:a6:df:d0:a0:e0:63:1c:84:9c:e4:74:c5:6d:
                    99:cf:90:21:d2:53:f7:3d:4e:bd:98:00:12:ef:ab:
                    a6:10:95:ab:76:e4:a4:81:70:ea:bf:bb:e5:80:b4:
                    43:ce:e6:2a:d4:b8:fd:46:0f:2c:68:be:68:7d:9b:
                    4a:a0:15:98:82:74:82:c5:2f:be:f2:26:ef:e5:d0:
                    15:93:23:61:12:45:e9:ba:d4:c9:c3:61:71:70:5b:
                    e9:6d:e7:28:45:5b:36:51:fa:42:2e:73:43:49:76:
                    7a:a3:50:c1:9f:f0:d3:b5:76:f7:68:26:8c:d8:17:
                    b0:8b:ea:28:4a:b3:1d:ee:d6:6f:94:a9:29:5a:6c:
                    9f:12:ab:e1:c8:70:18:24:26:33:df:5f:d9:86:eb:
                    5e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3B:85:80:3A:01:B9:53:E3:5A:DD:95:C1:24:75:18:85:BB:83:7D
            X509v3 Authority Key Identifier:
                keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:71:a9:54:9d:e0:cb:25:7f:c8:f4:25:27:2c:cc:62:90:cc:
         1b:89:4d:65:c6:95:3c:60:cf:3a:22:42:50:06:b1:03:00:85:
         c9:44:c2:24:bd:1a:43:ea:ac:a4:90:44:85:2c:6b:9e:bb:11:
         f6:76:81:5d:53:a6:92:02:0a:51:bc:ec:0f:0b:65:f8:6c:17:
         e5:e0:8a:43:12:b5:7b:00:02:5f:35:59:9c:fd:d7:e3:26:ba:
         53:c0:fa:dd:32:0e:6b:5c:b2:ed:c9:90:17:b4:6d:de:cd:9b:
         f6:44:0d:9b:b5:41:f0:2e:6c:96:eb:ad:04:01:8c:26:26:bf:
         88:5e:f5:fd:61:31:4c:05:f7:c8:17:8b:ce:2f:80:3b:01:9c:
         bc:ee:20:f7:fe:50:13:c0:f8:c2:cc:1e:32:74:0c:af:10:e6:
         32:b8:90:b3:08:8b:22:bc:e2:67:01:7e:34:ff:42:29:22:f2:
         09:87:1d:03:07:c7:be:64:6d:07:fb:77:1f:d9:76:21:6a:d3:
         df:bb:b0:fc:99:0a:c9:80:7a:72:c3:83:69:b7:e1:4d:76:f7:
         75:44:3f:23:a9:a6:82:6e:0f:ff:08:a2:78:e0:6c:61:49:3d:
         8e:e1:fb:6a:78:a6:cd:9f:f1:9a:87:d3:a1:28:79:7e:76:e6:
         9c:e9:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:44:53 2024 by rpki-client on console-fra.rpki-client.org