Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa
File:                     3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          M4G3+2ND4JNQkzKKiPu/TTGwUpDm4YJaaeAdjCfIIk4=
Subject key identifier:   CB:DC:5C:B3:97:56:82:AD:2C:C0:14:33:0B:F6:3F:EE:C4:55:D2:DE
Certificate issuer:       /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial:       425CE31947751E0C5AFCB3A3946DC36C8833E1FB
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa
Signing time:             Wed 17 Apr 2024 03:00:01 +0000
ROA not before:           Wed 17 Apr 2024 02:55:01 +0000
ROA not after:            Wed 16 Apr 2025 03:00:01 +0000
asID:                     138818
IP address blocks:        114.141.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
                          rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5c:e3:19:47:75:1e:0c:5a:fc:b3:a3:94:6d:c3:6c:88:33:e1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
        Validity
            Not Before: Apr 17 02:55:01 2024 GMT
            Not After : Apr 16 03:00:01 2025 GMT
        Subject: CN=CBDC5CB3975682AD2CC014330BF63FEEC455D2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:f5:b2:5d:8f:f5:91:cc:4a:61:20:db:1a:
                    12:86:16:26:0c:ff:3e:69:ed:02:09:eb:ef:fc:3f:
                    c0:98:c1:48:a2:4e:d5:03:ba:dd:ac:a1:f7:e8:73:
                    81:6a:44:cc:27:34:93:96:3e:5e:9e:37:f8:fd:78:
                    6b:e8:d6:88:bb:ad:81:6b:50:37:69:fd:66:4a:fa:
                    60:56:a1:ac:67:a4:f8:74:d9:fa:09:b6:38:82:f1:
                    eb:99:08:f3:43:aa:d7:40:c1:4c:7a:3d:fe:93:4d:
                    d9:02:82:b8:22:2a:4b:9b:de:85:a3:8f:06:bb:4b:
                    83:a6:35:01:2d:f8:72:63:e0:3b:5b:55:d8:69:fa:
                    99:59:36:83:06:df:02:ee:22:b8:e8:c7:52:89:57:
                    83:81:cd:4c:50:f2:b3:06:f6:e0:94:df:c4:63:91:
                    56:e4:7b:cd:f6:9f:ef:ba:8a:4e:b3:48:16:13:9d:
                    a2:d0:ef:63:b9:ad:78:93:c2:32:42:3e:43:ca:5d:
                    6e:f9:2c:11:aa:32:80:a4:47:42:62:d5:f1:c6:c7:
                    51:2b:17:15:10:a7:8d:fa:69:15:4c:e3:69:37:69:
                    06:4d:8a:0e:bc:70:c7:bb:6f:c3:e9:52:f4:71:af:
                    d0:69:71:9a:84:10:f5:57:c6:79:81:09:8b:2b:7d:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DC:5C:B3:97:56:82:AD:2C:C0:14:33:0B:F6:3F:EE:C4:55:D2:DE
            X509v3 Authority Key Identifier:
                keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a0:13:fa:cd:c6:11:30:ea:c5:88:6e:8f:4e:76:5e:09:b9:
         09:9c:c1:67:50:01:d9:52:f5:df:c8:26:c1:f8:e5:f9:40:44:
         cc:9d:7c:14:16:17:82:8a:77:17:f5:87:c5:70:b5:e8:c8:cc:
         44:a2:e7:e2:32:fe:71:df:25:7b:6b:39:8a:71:be:ac:a7:da:
         66:e3:2b:66:69:0e:19:29:99:f2:fd:90:5f:26:7f:70:5a:11:
         df:de:5d:52:ee:1a:b5:cc:2a:2a:1a:0b:a8:38:e9:2c:ce:99:
         45:73:81:5c:34:c5:99:21:50:75:5d:45:a5:10:b5:ab:aa:ab:
         a8:e9:76:3a:4c:1f:bd:ac:98:51:fd:68:ef:05:e3:d1:e5:33:
         12:ac:38:af:c5:49:61:7c:f7:9f:94:e2:e4:35:df:c0:13:26:
         ef:e2:6d:b5:8f:3c:12:a0:42:1e:ab:d4:15:0e:ce:51:fc:44:
         82:66:57:47:e8:96:f7:ca:c2:81:91:20:b5:f5:77:15:cf:03:
         1a:8b:73:19:1b:3a:52:84:b0:20:a6:1b:6c:37:c9:0e:8f:9d:
         5a:b0:21:aa:7a:06:ae:63:8d:d4:27:1b:ab:21:19:9b:9b:18:
         a9:a7:ab:09:78:fc:8f:1a:31:ee:1d:3f:88:52:97:81:64:d7:
         5d:d3:80:9f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQlzjGUd1Hgxa/LOjlG3DbIgz4fswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw
REMxNDY0RjAeFw0yNDA0MTcwMjU1MDFaFw0yNTA0MTYwMzAwMDFaMDMxMTAvBgNV
BAMTKENCREM1Q0IzOTc1NjgyQUQyQ0MwMTQzMzBCRjYzRkVFQzQ1NUQyREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbfWyXY/1kcxKYSDbGhKGFiYM
/z5p7QIJ6+/8P8CYwUiiTtUDut2soffoc4FqRMwnNJOWPl6eN/j9eGvo1oi7rYFr
UDdp/WZK+mBWoaxnpPh02foJtjiC8euZCPNDqtdAwUx6Pf6TTdkCgrgiKkub3oWj
jwa7S4OmNQEt+HJj4DtbVdhp+plZNoMG3wLuIrjox1KJV4OBzUxQ8rMG9uCU38Rj
kVbke832n++6ik6zSBYTnaLQ72O5rXiTwjJCPkPKXW75LBGqMoCkR0Ji1fHGx1Er
FxUQp436aRVM42k3aQZNig68cMe7b8PpUvRxr9BpcZqEEPVXxnmBCYsrfUovAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUy9xcs5dWgq0swBQzC/Y/7sRV0t4wHwYDVR0j
BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE
NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx
NDY0Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3ZmM1NGZiLTcyNGUtNDMxNi1i
OWJjLTFjNGIwNmVhNTdhZS8wLzMxMzEzNDJlMzEzNDMxMmUzOTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAco1eMA0GCSqG
SIb3DQEBCwUAA4IBAQCYoBP6zcYRMOrFiG6PTnZeCbkJnMFnUAHZUvXfyCbB+OX5
QETMnXwUFheCincX9YfFcLXoyMxEoufiMv5x3yV7azmKcb6sp9pm4ytmaQ4ZKZny
/ZBfJn9wWhHf3l1S7hq1zCoqGguoOOkszplFc4FcNMWZIVB1XUWlELWrqquo6XY6
TB+9rJhR/WjvBePR5TMSrDivxUlhfPeflOLkNd/AEybv4m21jzwSoEIeq9QVDs5R
/ESCZldH6Jb3ysKBkSC19XcVzwMai3MZGzpShLAgphtsN8kOj51asCGqegauY43U
JxurIRmbmxipp6sJePyPGjHuHT+IUpeBZNdd04Cf
-----END CERTIFICATE-----
Generated at Sat May 4 15:44:53 2024 by rpki-client on console-fra.rpki-client.org