Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37332e302f32342d3234203d3e203536323333.roa
File:                     3131312e36372e37332e302f32342d3234203d3e203536323333.roa (raw, json)
Hash identifier:          Twp5y9LhX8RaanjZf3+r7pqHw1RlRnHTGTxXAB6sYoQ=
Subject key identifier:   A7:6F:8B:B4:F1:83:6E:4C:76:98:D6:51:B2:D3:E8:6F:B2:9C:7D:AB
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       6CE32FAC51CA641A02E9A959A7632B979FDD7958
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37332e302f32342d3234203d3e203536323333.roa
Signing time:             Mon 07 Aug 2023 12:00:00 +0000
ROA not before:           Mon 07 Aug 2023 11:55:00 +0000
ROA not after:            Mon 05 Aug 2024 12:00:00 +0000
asID:                     56233
IP address blocks:        111.67.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 17:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e3:2f:ac:51:ca:64:1a:02:e9:a9:59:a7:63:2b:97:9f:dd:79:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Aug  7 11:55:00 2023 GMT
            Not After : Aug  5 12:00:00 2024 GMT
        Subject: CN=A76F8BB4F1836E4C7698D651B2D3E86FB29C7DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:04:4d:ab:91:f6:fe:97:b4:89:ef:33:d2:
                    22:35:56:e4:a1:29:c6:1a:4f:87:e2:9a:ea:ef:fc:
                    79:3e:75:f4:27:cd:4a:96:14:be:a5:60:e4:a2:7e:
                    a7:ed:ff:8b:a8:c2:a7:d9:51:5d:cb:46:1b:e3:00:
                    49:f1:cd:c1:2a:09:26:16:72:f9:05:df:75:e6:6d:
                    be:f1:37:39:bc:af:0a:60:9b:9d:c9:1f:d3:78:5d:
                    60:fb:d7:b7:00:5b:29:d8:32:03:a6:35:97:68:70:
                    69:af:c2:66:3f:ac:93:d5:9e:a2:00:e4:78:95:9c:
                    fe:63:75:b7:a9:b1:22:ea:45:f4:db:da:10:58:fc:
                    66:2a:65:68:ec:95:86:c3:9e:80:65:2b:ac:bf:2b:
                    00:ef:c5:07:c6:cd:58:0b:1c:fd:fc:b0:9f:80:9b:
                    fa:0b:53:ac:be:72:1d:70:aa:b4:17:9f:ff:c5:56:
                    a2:92:34:4c:3d:43:4a:6a:ea:12:14:e0:17:a0:53:
                    0e:f3:16:15:56:64:31:e6:20:ec:a8:a4:0d:e1:32:
                    74:6d:ee:a2:91:72:9b:11:cd:87:b0:a8:7b:55:af:
                    09:1a:5b:43:1f:3c:7a:1f:23:ee:68:00:2f:e2:cf:
                    13:ce:65:60:43:6d:d8:49:c1:da:c7:c8:0b:af:48:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6F:8B:B4:F1:83:6E:4C:76:98:D6:51:B2:D3:E8:6F:B2:9C:7D:AB
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37332e302f32342d3234203d3e203536323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:61:3d:e7:c6:e3:23:14:0c:d8:d3:66:f5:09:7e:99:b9:74:
         6d:a0:82:e2:0e:03:55:b3:ed:9a:c1:61:79:43:59:90:2d:3a:
         f1:63:0f:a4:42:98:bd:23:00:4f:9f:a4:f8:82:4e:55:c4:63:
         8c:4a:d0:4b:3a:61:d5:4f:3a:35:f8:e2:fc:ec:ee:1c:96:b1:
         b2:9a:17:89:ac:8a:c1:31:37:db:60:a7:0a:02:5b:83:71:d5:
         7b:c2:1c:cc:18:2e:7d:6e:b8:e8:15:03:f9:e9:af:6f:ee:07:
         84:d4:3b:b1:ec:f3:50:c6:50:0f:fe:5c:91:5a:6e:30:fc:9d:
         67:0d:b1:8a:55:6c:18:78:63:e4:eb:a5:b1:ac:b4:a5:52:aa:
         be:62:cc:16:ee:87:16:e6:97:62:a9:95:80:6b:36:c2:a1:01:
         00:4d:ca:a1:d3:54:7b:69:47:0a:e6:be:80:6c:bd:3b:49:30:
         c9:58:62:f6:27:58:ea:08:39:89:1f:12:3b:d4:7d:c3:e4:7c:
         27:1e:60:e5:79:c3:a0:f5:39:9b:73:19:0c:ca:89:23:76:fe:
         b0:9e:db:a6:03:74:3e:95:dd:c4:db:21:4f:ec:34:28:43:97:
         56:c7:4a:63:60:c1:1c:56:94:88:d6:bf:38:fd:b8:d8:0f:49:
         57:88:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 13:26:17 2024 by rpki-client on console-fra.rpki-client.org