Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37362e302f32342d3234203d3e203536323333.roa
File:                     3131312e36372e37362e302f32342d3234203d3e203536323333.roa (raw, json)
Hash identifier:          YpDRw1trPe3bCzaw7uw5SlTpjuIuAx2RCuNmS4seDio=
Subject key identifier:   2A:17:49:F8:A9:E5:5A:EF:57:0D:FC:EF:55:59:81:C6:53:94:0A:F9
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       48C0A4B8E3EBE15EE518B462DCAD993FCDD45DA2
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37362e302f32342d3234203d3e203536323333.roa
Signing time:             Mon 07 Aug 2023 14:00:00 +0000
ROA not before:           Mon 07 Aug 2023 13:55:00 +0000
ROA not after:            Mon 05 Aug 2024 14:00:00 +0000
asID:                     56233
IP address blocks:        111.67.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c0:a4:b8:e3:eb:e1:5e:e5:18:b4:62:dc:ad:99:3f:cd:d4:5d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Aug  7 13:55:00 2023 GMT
            Not After : Aug  5 14:00:00 2024 GMT
        Subject: CN=2A1749F8A9E55AEF570DFCEF555981C653940AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6b:72:24:48:91:11:f3:e1:da:1e:27:92:48:
                    dc:d2:46:c1:c9:d0:9a:85:77:3d:ae:4a:06:60:9e:
                    02:c5:2b:23:be:dd:8c:4b:c1:b2:b1:7a:b7:d9:c1:
                    b3:a7:d5:48:10:2d:ce:c1:a4:e6:42:91:2f:f8:cd:
                    07:aa:cc:98:5f:6f:d7:8f:18:30:cb:c0:c3:87:30:
                    f4:e8:db:bc:29:63:06:8b:86:a0:66:53:f0:be:df:
                    9a:72:62:6b:8b:48:2f:05:29:72:ab:4d:8e:4b:e1:
                    d7:8b:f2:63:8e:80:ee:8e:b8:4d:0d:84:3d:48:03:
                    9b:48:34:ca:ba:c4:cc:8d:e9:93:fd:b4:1d:e8:c7:
                    55:77:c2:25:2a:8f:6c:eb:ff:29:88:cd:1b:a4:ad:
                    c8:17:03:81:eb:94:ac:45:5b:6e:c5:2b:f1:33:af:
                    cb:e7:03:2a:87:c4:2d:fa:7d:8d:d6:28:45:f3:60:
                    f7:16:6c:c5:36:e4:74:bb:e2:23:7a:45:81:e0:75:
                    f9:9a:1f:f6:c9:07:20:4f:8d:c6:ee:39:b9:cd:ce:
                    65:40:15:77:90:3d:be:e0:7d:0c:e9:33:2b:82:42:
                    d7:31:37:cb:2f:11:1e:d5:2c:48:8a:38:c8:a2:a8:
                    36:3a:78:d6:6f:29:e1:78:02:67:7b:40:78:df:4a:
                    fe:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:17:49:F8:A9:E5:5A:EF:57:0D:FC:EF:55:59:81:C6:53:94:0A:F9
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37362e302f32342d3234203d3e203536323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:36:d5:91:f5:95:cb:86:0c:84:02:96:d3:dc:e7:c7:39:60:
         79:d4:bc:4d:fd:2d:90:85:85:32:0d:4d:87:8b:e4:6a:85:57:
         80:b3:e7:d1:1b:3d:5e:8c:17:f3:39:ef:a0:e7:9c:36:13:58:
         51:45:75:44:55:f6:d2:c9:d1:ec:08:2f:7a:8f:42:5e:13:8b:
         46:65:06:6c:2e:88:0f:60:01:00:0e:eb:e9:96:3b:b5:80:2f:
         fe:df:69:b6:d7:98:c9:d4:19:57:6a:70:4f:b1:a8:5a:c4:85:
         31:eb:7e:63:e4:d2:64:16:25:97:56:ce:65:f6:0f:55:96:4e:
         e5:1f:99:d9:25:a6:8c:97:73:2d:c5:ab:57:d0:77:2a:be:1c:
         e8:fa:3f:a7:63:5b:71:ec:f0:0d:19:f5:b1:9c:d6:e4:55:4c:
         5d:44:52:56:02:dd:ed:d2:a4:be:c0:16:57:19:3a:22:e2:89:
         6a:bc:2a:c0:00:06:ca:9a:9e:8d:72:40:e0:ab:45:bc:f8:d2:
         44:93:aa:72:15:e9:c4:62:fc:b4:bf:63:5a:99:b5:1f:75:38:
         fa:d9:18:03:b9:63:6a:a0:40:ab:0e:d1:fd:5c:8a:be:a0:c7:
         fc:48:38:cc:c8:93:58:4a:15:84:4e:22:02:6b:d0:5a:e3:0b:
         5e:9d:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:07:00 2024 by rpki-client on console-ams.rpki-client.org