Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38302e302f32332d3234203d3e203535363931.roa
File:                     3131312e36372e38302e302f32332d3234203d3e203535363931.roa (raw, json)
Hash identifier:          rPTtIDP8QV+FMkRqo/ageoGb4RNjbTQlqfmEIg+k3ps=
Subject key identifier:   AF:EC:AA:AD:1F:66:9A:91:9E:50:1A:BC:C5:C2:F6:81:7F:62:BD:CC
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       2FA8F11C0E710FA73FFBC774CCF9F4651F7EBBF4
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38302e302f32332d3234203d3e203535363931.roa
Signing time:             Mon 31 Jul 2023 00:06:15 +0000
ROA not before:           Mon 31 Jul 2023 00:01:15 +0000
ROA not after:            Mon 29 Jul 2024 00:06:15 +0000
asID:                     55691
IP address blocks:        111.67.80.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 May 2024 15:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a8:f1:1c:0e:71:0f:a7:3f:fb:c7:74:cc:f9:f4:65:1f:7e:bb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jul 31 00:01:15 2023 GMT
            Not After : Jul 29 00:06:15 2024 GMT
        Subject: CN=AFECAAAD1F669A919E501ABCC5C2F6817F62BDCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6f:59:ec:d5:42:ef:75:5a:53:8a:d5:b6:81:
                    ab:f6:f0:d5:4f:70:e4:2f:c7:c4:fa:4f:29:8e:c6:
                    e9:9b:c0:c3:b1:e6:66:86:4d:a4:0a:4d:b2:5e:0d:
                    be:e3:16:c4:cf:2c:da:8d:2d:cd:e0:8d:65:53:72:
                    83:ad:43:8b:5f:2f:fa:46:c7:2f:31:e7:c0:aa:e7:
                    92:60:a9:8f:57:56:bb:a8:60:08:e0:1a:e2:de:ff:
                    e2:0d:b3:73:c7:a1:9b:eb:b1:19:7a:4b:e6:46:fb:
                    58:ea:b5:95:13:cd:b4:e5:33:af:1e:97:ea:9b:34:
                    e9:a6:83:3e:40:1f:f7:5f:c6:b1:09:25:80:8f:e1:
                    24:20:6c:88:f5:84:4a:00:2d:d0:44:d4:0a:c9:7e:
                    56:59:36:0c:9e:c1:da:7f:8c:65:47:99:66:8a:7f:
                    d1:92:db:48:10:4f:4f:e0:7c:71:b5:0a:98:e0:5a:
                    63:19:00:07:e6:a5:93:08:bd:46:3b:32:bd:60:24:
                    94:7e:7b:bd:17:a7:59:23:a8:07:91:1d:ff:80:c7:
                    96:41:41:48:05:d4:d0:fd:90:2d:59:02:a7:d6:a8:
                    2e:a4:5d:52:d9:6f:51:f2:f3:79:96:b4:ac:92:d1:
                    ae:22:71:d0:cb:07:2c:ed:e7:3c:6e:00:ba:f9:9c:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EC:AA:AD:1F:66:9A:91:9E:50:1A:BC:C5:C2:F6:81:7F:62:BD:CC
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38302e302f32332d3234203d3e203535363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:e7:63:17:0d:b4:60:10:16:09:24:9e:f0:fc:d7:18:91:
         4f:e9:69:19:bc:b0:60:fb:a8:0b:35:6c:cb:14:3d:4f:0a:69:
         71:f2:ee:73:b6:02:69:c1:09:a8:75:ce:56:bb:06:21:d7:9f:
         0a:1b:da:10:66:af:fd:ab:b9:52:90:31:12:0c:eb:98:6f:1a:
         a6:4e:7e:9e:c9:d7:25:74:df:10:99:c2:0c:a8:a8:11:b8:20:
         a6:81:e8:b5:e1:be:d7:b0:6e:5e:13:b0:5e:75:28:3d:9b:63:
         04:4d:c8:ee:4a:00:be:58:ae:76:e1:44:22:64:49:13:52:63:
         a1:5e:44:ec:e7:bb:d6:1e:b7:5d:53:57:e5:4b:8d:0b:a2:ff:
         de:f1:d1:ae:eb:4e:00:b0:33:8c:22:81:d6:7a:f8:fd:8f:d3:
         f5:c5:15:21:22:a3:94:d7:00:a0:88:5c:17:f0:f2:a7:c3:c0:
         c9:c4:c9:8d:72:70:d1:44:53:4b:f6:4b:89:95:4b:80:53:6d:
         fc:f7:84:f8:c3:4c:c5:06:55:3a:8f:0e:60:a1:ad:e3:ef:88:
         3f:fc:d5:55:da:f0:4e:9c:09:32:d3:27:40:d0:da:d7:5e:d6:
         14:b6:ad:82:16:ae:fa:53:57:8c:da:94:f7:fc:b4:3e:1b:39:
         22:ab:73:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 16:58:50 2024 by rpki-client on console-fra.rpki-client.org