Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3231203d3e203234353330.roa
File:                     3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (raw, json)
Hash identifier:          D9dTo3ouN+8YxT5D8vLw7bLe9+Sp7FzzI5MsDGiMj4c=
Subject key identifier:   5F:5C:6B:E8:2B:95:16:C3:6B:48:99:7D:44:FB:A7:2D:C1:43:79:1D
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       66B3AC811FCCB19C1711A4C9AA642D9BDBE5542E
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3231203d3e203234353330.roa
Signing time:             Tue 03 Oct 2023 12:00:00 +0000
ROA not before:           Tue 03 Oct 2023 11:55:00 +0000
ROA not after:            Tue 01 Oct 2024 12:00:00 +0000
asID:                     24530
IP address blocks:        119.10.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b3:ac:81:1f:cc:b1:9c:17:11:a4:c9:aa:64:2d:9b:db:e5:54:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Oct  3 11:55:00 2023 GMT
            Not After : Oct  1 12:00:00 2024 GMT
        Subject: CN=5F5C6BE82B9516C36B48997D44FBA72DC143791D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:4d:8a:04:38:45:40:00:96:11:69:a3:31:
                    74:7f:d4:9e:05:18:a4:67:81:f5:cd:ed:7a:31:48:
                    6a:d8:db:30:19:8b:26:3b:13:c4:6e:93:0a:ed:0e:
                    9d:05:18:e2:3a:3f:96:c4:f4:50:4b:90:85:95:ea:
                    3f:6c:eb:35:96:14:35:9b:4f:03:a5:b6:34:48:fe:
                    4e:a3:ec:3d:71:10:94:bd:2c:a5:8d:13:19:b2:f7:
                    db:3d:b6:d5:36:de:62:60:02:a6:79:b7:bc:de:ba:
                    c1:c9:8b:4e:17:55:39:30:f8:63:c0:67:8f:16:05:
                    52:6a:2d:6b:17:7b:73:f6:fe:66:5c:9e:61:5c:f4:
                    c8:eb:05:ee:c8:80:e1:90:5f:09:ab:4a:11:b8:93:
                    fb:44:f1:ed:68:4d:47:e7:fc:7a:be:64:6b:3e:f5:
                    df:c5:b0:7e:b8:6f:dc:11:fa:f5:6c:55:7e:d1:cf:
                    08:c3:39:1e:54:53:46:70:e2:e1:61:f1:8e:24:a8:
                    f3:70:fa:19:28:0d:ae:2e:ce:3d:23:ca:a8:e9:ca:
                    33:d8:05:70:5a:cb:1d:76:cc:cf:46:5c:bb:ac:8b:
                    bb:12:26:e1:71:de:b8:ec:4c:7f:35:8d:b4:65:f2:
                    14:0b:a3:6f:67:e0:87:06:66:58:fa:56:83:f6:50:
                    32:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5C:6B:E8:2B:95:16:C3:6B:48:99:7D:44:FB:A7:2D:C1:43:79:1D
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3231203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:bd:58:24:60:14:39:a2:83:68:2f:2e:77:86:92:b7:b6:d5:
         49:aa:44:40:c0:2e:ee:ca:0c:30:e0:4d:e6:f8:26:be:29:c0:
         d0:d0:f3:2d:ba:c9:dc:6e:76:70:be:1d:d2:49:e7:ef:c3:a7:
         1f:63:e8:86:db:98:4f:12:32:6d:ba:11:2a:1a:a8:31:5e:12:
         f5:ff:09:cd:83:35:a5:96:99:7a:3d:e0:2c:6c:5c:c5:16:b9:
         1e:9f:b8:64:23:45:68:9d:99:d8:00:d9:23:e5:6d:b1:25:df:
         83:e3:c8:e4:26:d3:ff:33:20:ef:c5:ed:c3:d1:3f:c3:25:db:
         7e:42:2a:e3:fa:fd:53:28:30:50:c5:a9:d9:c4:f9:e1:d2:66:
         dd:3b:68:a6:63:c4:15:d7:28:77:4b:78:11:91:d9:80:1e:2b:
         a8:bb:8f:a5:3d:1c:f2:5a:18:a6:80:65:0d:d8:f9:38:6e:8a:
         5c:a8:f7:0e:98:53:98:0f:87:c3:0f:81:c7:ec:a2:cc:79:85:
         53:75:25:05:5c:89:0d:f3:7e:5d:72:06:0b:2e:65:df:8e:be:
         6b:92:da:15:38:d7:66:01:ef:97:52:a0:03:67:05:99:61:89:
         33:f2:d8:b7:ef:85:5a:79:fb:bc:f2:e3:20:f2:f8:a1:64:3d:
         94:da:be:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:53:01 2024 by rpki-client on console-fra.rpki-client.org