Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3231203d3e203234353330.roa
File:                     3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (raw, json)
Hash identifier:          US1SXV+hgdxuRQjfdZVl4UlTanx6B6V1We4A6nIE/aU=
Subject key identifier:   D5:0D:A6:8B:C5:03:65:47:AC:B6:4E:B7:A6:39:F3:ED:8A:21:54:90
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       798BC396E28EB5A3712D0E601D1805AB5A292E87
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3231203d3e203234353330.roa
Signing time:             Tue 03 Sep 2024 12:00:01 +0000
ROA not before:           Tue 03 Sep 2024 11:55:01 +0000
ROA not after:            Tue 02 Sep 2025 12:00:01 +0000
asID:                     24530
IP address blocks:        119.10.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8b:c3:96:e2:8e:b5:a3:71:2d:0e:60:1d:18:05:ab:5a:29:2e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Sep  3 11:55:01 2024 GMT
            Not After : Sep  2 12:00:01 2025 GMT
        Subject: CN=D50DA68BC5036547ACB64EB7A639F3ED8A215490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:92:d5:a4:93:5d:ce:d0:0a:4f:8b:ae:98:9e:
                    40:f8:cc:d4:09:6f:0e:dd:83:fb:36:7c:71:14:a6:
                    8b:b7:85:9d:91:92:3d:b5:76:3b:bb:c9:71:de:1d:
                    f4:76:0a:09:95:b0:7a:44:3a:7a:76:a9:36:6d:c1:
                    b6:3f:75:25:86:52:f1:13:ae:ed:4e:67:f7:a0:b3:
                    60:fb:93:d4:17:33:96:43:e7:9f:8f:f1:2f:07:e8:
                    a1:73:47:ea:14:c3:f5:f2:d1:36:f8:6c:59:5d:b2:
                    11:22:56:04:cc:1a:79:a6:01:bd:ee:35:24:8a:76:
                    79:e5:ec:09:6a:96:89:e6:dc:92:c9:4b:fe:7d:fa:
                    06:54:f5:2d:46:38:a5:74:83:e0:c9:35:95:be:98:
                    34:2f:a1:c4:02:8f:bf:53:ac:ee:7f:04:cf:4b:9a:
                    f3:4b:ee:71:f6:55:7c:0e:2f:c0:6d:4c:1c:e7:16:
                    47:cc:a2:4c:4e:7c:46:d3:c2:6a:ca:1e:82:e6:20:
                    9b:5e:f3:bf:bf:b6:c4:e1:e0:8c:9b:b6:03:d9:8e:
                    70:72:6a:0a:ef:5b:d8:24:5a:2e:df:1c:a1:1d:c5:
                    1a:68:92:73:a4:45:75:8c:57:6d:96:18:46:59:1b:
                    44:b8:c6:b1:fa:75:52:de:8b:8f:d4:65:4e:42:59:
                    83:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0D:A6:8B:C5:03:65:47:AC:B6:4E:B7:A6:39:F3:ED:8A:21:54:90
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3231203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c1:2e:1a:66:8a:b3:98:31:0c:3b:c8:21:f7:26:6f:06:74:18:
         dc:c4:6c:f2:4e:35:de:66:4b:c9:8c:df:1b:f5:c8:9e:55:d4:
         fa:30:a6:d0:46:d5:b1:2d:51:1e:35:df:11:56:be:4e:01:f7:
         90:08:3a:21:17:b3:9f:b0:cd:14:d9:13:23:1e:0f:88:22:3b:
         f2:78:ca:e3:fa:45:42:81:c2:fe:02:65:3e:a3:7b:25:e8:82:
         fa:6e:38:81:60:fc:87:96:fc:da:b7:5e:ad:00:de:bf:7a:51:
         9e:06:0d:e5:d9:56:62:56:08:4a:c1:a4:45:06:a0:0b:1e:30:
         7d:66:92:d2:ac:f6:8b:35:2d:e1:b0:70:9f:82:8f:01:a5:08:
         43:e7:96:19:e3:4c:9f:5d:d7:84:0b:93:67:ea:9b:b9:e8:90:
         f1:f7:6c:36:f4:03:21:ba:3d:e9:f3:92:bf:f2:11:de:eb:1f:
         c2:ed:fc:2c:36:8b:d5:99:fc:b8:75:29:ae:a2:65:48:1d:b7:
         b0:34:f0:68:48:cc:a8:86:a7:ea:dc:aa:d8:f9:ab:43:4a:4c:
         b0:1f:70:ce:81:64:d5:e9:39:82:f4:80:67:8e:77:c1:db:f0:
         3a:35:77:a9:7d:25:8e:c9:cf:56:e0:92:ed:35:75:51:a2:4a:
         70:ec:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:20 2024 by rpki-client on console-fra.rpki-client.org