Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137372e302f32342d3234203d3e203234353330.roa
File:                     3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (raw, json)
Hash identifier:          YgVLRg3O7QRj5xGJQiVJq81SI0VTcACtqesTlVxXavs=
Subject key identifier:   BD:14:BF:59:30:52:1F:01:05:01:AA:47:E1:88:5D:AD:0D:D0:69:AD
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       6E9D500934BBABDC924BA1D8E64DAEA92F4E6CA7
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137372e302f32342d3234203d3e203234353330.roa
Signing time:             Tue 03 Sep 2024 12:00:01 +0000
ROA not before:           Tue 03 Sep 2024 11:55:01 +0000
ROA not after:            Tue 02 Sep 2025 12:00:01 +0000
asID:                     24530
IP address blocks:        119.10.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9d:50:09:34:bb:ab:dc:92:4b:a1:d8:e6:4d:ae:a9:2f:4e:6c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Sep  3 11:55:01 2024 GMT
            Not After : Sep  2 12:00:01 2025 GMT
        Subject: CN=BD14BF5930521F010501AA47E1885DAD0DD069AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:29:47:70:69:dc:06:29:32:82:56:f5:3b:
                    b1:12:18:7c:20:bb:90:39:dd:e7:93:e2:3b:00:65:
                    4b:3d:a1:19:0c:ef:ee:6b:6f:b6:68:da:e1:bc:ac:
                    e1:1a:58:38:0b:96:94:f7:22:60:2e:34:be:14:0e:
                    f5:02:3a:e2:bc:36:8e:30:9c:0d:ba:50:b3:87:36:
                    64:a5:78:0b:0a:c0:cd:21:99:7d:dc:f6:76:5a:28:
                    c8:34:6f:dd:bc:16:a8:42:cd:5e:45:e7:21:df:f4:
                    bc:4a:28:5c:60:ad:72:cb:cf:eb:09:49:81:e9:9f:
                    5f:c4:62:f8:88:a8:c2:19:12:6f:62:0d:c4:c7:6a:
                    30:f1:a4:2b:f8:b0:ec:0c:d9:e2:00:e1:63:c1:f0:
                    d0:6c:9a:80:bc:4c:09:ee:8f:28:5d:20:31:ed:85:
                    8b:71:ca:6d:89:7f:6e:b5:66:70:c8:85:2c:f4:78:
                    50:49:10:ef:9f:61:60:71:ee:d9:39:d4:52:ea:c6:
                    88:c0:ee:92:ca:39:e9:52:5d:ce:48:2b:31:b6:93:
                    ab:e9:ba:e4:0d:a3:47:51:7e:b1:df:8e:9e:a1:aa:
                    0e:84:64:a2:e7:c1:43:91:38:f9:a6:bf:89:77:e4:
                    4c:cc:49:eb:79:3d:46:8a:29:02:cd:e8:2b:5b:c1:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:14:BF:59:30:52:1F:01:05:01:AA:47:E1:88:5D:AD:0D:D0:69:AD
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137372e302f32342d3234203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:2f:14:6a:b5:1e:68:db:ec:c9:d8:86:53:7f:13:e0:15:
         e9:72:6f:32:81:35:3b:59:a9:e7:bc:7e:b5:a1:bc:e1:08:df:
         f7:bf:df:4f:89:4d:9e:1f:4b:45:6a:13:27:46:5a:a5:0f:53:
         a9:ea:3e:dc:7f:15:4c:6c:3d:7b:c6:8e:af:96:24:b7:26:ef:
         b0:7c:1d:c7:70:3c:fa:fd:7f:91:a4:e1:05:fc:c0:9b:64:f9:
         74:39:cd:06:64:92:47:57:be:4b:dd:a7:cb:b7:81:75:01:d3:
         4e:35:6c:36:d2:ba:ca:93:e6:dd:96:10:16:92:06:77:84:c8:
         e0:5a:2b:0a:75:1a:10:54:ea:ed:86:d0:2d:3f:62:ef:89:bb:
         07:fa:2c:05:65:8e:17:70:6a:2c:65:e5:c9:19:4d:0d:53:3c:
         33:f0:70:24:dd:9c:19:7c:d1:90:69:c4:eb:d4:a2:83:1e:81:
         87:d6:48:62:93:2f:86:ae:3b:dd:b3:01:0c:aa:c4:93:03:38:
         ab:21:39:8e:d0:0f:c9:49:a3:56:ee:49:4a:7d:16:7e:05:ad:
         26:6a:b3:c8:a2:75:37:ce:4f:37:42:0d:81:74:95:b6:52:9d:
         ca:01:16:bd:6f:d6:38:8f:c0:2c:02:17:86:7e:86:bd:b5:99:
         3e:c9:08:4d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbp1QCTS7q9ySS6HY5k2uqS9ObKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNC
RjcxRkI0MDAeFw0yNDA5MDMxMTU1MDFaFw0yNTA5MDIxMjAwMDFaMDMxMTAvBgNV
BAMTKEJEMTRCRjU5MzA1MjFGMDEwNTAxQUE0N0UxODg1REFEMEREMDY5QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxylHcGncBikyglb1O7ESGHwg
u5A53eeT4jsAZUs9oRkM7+5rb7Zo2uG8rOEaWDgLlpT3ImAuNL4UDvUCOuK8No4w
nA26ULOHNmSleAsKwM0hmX3c9nZaKMg0b928FqhCzV5F5yHf9LxKKFxgrXLLz+sJ
SYHpn1/EYviIqMIZEm9iDcTHajDxpCv4sOwM2eIA4WPB8NBsmoC8TAnujyhdIDHt
hYtxym2Jf261ZnDIhSz0eFBJEO+fYWBx7tk51FLqxojA7pLKOelSXc5IKzG2k6vp
uuQNo0dRfrHfjp6hqg6EZKLnwUOROPmmv4l35EzMSet5PUaKKQLN6CtbwZaNAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUvRS/WTBSHwEFAapH4YhdrQ3Qaa0wHwYDVR0j
BBgwFoAUb2o1MBmKm3ZXpjb+zPs5879x+0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NDIzNDRiZS1mOWZiLTQ2MzQtOTJkNi04OTRkZDUzOGNhZGYvMC82RjZBMzUzMDE5
OEE5Qjc2NTdBNjM2RkVDQ0ZCMzlGM0JGNzFGQjQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNCRjcx
RkI0MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05
MmQ2LTg5NGRkNTM4Y2FkZi8wLzMxMzEzOTJlMzEzMDJlMzEzNzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcKsTANBgkqhkiG
9w0BAQsFAAOCAQEAUfUvFGq1Hmjb7MnYhlN/E+AV6XJvMoE1O1mp57x+taG84Qjf
97/fT4lNnh9LRWoTJ0ZapQ9Tqeo+3H8VTGw9e8aOr5YktybvsHwdx3A8+v1/kaTh
BfzAm2T5dDnNBmSSR1e+S92ny7eBdQHTTjVsNtK6ypPm3ZYQFpIGd4TI4ForCnUa
EFTq7YbQLT9i74m7B/osBWWOF3BqLGXlyRlNDVM8M/BwJN2cGXzRkGnE69Sigx6B
h9ZIYpMvhq473bMBDKrEkwM4qyE5jtAPyUmjVu5JSn0WfgWtJmqzyKJ1N85PN0IN
gXSVtlKdygEWvW/WOI/ALAIXhn6GvbWZPskITQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:33 2024 by rpki-client on console-ams.rpki-client.org