Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138312e302f32342d3234203d3e203234353330.roa
File:                     3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (raw, json)
Hash identifier:          bzWziTbzvXpdTSKGk0JBgQfvjdNJAC+JqzAeCmXTbxo=
Subject key identifier:   9C:75:2A:AD:02:23:71:C1:50:2B:6B:DA:D0:05:EC:74:76:B0:76:6F
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       31284C32A4D4ABFD10346DEF5DA31DBDDA071740
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138312e302f32342d3234203d3e203234353330.roa
Signing time:             Tue 03 Oct 2023 12:00:02 +0000
ROA not before:           Tue 03 Oct 2023 11:55:02 +0000
ROA not after:            Tue 01 Oct 2024 12:00:02 +0000
asID:                     24530
IP address blocks:        119.10.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:28:4c:32:a4:d4:ab:fd:10:34:6d:ef:5d:a3:1d:bd:da:07:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Oct  3 11:55:02 2023 GMT
            Not After : Oct  1 12:00:02 2024 GMT
        Subject: CN=9C752AAD022371C1502B6BDAD005EC7476B0766F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b7:90:30:c5:c2:1b:de:9d:51:3d:8e:94:d0:
                    ab:88:40:ea:7a:dc:72:22:0c:61:50:cd:b9:78:ce:
                    a9:d2:43:d2:70:b5:ba:cc:a6:b5:a4:e8:cc:99:7c:
                    b2:60:1d:5f:6b:c8:7a:0f:54:8d:c1:69:77:bc:62:
                    f7:0d:af:94:76:71:5d:e3:27:33:e2:d4:bc:b7:9e:
                    1d:2b:5b:e8:b8:37:8c:c1:4d:e7:dd:97:e7:97:8b:
                    9d:a5:a6:d5:e4:f7:8d:cf:a9:2e:19:d3:bc:59:ed:
                    46:73:e4:39:9e:58:ec:1c:d1:9f:f6:63:a0:61:e9:
                    dd:5b:9a:7e:4d:53:db:b9:f4:df:ff:8e:58:3a:6f:
                    a0:0d:43:d2:a9:81:ee:f8:ee:e1:f9:bc:70:fd:77:
                    50:ab:39:11:60:10:2a:f3:99:cc:57:7f:71:b4:7d:
                    ec:65:e4:54:ce:22:96:3b:d3:be:50:0d:b5:22:5b:
                    be:65:95:a7:54:cf:a5:98:48:43:5a:8c:0f:43:08:
                    84:f9:df:01:79:3c:27:db:6f:b6:d2:ba:7a:a8:72:
                    96:84:4a:da:9c:d3:b3:c1:07:90:b7:06:58:6f:8d:
                    b4:91:af:be:2e:6c:01:e2:95:86:62:29:c3:69:ac:
                    38:1f:43:34:a2:62:2a:2f:28:0f:dc:54:76:59:01:
                    a7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:75:2A:AD:02:23:71:C1:50:2B:6B:DA:D0:05:EC:74:76:B0:76:6F
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138312e302f32342d3234203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:da:29:97:01:ab:9e:4b:d2:e7:bc:57:c8:d1:f5:38:6c:f4:
         83:47:fe:40:72:80:3b:04:74:1a:3e:94:2c:1c:aa:fc:68:51:
         d9:6d:90:97:0f:2a:23:c8:8f:19:72:e1:d3:9e:3c:d6:9e:36:
         68:d1:f3:e6:2b:1b:6e:ef:cc:13:a6:a8:d5:e3:ac:f4:0c:96:
         58:1e:ca:68:8f:67:16:d0:eb:83:e0:c1:c0:39:cb:bf:71:1b:
         9e:2b:31:f0:d0:b2:a1:c7:32:9e:14:9c:67:47:d6:10:99:6c:
         77:48:fe:36:fc:47:d9:1e:88:80:8d:5d:3a:a6:f1:3f:bd:6e:
         2f:f7:c4:1a:88:d3:3d:cb:1f:36:ba:29:1a:be:77:f1:61:5d:
         78:b9:58:01:77:11:a0:d6:ce:ab:da:1a:b5:df:0f:56:dc:cf:
         a2:66:54:d7:f7:f0:82:05:05:e9:3a:bb:c6:0b:dc:9c:2e:dc:
         3a:e8:e0:4b:fa:eb:50:2a:be:f5:f9:09:2b:35:67:00:a8:d2:
         1b:3e:3d:1b:16:0c:fb:b0:38:b9:75:a8:40:e8:5a:53:c6:bb:
         94:77:e8:16:00:37:7e:cb:10:b3:1e:72:76:f4:62:20:2d:3c:
         cb:d7:67:c2:e0:db:8e:b0:d1:17:0c:d2:14:7b:45:92:d7:3b:
         cf:05:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:53:01 2024 by rpki-client on console-fra.rpki-client.org