Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138322e302f32332d3233203d3e203234353330.roa
File:                     3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (raw, json)
Hash identifier:          IJ8doRTXhJWGb1Mf+xyUwCl2Ep9sdb0qHxfCKNG5u+4=
Subject key identifier:   A0:04:6C:CB:7E:06:F7:5A:C1:4C:F9:07:DC:FA:B6:C8:E1:5A:21:E3
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       4BB940CBA2B39A5073A4F9369224FBCF6AE93494
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138322e302f32332d3233203d3e203234353330.roa
Signing time:             Tue 03 Oct 2023 12:00:01 +0000
ROA not before:           Tue 03 Oct 2023 11:55:01 +0000
ROA not after:            Tue 01 Oct 2024 12:00:01 +0000
asID:                     24530
IP address blocks:        119.10.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b9:40:cb:a2:b3:9a:50:73:a4:f9:36:92:24:fb:cf:6a:e9:34:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Oct  3 11:55:01 2023 GMT
            Not After : Oct  1 12:00:01 2024 GMT
        Subject: CN=A0046CCB7E06F75AC14CF907DCFAB6C8E15A21E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:69:1b:04:85:ec:77:97:c5:bc:30:32:e0:
                    e7:bb:26:c5:ff:d0:33:e6:52:3d:93:73:40:d0:d5:
                    c9:65:85:55:16:bd:13:a3:48:ec:bd:94:ce:8a:27:
                    75:32:16:2f:c9:8e:42:c6:06:53:5d:eb:44:78:4d:
                    b9:83:cd:33:94:e5:16:eb:9e:ba:f6:b2:ce:da:11:
                    cd:27:a4:74:98:2d:40:ad:bc:4a:cb:49:f8:89:ac:
                    8c:22:64:bf:ef:df:e7:4c:35:39:6c:dd:17:e5:5d:
                    25:15:7e:78:ea:fa:99:95:ae:f6:cc:47:37:05:a8:
                    85:d5:6d:82:0f:07:df:ff:80:bc:d9:55:94:99:74:
                    1f:bf:6b:d0:3d:4b:10:02:99:84:04:19:18:53:93:
                    bd:dd:fa:06:1e:d3:70:7e:fd:b0:8a:2b:88:e5:34:
                    bd:da:00:7d:17:95:6d:d2:43:2c:2e:a9:ff:bb:7c:
                    07:f5:e8:39:ae:19:01:cb:51:c7:86:c5:17:a8:ce:
                    3f:09:21:a5:1d:79:4c:93:b2:e0:ec:4e:63:d4:36:
                    0e:51:9c:03:0d:6c:2c:7d:f3:36:6a:97:b7:b8:b4:
                    5d:b4:28:98:a3:de:8d:b8:3c:b7:70:dd:aa:d8:7b:
                    fc:7a:df:1c:00:3d:b2:ac:42:0b:c8:c3:90:68:4b:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:04:6C:CB:7E:06:F7:5A:C1:4C:F9:07:DC:FA:B6:C8:E1:5A:21:E3
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138322e302f32332d3233203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:fe:5d:aa:fa:f7:4d:b3:31:d1:7f:8a:33:16:47:6b:72:33:
         cd:d7:f1:6f:aa:9c:d0:b2:b7:3c:c7:1a:d5:1c:e9:6c:ab:3e:
         10:1a:24:15:87:e5:a9:b4:e0:df:1f:c8:4e:6b:36:3d:94:2c:
         0a:03:e6:77:92:a9:da:f0:1d:85:ec:b2:94:e6:ed:42:17:4c:
         df:b2:5d:14:81:c1:78:36:87:ce:12:e6:37:41:e4:b0:07:cd:
         36:b1:3c:66:c8:c2:ba:5a:68:b7:93:66:20:c5:55:8b:9c:bb:
         9e:ea:d4:90:58:cc:2a:19:78:48:be:9c:3b:a5:21:39:a6:07:
         7b:9d:a2:05:15:c6:c3:95:94:cf:43:91:3f:e8:73:9a:91:c6:
         af:7c:60:d4:e1:d7:aa:a1:5b:18:04:f1:27:03:6a:37:17:ca:
         cd:85:c9:80:40:18:54:55:32:50:75:0f:20:bd:3b:3a:7a:89:
         62:ec:c2:51:0f:84:d8:0f:67:ae:9b:aa:52:38:df:ef:33:d8:
         f3:dc:56:80:b3:7b:0e:af:68:36:44:78:29:1b:08:61:35:34:
         2f:11:86:20:6f:9c:a4:9c:bf:7a:25:52:be:68:2e:c1:8a:d9:
         b9:1d:d2:f0:46:8c:3d:6e:e3:d1:cf:eb:a2:b4:6b:bf:a7:60:
         b9:0b:22:3f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUS7lAy6KzmlBzpPk2kiT7z2rpNJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNC
RjcxRkI0MDAeFw0yMzEwMDMxMTU1MDFaFw0yNDEwMDExMjAwMDFaMDMxMTAvBgNV
BAMTKEEwMDQ2Q0NCN0UwNkY3NUFDMTRDRjkwN0RDRkFCNkM4RTE1QTIxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwmkbBIXsd5fFvDAy4Oe7JsX/
0DPmUj2Tc0DQ1cllhVUWvROjSOy9lM6KJ3UyFi/JjkLGBlNd60R4TbmDzTOU5Rbr
nrr2ss7aEc0npHSYLUCtvErLSfiJrIwiZL/v3+dMNTls3RflXSUVfnjq+pmVrvbM
RzcFqIXVbYIPB9//gLzZVZSZdB+/a9A9SxACmYQEGRhTk73d+gYe03B+/bCKK4jl
NL3aAH0XlW3SQywuqf+7fAf16DmuGQHLUceGxReozj8JIaUdeUyTsuDsTmPUNg5R
nAMNbCx98zZql7e4tF20KJij3o24PLdw3arYe/x63xwAPbKsQgvIw5BoSyzFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUoARsy34G91rBTPkH3Pq2yOFaIeMwHwYDVR0j
BBgwFoAUb2o1MBmKm3ZXpjb+zPs5879x+0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NDIzNDRiZS1mOWZiLTQ2MzQtOTJkNi04OTRkZDUzOGNhZGYvMC82RjZBMzUzMDE5
OEE5Qjc2NTdBNjM2RkVDQ0ZCMzlGM0JGNzFGQjQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNCRjcx
RkI0MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05
MmQ2LTg5NGRkNTM4Y2FkZi8wLzMxMzEzOTJlMzEzMDJlMzEzODMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzIzNDM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXcKtjANBgkqhkiG
9w0BAQsFAAOCAQEAOf5dqvr3TbMx0X+KMxZHa3Izzdfxb6qc0LK3PMca1RzpbKs+
EBokFYflqbTg3x/ITms2PZQsCgPmd5Kp2vAdheyylObtQhdM37JdFIHBeDaHzhLm
N0HksAfNNrE8ZsjCulpot5NmIMVVi5y7nurUkFjMKhl4SL6cO6UhOaYHe52iBRXG
w5WUz0ORP+hzmpHGr3xg1OHXqqFbGATxJwNqNxfKzYXJgEAYVFUyUHUPIL07OnqJ
YuzCUQ+E2A9nrpuqUjjf7zPY89xWgLN7Dq9oNkR4KRsIYTU0LxGGIG+cpJy/eiVS
vmguwYrZuR3S8EaMPW7j0c/rorRrv6dguQsiPw==
-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:16 2024 by rpki-client on console-ams.rpki-client.org