Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138332e302f32342d3234203d3e203234353330.roa
File:                     3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (raw, json)
Hash identifier:          G+BQqY5wepkOnL56q451XgthhSG1EENPE+iDOozetQ4=
Subject key identifier:   91:3B:6A:0B:DD:B0:8A:4E:59:50:36:1A:69:5A:06:64:03:CE:F3:C3
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       2F0A00520A67A87DD09195F1AEB6C51708E0C409
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138332e302f32342d3234203d3e203234353330.roa
Signing time:             Tue 03 Oct 2023 12:00:01 +0000
ROA not before:           Tue 03 Oct 2023 11:55:01 +0000
ROA not after:            Tue 01 Oct 2024 12:00:01 +0000
asID:                     24530
IP address blocks:        119.10.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0a:00:52:0a:67:a8:7d:d0:91:95:f1:ae:b6:c5:17:08:e0:c4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Oct  3 11:55:01 2023 GMT
            Not After : Oct  1 12:00:01 2024 GMT
        Subject: CN=913B6A0BDDB08A4E5950361A695A066403CEF3C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:cd:e8:d7:6d:1f:29:ec:33:1d:82:52:8c:
                    38:f7:8d:ec:c8:ce:e2:58:26:eb:23:a5:21:ad:85:
                    86:e9:5d:35:9c:c3:ba:00:98:67:7a:bc:a8:b7:38:
                    59:a6:41:e8:6c:15:ed:17:28:66:c2:b8:37:a2:19:
                    b2:e2:c0:97:7e:59:77:43:2d:eb:42:b4:48:88:d5:
                    57:d8:65:8b:92:b7:45:2f:8a:e6:a5:f0:f8:f5:8a:
                    97:fa:09:a5:38:d0:fb:90:3f:75:ec:f1:63:5b:cc:
                    4b:d7:1f:a2:2c:4c:65:6b:83:aa:12:7d:ab:f6:f1:
                    9e:01:3f:f9:74:d3:1d:71:89:ce:a5:34:78:67:11:
                    48:48:28:72:53:b3:9a:db:39:69:69:db:72:b6:b7:
                    41:6d:97:ee:ef:fb:f5:75:57:5e:77:90:7a:fa:11:
                    45:21:c7:ef:b3:fa:3c:5e:1b:1b:12:16:64:88:1d:
                    92:98:7a:5e:e7:03:23:0e:c8:32:d5:8b:5a:c0:47:
                    08:c0:2c:46:23:2a:fe:a2:96:05:7f:98:3b:fc:7a:
                    01:da:b0:39:78:8d:d8:6d:c9:31:ef:f8:b5:25:0f:
                    db:65:05:76:84:b9:46:08:56:62:80:c5:24:e7:6c:
                    8a:d0:da:eb:4d:dd:f8:84:5b:d0:93:27:d6:a5:99:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3B:6A:0B:DD:B0:8A:4E:59:50:36:1A:69:5A:06:64:03:CE:F3:C3
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138332e302f32342d3234203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:23:00:76:b6:d8:e2:f0:4b:3d:c2:d3:93:dc:9b:eb:2d:e7:
         07:15:a8:77:3d:01:3a:ec:db:a4:b3:62:77:09:00:93:6f:36:
         e0:5a:84:8b:ec:5f:08:c9:6f:74:31:d8:a3:b8:f4:35:3b:b0:
         d0:5e:cd:0f:c4:d8:b4:63:28:7a:5a:5c:62:9f:77:1d:83:ae:
         b6:67:4c:81:3d:12:6a:0c:f2:2d:f1:03:20:17:89:94:0f:c9:
         8f:c4:ff:94:44:3d:21:16:cd:16:00:0c:32:52:4d:b4:bc:f2:
         d1:d5:d8:b3:af:78:6e:fd:80:39:19:74:43:17:c6:cd:fd:c3:
         24:26:f4:8b:48:b5:b9:64:0a:eb:29:aa:b5:3c:7f:2d:27:33:
         5b:fd:36:49:dc:65:03:7f:bf:cb:03:26:89:e8:59:2d:99:ff:
         8f:07:2f:28:73:a5:6e:ea:97:b8:07:18:69:87:c0:68:a0:75:
         89:52:ad:e5:cf:40:49:87:a2:88:7e:71:4b:a8:d0:c7:0b:97:
         77:22:ff:eb:7d:86:ba:d4:ff:e2:9a:5f:a3:39:d8:e7:63:d7:
         c6:c0:ba:89:5c:28:4f:fe:9d:e4:8d:6c:1f:cb:cf:f3:22:3f:
         e2:2d:bc:5e:49:db:de:2d:84:f8:67:c5:5f:42:b6:2a:8f:b5:
         0a:c9:26:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:16 2024 by rpki-client on console-ams.rpki-client.org