Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138332e302f32342d3234203d3e203234353330.roa
File:                     3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (raw, json)
Hash identifier:          0TXvmS9XRzFPQg7VBjdDhocXuAjOCXrahzSe/hBS+kE=
Subject key identifier:   0C:38:40:99:54:B8:1C:9F:13:8E:80:C6:98:7D:66:36:6F:2E:0E:F6
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       5537572E4DEC6AEE0E70EF4169C79F1285FFEFCE
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138332e302f32342d3234203d3e203234353330.roa
Signing time:             Tue 03 Sep 2024 13:00:01 +0000
ROA not before:           Tue 03 Sep 2024 12:55:01 +0000
ROA not after:            Tue 02 Sep 2025 13:00:01 +0000
asID:                     24530
IP address blocks:        119.10.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:37:57:2e:4d:ec:6a:ee:0e:70:ef:41:69:c7:9f:12:85:ff:ef:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Sep  3 12:55:01 2024 GMT
            Not After : Sep  2 13:00:01 2025 GMT
        Subject: CN=0C38409954B81C9F138E80C6987D66366F2E0EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:91:b4:c6:3f:a5:e5:4b:8b:b6:1f:af:ba:9a:
                    d4:20:04:9c:49:35:2b:ef:5a:df:8d:d4:0f:c1:68:
                    da:94:f3:65:b3:ba:89:19:71:cf:b8:8c:84:88:3a:
                    de:7f:5f:e4:e8:d3:d4:7d:b9:84:57:da:06:eb:9a:
                    8b:40:3c:d2:3a:f2:5b:4c:0e:1f:af:88:19:f8:05:
                    69:68:4b:a4:41:ff:08:c0:32:0e:94:43:8f:57:0c:
                    ed:12:d9:be:ec:39:b3:28:63:82:e5:03:8f:27:99:
                    af:3d:0b:34:fd:41:a9:1f:59:95:11:76:18:c1:6a:
                    e4:fc:82:9e:c0:cb:21:ca:40:08:ac:3a:0d:b4:be:
                    9c:52:f5:38:e1:57:b3:f9:6b:2e:1e:35:3d:a1:0c:
                    5e:dc:94:29:a9:55:bd:fd:c7:72:c9:82:81:b5:57:
                    c8:72:4c:65:38:64:bf:36:e3:b4:ae:a0:26:71:fe:
                    be:d6:15:22:6f:25:6a:94:26:91:fd:88:a7:41:0b:
                    2e:bf:aa:05:74:0b:2f:c2:6e:ca:96:08:61:ee:ae:
                    06:bc:cb:78:91:b5:43:ce:e2:da:a5:fc:cd:08:2a:
                    27:e0:98:f1:98:60:37:da:cc:25:b7:9f:c2:fc:da:
                    13:6b:e6:78:f9:d6:8a:d2:2a:58:a0:a7:21:9a:49:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:38:40:99:54:B8:1C:9F:13:8E:80:C6:98:7D:66:36:6F:2E:0E:F6
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138332e302f32342d3234203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:5a:7d:00:2c:51:9f:cc:07:d0:36:8d:8e:6f:e9:0c:da:84:
         3f:7a:66:03:ea:ee:6d:1c:f3:07:b8:4c:c2:7e:07:19:67:c0:
         4a:23:45:67:97:f8:cc:f2:6b:73:fd:0e:99:5d:15:de:46:4e:
         0e:a1:b2:c3:cb:4b:84:b3:f0:fd:73:43:5b:35:da:45:77:ba:
         95:d6:11:8a:0e:de:27:9b:36:0a:a3:d3:01:c9:77:27:30:d5:
         3e:17:3a:11:0d:eb:b8:c8:ba:22:0f:d3:e7:97:4d:5c:71:2f:
         e3:64:52:db:2f:ed:3f:60:1b:11:07:bb:8d:37:bc:93:76:d7:
         aa:10:6a:6f:c1:33:78:a8:3e:c3:7c:fe:51:c2:c2:9f:d7:47:
         22:4a:8e:a8:34:d9:9a:ae:88:5c:b5:72:24:bf:f7:34:7a:3e:
         9a:e9:89:65:69:ac:e2:25:a7:ac:b6:0c:69:cd:d6:5a:c7:b8:
         77:50:ca:18:b8:4d:39:a7:85:b3:6c:ad:11:b0:9b:ae:5f:36:
         0a:78:f3:a2:53:07:68:51:48:92:f2:73:47:fc:54:9d:b0:40:
         10:b8:fa:53:c2:79:f5:a9:b9:8f:5f:28:96:d6:4d:13:52:fc:
         23:45:45:65:a2:25:a0:e5:d4:36:26:28:c3:e9:d2:ef:db:1e:
         88:93:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org