Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3131392e38322e3232342e302f32302d3234203d3e203234323133.roa
File:                     3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (raw, json)
Hash identifier:          BSvE+OLnytfbf8toiJJMEZBKYqLTRbQfxnqbMWT62fk=
Subject key identifier:   BE:F2:B4:10:53:84:8B:52:4E:09:CC:A6:DE:55:04:2B:5E:10:BF:08
Certificate issuer:       /CN=3CA825E93FE8830376EF386786BF847CB239BE70
Certificate serial:       7FD671DEBA14A9EB59FAE49F65F40BBBFA920EEE
Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3131392e38322e3232342e302f32302d3234203d3e203234323133.roa
Signing time:             Fri 05 Jul 2024 02:00:02 +0000
ROA not before:           Fri 05 Jul 2024 01:55:02 +0000
ROA not after:            Fri 04 Jul 2025 02:00:02 +0000
asID:                     24213
IP address blocks:        119.82.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl
                          rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d6:71:de:ba:14:a9:eb:59:fa:e4:9f:65:f4:0b:bb:fa:92:0e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70
        Validity
            Not Before: Jul  5 01:55:02 2024 GMT
            Not After : Jul  4 02:00:02 2025 GMT
        Subject: CN=BEF2B41053848B524E09CCA6DE55042B5E10BF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:9e:c7:cb:ae:ed:d0:cd:69:e2:07:68:9c:
                    df:4c:d8:de:09:dc:1e:80:47:a6:f6:0e:f4:75:ff:
                    91:4d:66:0d:58:1f:9f:47:f9:86:f0:b5:fe:72:dc:
                    7e:5f:f3:68:bb:8f:b2:fc:17:01:64:0f:ea:dc:64:
                    e9:69:4f:46:39:59:68:db:4e:bd:ae:ff:60:aa:29:
                    57:4a:4a:06:f7:2e:01:69:01:18:d1:d3:ee:4f:66:
                    da:cb:7d:5f:8a:7a:27:48:93:4d:10:e1:21:7a:49:
                    67:03:80:7e:7e:4a:76:64:ec:a5:10:0e:10:29:45:
                    9f:5e:d8:49:53:0d:28:b5:5e:e6:3f:7b:04:92:1a:
                    4f:cb:96:38:11:31:4f:62:d2:84:ff:d5:c6:dc:a4:
                    27:a0:ba:42:4f:cc:c7:07:94:b5:11:a4:83:7a:e6:
                    fe:da:de:b8:3d:0b:28:4c:fb:02:c5:f4:93:85:4a:
                    34:a1:77:ec:c6:f8:36:12:b2:ac:c7:33:89:eb:a3:
                    94:dd:a6:0a:16:24:ed:e2:0c:c5:b0:ee:1b:d7:b7:
                    67:b0:fd:21:eb:86:09:e0:ec:48:51:42:6d:ce:4e:
                    ea:ae:7d:20:8e:a9:33:87:70:59:32:2e:77:43:77:
                    d4:28:56:26:4e:df:53:c4:e9:80:79:bf:d6:28:3b:
                    8a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F2:B4:10:53:84:8B:52:4E:09:CC:A6:DE:55:04:2B:5E:10:BF:08
            X509v3 Authority Key Identifier:
                keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3131392e38322e3232342e302f32302d3234203d3e203234323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.82.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:a2:b9:5f:aa:1b:57:b5:94:a5:23:ce:23:dd:de:a5:f5:
         cf:0e:26:bb:ce:21:66:81:17:f9:af:34:09:16:03:90:04:ff:
         cf:74:1b:61:97:36:13:96:73:83:6a:bd:02:c1:c2:ce:79:ad:
         b0:45:29:cb:d1:6e:2a:67:de:ec:d7:53:5e:2c:60:0f:5f:c9:
         64:3b:f5:a0:c2:7c:ce:d2:03:c6:91:e7:ba:eb:10:7b:6c:3e:
         20:b5:0f:94:b1:15:5e:b9:2b:c2:98:bf:f7:44:0c:a2:5f:cc:
         f4:4a:0b:ae:73:50:68:cf:47:d8:b4:d4:b3:4f:f6:c5:33:8c:
         82:11:fe:d5:67:5c:6c:bb:0a:1e:83:39:58:78:a0:b8:08:f1:
         f4:fd:99:44:6f:06:f2:9b:8d:07:ce:ed:b2:bd:b0:b7:e7:39:
         7d:09:e3:5e:96:47:c5:1d:2a:c4:95:4f:2f:41:09:2d:d9:a0:
         93:8d:be:fe:66:19:bc:a7:1a:dc:69:76:b8:33:12:98:7c:1c:
         76:d3:12:7c:18:c8:c4:6c:12:44:da:84:31:af:1e:a4:f5:73:
         61:87:a3:a4:fe:8e:a7:1c:65:7c:b1:01:c4:8d:74:a9:37:86:
         d4:c4:ab:57:0f:46:60:89:7e:5f:0b:93:fb:08:a6:57:3b:9c:
         40:99:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:31 2024 by rpki-client on console-ams.rpki-client.org