Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e36372e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          59YLEHz1fquLI5L4peB6biUsteRVK/+91Ajwy4p4e0M=
Subject key identifier:   08:00:61:A2:CB:37:69:EA:B2:36:AA:1F:45:CA:4A:7A:4F:8D:31:CA
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       61C30D283DFED05554C5462C3814DAC6C82102E5
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 09 Aug 2024 10:02:23 +0000
ROA not before:           Fri 09 Aug 2024 09:57:23 +0000
ROA not after:            Fri 08 Aug 2025 10:02:23 +0000
asID:                     23679
IP address blocks:        110.232.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c3:0d:28:3d:fe:d0:55:54:c5:46:2c:38:14:da:c6:c8:21:02:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Aug  9 09:57:23 2024 GMT
            Not After : Aug  8 10:02:23 2025 GMT
        Subject: CN=080061A2CB3769EAB236AA1F45CA4A7A4F8D31CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:8a:a5:0c:cb:e0:dd:00:d2:eb:d1:fb:ac:
                    94:cb:00:75:56:80:d9:7a:8b:c0:a1:b0:48:bf:fd:
                    7d:e0:c0:21:26:4b:4d:bb:30:a2:f4:60:fe:8a:be:
                    2c:ba:af:9c:95:4f:3e:85:44:c5:a8:bf:ca:ae:26:
                    ad:47:85:8d:5e:3a:07:7e:47:f4:37:04:ac:be:7c:
                    9f:92:a0:52:1c:0b:23:58:6b:79:ba:49:c1:71:bc:
                    74:65:d9:f1:46:3d:d1:5e:46:c6:74:7a:11:4b:82:
                    37:42:88:4a:8a:4d:d8:83:f4:ea:96:87:ef:e4:09:
                    82:3a:df:dc:9e:ee:1a:a9:37:d8:c4:10:8b:2a:c4:
                    ad:c3:81:40:7e:84:0d:cb:7b:df:b7:07:7e:84:9a:
                    bb:e1:92:91:66:7d:11:7d:15:c6:34:7e:b8:27:63:
                    d8:88:12:68:3c:c9:6e:87:64:6a:10:85:02:01:05:
                    33:e3:cf:38:66:ae:19:e6:21:4f:95:da:55:bd:f9:
                    06:47:6d:16:39:83:12:c7:a5:32:b3:da:9b:82:a4:
                    28:88:28:30:45:60:3e:83:72:d3:4f:9f:9f:0b:6f:
                    fe:e9:a3:7d:f2:60:60:ac:93:b7:c7:8a:4f:1e:26:
                    3d:68:12:0e:b6:1e:4d:09:8b:dd:ca:70:82:1a:5b:
                    ce:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:00:61:A2:CB:37:69:EA:B2:36:AA:1F:45:CA:4A:7A:4F:8D:31:CA
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:0b:e3:4b:6f:62:f9:ed:49:61:83:79:16:d2:a9:0d:ba:0c:
         a8:76:7a:1b:c2:b9:c5:b2:fc:40:3d:ba:7f:21:78:54:5f:ff:
         1e:89:0f:4a:a2:58:98:9a:dd:63:56:c0:92:c6:4d:d8:65:4d:
         2e:e9:df:7b:13:e3:f0:ab:82:04:b8:9b:09:36:5f:bc:d0:85:
         21:c0:68:f5:11:17:2b:79:6b:08:af:84:c0:12:7e:e3:96:67:
         29:47:fe:40:0b:f2:4c:1c:fd:39:0c:8b:4b:24:0b:f1:a1:9f:
         a8:7a:7c:5e:95:d1:4b:20:2d:45:2e:fd:88:0c:3f:98:2c:e3:
         ec:1e:29:7e:2b:2e:d6:d0:fa:c2:63:82:70:58:ab:12:c0:7b:
         85:fa:5f:11:82:4b:1a:87:f9:80:3d:7c:6a:39:62:96:3c:c6:
         ca:52:e2:4c:fc:aa:25:db:38:62:42:11:bd:1f:01:aa:10:b9:
         b4:bb:81:26:3a:b1:ef:57:9a:52:c4:59:0a:0b:04:93:ab:a6:
         4a:b7:4b:3f:4d:bc:2e:94:c1:54:04:44:29:9a:7b:3b:1f:17:
         8c:c8:93:63:63:4c:9c:1b:d7:eb:04:38:00:ab:07:54:01:b6:
         54:b4:0d:69:56:78:36:3f:55:dd:40:af:ac:96:a0:c8:9e:93:
         55:59:f6:30
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYcMNKD3+0FVUxUYsOBTaxsghAuUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0
RkE2Njk4NDAeFw0yNDA4MDkwOTU3MjNaFw0yNTA4MDgxMDAyMjNaMDMxMTAvBgNV
BAMTKDA4MDA2MUEyQ0IzNzY5RUFCMjM2QUExRjQ1Q0E0QTdBNEY4RDMxQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm54qlDMvg3QDS69H7rJTLAHVW
gNl6i8ChsEi//X3gwCEmS027MKL0YP6Kviy6r5yVTz6FRMWov8quJq1HhY1eOgd+
R/Q3BKy+fJ+SoFIcCyNYa3m6ScFxvHRl2fFGPdFeRsZ0ehFLgjdCiEqKTdiD9OqW
h+/kCYI639ye7hqpN9jEEIsqxK3DgUB+hA3Le9+3B36EmrvhkpFmfRF9FcY0frgn
Y9iIEmg8yW6HZGoQhQIBBTPjzzhmrhnmIU+V2lW9+QZHbRY5gxLHpTKz2puCpCiI
KDBFYD6DctNPn58Lb/7po33yYGCsk7fHik8eJj1oEg62Hk0Ji93KcIIaW85pAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUCABhoss3aeqyNqofRcpKek+NMcowHwYDVR0j
BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF
OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2
Njk4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzNjM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG7oQzANBgkqhkiG
9w0BAQsFAAOCAQEAcwvjS29i+e1JYYN5FtKpDboMqHZ6G8K5xbL8QD26fyF4VF//
HokPSqJYmJrdY1bAksZN2GVNLunfexPj8KuCBLibCTZfvNCFIcBo9REXK3lrCK+E
wBJ+45ZnKUf+QAvyTBz9OQyLSyQL8aGfqHp8XpXRSyAtRS79iAw/mCzj7B4pfisu
1tD6wmOCcFirEsB7hfpfEYJLGof5gD18ajliljzGylLiTPyqJds4YkIRvR8BqhC5
tLuBJjqx71eaUsRZCgsEk6umSrdLP028LpTBVAREKZp7Ox8XjMiTY2NMnBvX6wQ4
AKsHVAG2VLQNaVZ4Nj9V3UCvrJagyJ6TVVn2MA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org