Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37322e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e37322e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          TFn4DgHRiSGWOhaRDhjKvLbfbyEaz4x8y4ifTPdcbcY=
Subject key identifier:   4E:75:5D:00:7C:F0:BF:05:C8:E2:4A:27:E1:18:D7:CB:D2:8F:BF:57
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       527553A68AE67C0BB788A324ABA15B77B0D41982
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37322e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 09 Aug 2024 10:02:24 +0000
ROA not before:           Fri 09 Aug 2024 09:57:24 +0000
ROA not after:            Fri 08 Aug 2025 10:02:24 +0000
asID:                     23679
IP address blocks:        110.232.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:75:53:a6:8a:e6:7c:0b:b7:88:a3:24:ab:a1:5b:77:b0:d4:19:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Aug  9 09:57:24 2024 GMT
            Not After : Aug  8 10:02:24 2025 GMT
        Subject: CN=4E755D007CF0BF05C8E24A27E118D7CBD28FBF57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:8c:b8:ce:2b:b0:e4:52:ab:96:f7:ee:7a:
                    04:aa:37:3e:62:a4:0a:df:22:fe:10:ad:5f:9d:43:
                    80:e4:70:b2:2d:50:6c:a9:09:23:ff:59:3e:df:62:
                    b8:32:66:d1:45:32:03:bb:a0:96:f0:cf:9c:d5:03:
                    05:e1:a0:8c:62:b5:4e:3a:5d:b7:61:3d:6d:f9:10:
                    b5:b2:35:b8:f7:d2:03:5d:77:3b:c1:16:f3:25:32:
                    cb:f5:7a:b6:df:9e:b6:3c:01:a7:5e:61:e8:b7:4b:
                    ed:3a:c2:97:40:80:ee:f5:48:99:72:37:b7:d1:7f:
                    47:d3:87:4c:9c:43:19:2e:1e:c1:c0:bc:c7:23:97:
                    c4:f7:76:de:5c:48:ed:d7:92:d7:c4:40:ae:41:83:
                    67:00:6a:88:fb:be:7b:ae:2c:0d:0e:99:2c:a9:88:
                    75:13:2a:17:67:76:1d:e4:85:d0:d2:ff:9d:91:d0:
                    69:b6:b7:99:42:12:4a:b9:b9:08:ed:f8:19:a5:44:
                    66:df:13:61:62:02:3c:eb:15:64:af:a0:b4:d7:f6:
                    ac:d4:ba:a7:65:9e:28:6a:1c:74:b5:7e:08:18:07:
                    b9:7c:64:81:9d:77:ee:32:bf:24:33:57:72:fd:51:
                    7b:e8:6a:01:f4:be:bd:da:97:9f:71:d7:05:f6:1e:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:75:5D:00:7C:F0:BF:05:C8:E2:4A:27:E1:18:D7:CB:D2:8F:BF:57
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37322e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d1:4c:26:68:64:ae:d7:51:88:1d:57:f4:b1:eb:03:1d:0b:
         41:7a:e9:19:e9:6e:20:0e:ab:61:1b:81:f5:51:c8:1c:99:b8:
         fe:05:3c:c6:ef:39:49:88:62:0c:90:84:12:30:de:64:9f:8c:
         0e:0e:6e:60:b8:92:b7:3e:69:43:8f:52:27:ce:30:7a:93:3a:
         56:eb:46:e5:f2:e6:77:8f:3b:9c:fd:37:d4:58:d8:b2:92:56:
         f7:ee:03:f9:f9:5f:6e:5d:d0:8a:be:25:98:92:7a:a1:35:5d:
         89:3b:be:26:a5:9f:09:46:ff:f4:90:d2:05:ed:d5:33:76:6d:
         cf:46:8e:20:ea:d6:e0:7d:0a:db:59:ed:28:26:9f:0b:26:ed:
         47:4f:b9:70:6a:5c:26:89:21:6e:ee:7e:3e:af:93:e1:46:92:
         1b:df:f7:ff:f7:07:a9:e1:6c:62:ff:45:cc:8f:1c:35:36:86:
         61:72:43:04:25:b6:4f:31:d1:e1:ac:24:84:99:fb:07:1d:33:
         c3:79:f2:04:7e:41:c0:0c:9a:c3:00:de:a8:a1:83:0a:89:d7:
         ed:1d:e1:1f:dd:0f:fd:13:ac:c4:5a:7d:4a:c6:8e:b1:29:ad:
         4e:e1:37:47:f2:0b:b3:3c:20:2b:8c:d7:91:5f:20:43:0a:0c:
         54:6c:4d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org