Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37382e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e37382e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          CPkKMKTqzB/m5ukfBBG/3Hay8ILFAU2qq+dMVvfAmxY=
Subject key identifier:   55:C2:69:40:EA:F7:D6:EB:F2:9A:5B:3A:A2:DE:E3:C3:83:8F:7C:73
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       3943D7CCBB86E17B2F8529DACB755227C6D393BD
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37382e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 09 Aug 2024 10:02:23 +0000
ROA not before:           Fri 09 Aug 2024 09:57:23 +0000
ROA not after:            Fri 08 Aug 2025 10:02:23 +0000
asID:                     23679
IP address blocks:        110.232.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:43:d7:cc:bb:86:e1:7b:2f:85:29:da:cb:75:52:27:c6:d3:93:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Aug  9 09:57:23 2024 GMT
            Not After : Aug  8 10:02:23 2025 GMT
        Subject: CN=55C26940EAF7D6EBF29A5B3AA2DEE3C3838F7C73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:53:ef:27:d5:68:4b:64:67:b0:44:20:47:
                    e3:69:81:38:c3:1b:e3:26:ed:ce:2b:35:4b:f4:8e:
                    79:9d:fc:58:1a:44:38:c0:fe:39:77:83:31:ea:f2:
                    09:ae:a0:b1:b0:cc:31:be:4a:e5:96:c3:62:79:e4:
                    c8:08:b8:22:65:fd:b2:38:46:66:f5:bb:4a:d2:eb:
                    4a:7e:5c:e0:69:75:c6:56:9d:6a:be:62:9e:4e:f9:
                    2f:95:b3:32:49:f3:47:9a:d0:c6:dc:31:67:d0:5b:
                    15:c4:e7:f2:f1:bb:a9:8c:8e:3f:ee:bb:9e:27:2c:
                    10:29:e1:8e:ca:98:57:f1:09:28:81:c2:52:a2:52:
                    98:a9:e3:44:e4:c0:91:cc:61:ee:e2:8e:45:38:f9:
                    3e:52:7d:a7:88:7f:69:b4:a2:e7:fd:c7:41:de:77:
                    12:ab:f3:bf:3f:91:34:d8:27:c4:f1:06:f7:2b:81:
                    99:ba:98:86:17:e4:d3:c8:a7:a3:e9:ec:f7:51:98:
                    43:71:b0:57:1e:3d:53:19:df:98:12:5b:ba:be:95:
                    3f:b9:05:81:53:f9:01:9f:5b:b5:4c:b8:62:60:5c:
                    c4:bb:42:db:23:7a:a6:a0:38:45:3b:e4:30:3b:0e:
                    6e:e8:54:34:73:c2:01:3f:28:ba:4a:f5:e6:fb:22:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C2:69:40:EA:F7:D6:EB:F2:9A:5B:3A:A2:DE:E3:C3:83:8F:7C:73
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37382e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:48:2d:74:f7:b6:34:36:ca:49:c3:28:83:8b:24:6c:67:5e:
         d7:c3:e0:66:dc:26:f1:ba:0d:a6:bf:75:b6:fc:6c:88:9b:29:
         50:29:f7:70:fd:56:78:8b:60:23:8e:5e:8d:cb:95:4f:96:e5:
         6d:18:72:a4:18:4f:18:8b:5b:e5:95:27:f5:7d:99:b3:56:a8:
         c9:f3:4c:cd:68:5b:eb:f2:0c:a5:3d:04:b6:96:30:34:73:f4:
         a5:bc:02:2d:ce:60:41:5e:c4:46:14:00:24:f1:25:21:23:07:
         e5:88:01:a2:c2:a3:12:23:3a:2a:26:cb:1b:a4:3a:b3:35:73:
         dc:ed:b7:6e:1f:86:68:56:49:61:46:3e:69:e9:cf:2b:a2:14:
         c8:b5:c1:d1:ef:34:2d:3e:3d:8d:87:80:c6:ab:6b:da:c6:98:
         83:4d:fe:df:87:97:fe:cf:cf:64:4b:7b:e1:bd:11:8b:dc:35:
         68:2b:92:85:ca:1f:fc:0d:76:ef:b9:3a:92:e9:62:27:f6:87:
         b0:d1:1c:a1:c2:ad:1d:a6:27:6f:80:2f:0d:0d:8c:51:cd:3f:
         b4:30:1d:d6:38:75:2d:1b:29:0b:2c:7e:a4:ea:45:79:d6:6a:
         ec:8a:17:b3:21:d4:37:0a:49:29:1f:71:c3:6d:35:c7:a6:b1:
         a6:d9:4e:89
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUOUPXzLuG4XsvhSnay3VSJ8bTk70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0
RkE2Njk4NDAeFw0yNDA4MDkwOTU3MjNaFw0yNTA4MDgxMDAyMjNaMDMxMTAvBgNV
BAMTKDU1QzI2OTQwRUFGN0Q2RUJGMjlBNUIzQUEyREVFM0MzODM4RjdDNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdhlPvJ9VoS2RnsEQgR+NpgTjD
G+Mm7c4rNUv0jnmd/FgaRDjA/jl3gzHq8gmuoLGwzDG+SuWWw2J55MgIuCJl/bI4
Rmb1u0rS60p+XOBpdcZWnWq+Yp5O+S+VszJJ80ea0MbcMWfQWxXE5/Lxu6mMjj/u
u54nLBAp4Y7KmFfxCSiBwlKiUpip40TkwJHMYe7ijkU4+T5SfaeIf2m0ouf9x0He
dxKr878/kTTYJ8TxBvcrgZm6mIYX5NPIp6Pp7PdRmENxsFcePVMZ35gSW7q+lT+5
BYFT+QGfW7VMuGJgXMS7QtsjeqagOEU75DA7Dm7oVDRzwgE/KLpK9eb7IvWVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVcJpQOr31uvymls6ot7jw4OPfHMwHwYDVR0j
BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF
OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2
Njk4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzNzM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG7oTjANBgkqhkiG
9w0BAQsFAAOCAQEAMUgtdPe2NDbKScMog4skbGde18PgZtwm8boNpr91tvxsiJsp
UCn3cP1WeItgI45ejcuVT5blbRhypBhPGItb5ZUn9X2Zs1aoyfNMzWhb6/IMpT0E
tpYwNHP0pbwCLc5gQV7ERhQAJPElISMH5YgBosKjEiM6KibLG6Q6szVz3O23bh+G
aFZJYUY+aenPK6IUyLXB0e80LT49jYeAxqtr2saYg03+34eX/s/PZEt74b0Ri9w1
aCuShcof/A1277k6kuliJ/aHsNEcocKtHaYnb4AvDQ2MUc0/tDAd1jh1LRspCyx+
pOpFedZq7IoXsyHUNwpJKR9xw201x6axptlOiQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:52:54 2024 by rpki-client on console-ams.rpki-client.org