Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38362e302f32332d3234203d3e203233363739.roa
File:                     3131302e3233322e38362e302f32332d3234203d3e203233363739.roa (raw, json)
Hash identifier:          Sgz8ONAKEeJ2gYSTtTkor8PbPcnnnmhePM+D4wH0oPQ=
Subject key identifier:   6E:1D:AA:14:2C:C4:FE:FC:8C:92:6D:1C:7B:CC:6B:BB:A9:F3:F6:94
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       3B4FA9B196F76CB16F1A56ACEF54772F0702B45B
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38362e302f32332d3234203d3e203233363739.roa
Signing time:             Fri 09 Aug 2024 10:02:23 +0000
ROA not before:           Fri 09 Aug 2024 09:57:23 +0000
ROA not after:            Fri 08 Aug 2025 10:02:23 +0000
asID:                     23679
IP address blocks:        110.232.86.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4f:a9:b1:96:f7:6c:b1:6f:1a:56:ac:ef:54:77:2f:07:02:b4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Aug  9 09:57:23 2024 GMT
            Not After : Aug  8 10:02:23 2025 GMT
        Subject: CN=6E1DAA142CC4FEFC8C926D1C7BCC6BBBA9F3F694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8c:d9:1f:20:63:9e:b6:af:52:36:bf:0a:51:
                    23:4f:8e:7f:47:f2:3d:d9:fc:9c:60:ef:c3:ff:3a:
                    90:b7:7d:7c:7b:e2:0d:04:33:b0:b0:d2:40:41:77:
                    3b:90:70:3b:01:80:7b:d9:a6:1b:c9:80:d3:8d:b2:
                    e3:4d:58:8f:b3:68:d5:1c:53:d6:f1:1c:83:82:21:
                    30:16:c6:86:ab:f3:ad:1f:79:42:6c:bd:82:32:ab:
                    d2:5c:1d:43:b5:7b:be:b0:d3:eb:fb:ac:bc:22:c1:
                    2c:ea:b3:63:a8:06:e7:c7:c9:49:22:02:9e:cb:8e:
                    d0:ee:f5:3e:01:b7:49:61:60:d1:95:02:99:bb:3b:
                    57:31:35:5a:f1:fa:f9:dc:ae:20:09:90:42:4e:bb:
                    0a:f6:05:7d:67:95:c3:25:b1:26:0a:53:76:83:68:
                    41:21:16:d5:8b:e9:c3:1f:cf:46:0c:e6:1c:34:44:
                    19:4c:e9:cf:29:de:a9:23:0f:81:01:2b:81:e8:a4:
                    e3:1b:53:7d:83:ff:d9:f2:84:c1:d3:a8:62:6b:8e:
                    8f:cf:2d:68:cb:3a:ba:a9:f3:98:56:e4:05:46:95:
                    af:4f:9d:49:94:7b:d7:25:c8:18:ea:b6:9d:57:3f:
                    1f:dc:a7:c5:72:b6:7f:28:25:e0:c8:5b:b2:6d:4b:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1D:AA:14:2C:C4:FE:FC:8C:92:6D:1C:7B:CC:6B:BB:A9:F3:F6:94
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38362e302f32332d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:92:04:cf:ab:20:98:18:2d:c5:b0:20:01:ef:68:59:e7:25:
         85:1d:a5:9d:98:ae:42:d9:93:2a:02:e9:d3:5a:bf:90:5e:54:
         99:27:16:69:0c:9f:59:09:7a:13:19:20:7e:47:97:68:01:fe:
         49:93:17:35:37:f7:b0:77:4a:80:f4:fa:be:76:18:fa:e1:a5:
         ba:ac:92:45:6a:be:c3:9e:4b:04:55:95:10:10:88:b7:b1:ef:
         19:00:2e:58:51:b3:3a:06:19:b0:b9:01:1b:74:ec:f7:26:9a:
         8c:d4:6b:b1:87:9c:58:b4:53:5f:9c:1e:c6:5f:35:84:4e:e0:
         62:67:88:5a:f6:dc:0c:fd:df:62:09:b5:42:bf:0b:7c:b0:5e:
         b2:a5:4c:5a:15:21:d9:b4:3d:fc:52:08:cf:95:f5:a1:4c:13:
         7f:57:9a:80:c2:ed:40:b0:ab:93:56:fa:1a:7b:67:1e:ef:5c:
         c2:3d:0b:32:7d:ae:9a:53:4e:20:25:a0:14:33:15:57:e4:c4:
         12:67:37:89:bf:e4:fd:e6:e5:a4:01:a6:b7:22:82:47:79:b2:
         3f:09:76:86:6d:02:a8:d5:7b:4d:5a:c6:39:68:48:ff:f9:e0:
         e2:22:bf:2c:3f:64:ce:b4:95:4c:b7:6c:cf:5e:bb:6d:9c:da:
         dd:20:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org