Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e20313532373830.roa
File:                     3131302e3233322e39302e302f32342d3234203d3e20313532373830.roa (raw, json)
Hash identifier:          RKZZaijm+eRzYPXiB0oIYzqcHVNoZWhV6jZStPHpJnk=
Subject key identifier:   8F:59:CD:67:3E:B4:23:A9:80:CE:57:EA:F3:A2:28:C6:24:0D:CD:37
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       716A755EAF05D50C93851D948E6D1066599E1AAC
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e20313532373830.roa
Signing time:             Wed 02 Oct 2024 08:24:47 +0000
ROA not before:           Wed 02 Oct 2024 08:19:47 +0000
ROA not after:            Wed 01 Oct 2025 08:24:47 +0000
asID:                     152780
IP address blocks:        110.232.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6a:75:5e:af:05:d5:0c:93:85:1d:94:8e:6d:10:66:59:9e:1a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Oct  2 08:19:47 2024 GMT
            Not After : Oct  1 08:24:47 2025 GMT
        Subject: CN=8F59CD673EB423A980CE57EAF3A228C6240DCD37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:b8:3f:65:86:14:f4:c0:b0:3d:59:51:9b:
                    94:a8:2d:52:95:43:2c:7a:d5:20:54:17:5b:26:f5:
                    f9:34:e6:65:8e:7a:bd:f1:af:a6:a0:1d:28:7d:e1:
                    5c:b7:14:ea:76:a1:8e:c3:ff:72:b8:5f:4c:9c:1b:
                    bb:95:2d:be:24:1b:70:b6:33:38:e3:eb:36:26:13:
                    ed:3a:38:98:47:f2:d9:e4:95:20:56:57:b7:64:21:
                    bb:24:cd:e5:0d:88:e9:28:4b:f6:df:be:46:10:73:
                    6d:45:1f:8c:30:6d:20:4d:d0:5f:dc:a5:90:bf:e9:
                    4b:7d:61:8d:39:c6:a8:12:8c:40:09:4e:15:7d:af:
                    db:58:7f:fe:3c:55:8b:be:2b:6b:7b:ed:17:3a:75:
                    de:f0:52:7a:7c:ab:52:55:ba:56:5e:74:59:80:8d:
                    d4:c2:04:c1:25:48:5a:da:2a:4f:7f:d5:f5:43:05:
                    3c:c3:d1:95:6e:50:d0:9c:dd:12:4f:2f:30:a2:a7:
                    ee:45:cf:d8:44:1c:f9:05:fe:49:4e:7e:7f:7b:4b:
                    68:e5:1c:8c:92:b5:7d:09:c8:7d:73:aa:df:26:4b:
                    7c:cd:96:cb:fb:aa:7e:3c:09:f8:cf:69:1e:79:cb:
                    04:f2:58:ce:19:47:dc:d4:47:27:33:99:b9:4b:06:
                    9c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:59:CD:67:3E:B4:23:A9:80:CE:57:EA:F3:A2:28:C6:24:0D:CD:37
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e20313532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:45:1e:03:51:ad:05:91:82:8e:3f:31:fc:3f:7c:19:bf:ac:
         9b:2d:63:99:d0:cd:57:3c:7d:d1:77:f0:35:7e:ca:35:4b:fd:
         ef:13:0c:87:9b:57:0d:c7:d6:7a:de:d8:9f:bb:55:46:e4:1e:
         52:81:9c:82:0b:77:dc:5c:d7:fd:78:73:3d:cb:cc:53:1a:0c:
         a4:24:05:52:9d:b7:48:f9:af:95:11:65:45:5b:6d:1f:3d:d2:
         ec:3a:3e:87:ba:48:5f:31:8b:9e:c5:3e:83:75:b9:12:e6:68:
         69:8b:1e:d9:fc:e1:f6:07:56:29:4c:90:9f:54:0b:09:1d:bd:
         4e:6d:9b:b8:5e:f7:2b:47:98:37:c9:d2:4f:4b:c7:13:69:3c:
         2f:60:19:fd:cc:b6:7a:68:bd:ac:49:f8:e2:6f:d3:77:5b:97:
         5b:4c:a2:5c:bf:02:45:ea:6c:db:36:4b:90:25:50:45:f7:41:
         51:9a:0d:3f:66:8a:f7:9e:a0:1e:cc:b5:ed:46:2e:4e:cd:7c:
         1a:4f:eb:66:dc:f2:0c:a6:c8:d1:1c:e6:e5:90:58:4d:65:56:
         a9:ec:65:b8:e4:b9:68:51:22:5c:1d:3d:51:64:c5:a4:41:50:
         70:fc:0c:40:10:0f:07:24:e0:8a:28:72:02:ea:f4:da:e0:b6:
         e6:7c:04:9f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcWp1Xq8F1QyThR2Ujm0QZlmeGqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0
RkE2Njk4NDAeFw0yNDEwMDIwODE5NDdaFw0yNTEwMDEwODI0NDdaMDMxMTAvBgNV
BAMTKDhGNTlDRDY3M0VCNDIzQTk4MENFNTdFQUYzQTIyOEM2MjQwRENEMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCibLg/ZYYU9MCwPVlRm5SoLVKV
Qyx61SBUF1sm9fk05mWOer3xr6agHSh94Vy3FOp2oY7D/3K4X0ycG7uVLb4kG3C2
Mzjj6zYmE+06OJhH8tnklSBWV7dkIbskzeUNiOkoS/bfvkYQc21FH4wwbSBN0F/c
pZC/6Ut9YY05xqgSjEAJThV9r9tYf/48VYu+K2t77Rc6dd7wUnp8q1JVulZedFmA
jdTCBMElSFraKk9/1fVDBTzD0ZVuUNCc3RJPLzCip+5Fz9hEHPkF/klOfn97S2jl
HIyStX0JyH1zqt8mS3zNlsv7qn48CfjPaR55ywTyWM4ZR9zURyczmblLBpzzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUj1nNZz60I6mAzlfq86IoxiQNzTcwHwYDVR0j
BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF
OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2
Njk4NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzOTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbuhaMA0GCSqG
SIb3DQEBCwUAA4IBAQCvRR4DUa0FkYKOPzH8P3wZv6ybLWOZ0M1XPH3Rd/A1fso1
S/3vEwyHm1cNx9Z63tifu1VG5B5SgZyCC3fcXNf9eHM9y8xTGgykJAVSnbdI+a+V
EWVFW20fPdLsOj6HukhfMYuexT6DdbkS5mhpix7Z/OH2B1YpTJCfVAsJHb1ObZu4
XvcrR5g3ydJPS8cTaTwvYBn9zLZ6aL2sSfjib9N3W5dbTKJcvwJF6mzbNkuQJVBF
90FRmg0/Zor3nqAezLXtRi5OzXwaT+tm3PIMpsjRHOblkFhNZVap7GW45LloUSJc
HT1RZMWkQVBw/AxAEA8HJOCKKHIC6vTa4LbmfASf
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org