Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3132392e302f32342d3234203d3e203435333036.roa
File:                     3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier:          v5KX1icvJWNCbLzmbitXFe0DuvImFbQ1kbd/fQM4aLI=
Subject key identifier:   20:4B:92:EC:77:F3:1D:CF:21:F5:11:F9:C8:5E:B3:21:FF:7F:62:AF
Certificate issuer:       /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial:       18CCE09BD96EBAE807186BF66E89302F343DB049
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3132392e302f32342d3234203d3e203435333036.roa
Signing time:             Sun 16 Jun 2024 06:00:00 +0000
ROA not before:           Sun 16 Jun 2024 05:55:00 +0000
ROA not after:            Sun 15 Jun 2025 06:00:00 +0000
asID:                     45306
IP address blocks:        119.15.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
                          rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cc:e0:9b:d9:6e:ba:e8:07:18:6b:f6:6e:89:30:2f:34:3d:b0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
        Validity
            Not Before: Jun 16 05:55:00 2024 GMT
            Not After : Jun 15 06:00:00 2025 GMT
        Subject: CN=204B92EC77F31DCF21F511F9C85EB321FF7F62AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:0c:3b:21:98:da:ef:9a:bb:4f:93:bb:6f:
                    30:71:05:b3:1c:2d:46:de:ad:64:af:b5:7c:04:13:
                    f4:f1:5a:70:60:1f:e9:a6:7f:2f:20:3d:81:36:d0:
                    ee:46:ff:ee:27:aa:2d:90:7b:a3:ee:4f:60:a3:01:
                    b5:31:75:83:c3:09:ab:0f:b6:ba:b4:7d:41:1e:b4:
                    46:a3:11:4e:1b:0f:b1:6f:b7:24:28:6a:88:55:77:
                    c0:89:34:3f:d9:9c:4c:d4:1b:64:f1:d5:92:4f:3a:
                    47:d1:fc:52:86:35:93:d2:75:13:1e:41:c8:3b:a3:
                    28:cb:e6:4e:49:0c:98:43:d1:92:39:d9:b5:c9:d1:
                    57:19:5d:80:3e:01:16:4d:14:f2:9d:be:ff:91:58:
                    e2:89:75:3b:48:87:c3:6b:bc:cc:4c:ae:4b:ed:d0:
                    30:ed:ca:2d:d6:51:58:1c:d6:81:1f:35:c1:34:b4:
                    ab:57:6d:7a:72:76:66:45:87:98:48:ab:b9:c7:3b:
                    6f:5f:e7:76:d1:42:f0:99:4b:58:e6:d0:38:6c:7f:
                    a5:b5:7f:af:00:14:4c:2e:f3:07:3f:e8:dc:de:62:
                    cd:4a:c8:2e:30:ac:71:16:a4:5e:c7:99:c8:b3:b3:
                    44:8c:ce:63:a2:62:82:66:eb:a1:e2:09:03:94:72:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4B:92:EC:77:F3:1D:CF:21:F5:11:F9:C8:5E:B3:21:FF:7F:62:AF
            X509v3 Authority Key Identifier:
                keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3132392e302f32342d3234203d3e203435333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:32:a4:ed:90:24:20:8a:62:6b:07:19:82:37:80:6c:e1:76:
         c0:26:a6:cd:21:a3:52:e9:cc:cf:b3:d9:31:61:ab:48:4d:bf:
         3c:b1:3a:69:43:0d:2e:0d:dc:25:ae:24:fa:dd:12:cb:ca:ff:
         52:31:b7:1f:e7:55:2d:20:a3:88:51:b3:41:be:ed:08:f0:2f:
         97:a6:4a:ae:74:a4:a2:69:05:e6:66:e2:0b:c4:52:8b:4c:c9:
         09:04:9c:7e:73:a9:3c:93:56:6e:f4:e0:d1:83:fd:a1:e0:1a:
         a9:80:30:cc:b0:f1:77:f6:c5:54:7d:89:b3:cf:41:f0:8f:c9:
         fe:50:b6:73:c0:b5:44:8a:c1:fd:c6:45:98:ca:fc:6e:f9:38:
         46:cf:2a:c3:6e:2a:ad:2c:cf:55:a5:3e:b8:80:0a:72:2e:02:
         ea:d1:01:d2:3d:7d:65:bc:ef:44:d3:d3:aa:fc:94:05:5d:b6:
         43:8f:a0:cf:01:eb:1b:c3:e2:25:e6:f9:cc:83:95:c8:af:f0:
         7e:bb:87:25:fe:80:7e:68:24:51:36:51:6e:95:99:8f:9a:2f:
         7c:ae:54:1d:40:36:ba:fb:95:86:8b:90:f7:b3:78:ff:6b:eb:
         84:cc:56:0d:b7:95:59:6b:ae:bb:0a:22:51:98:14:cf:8f:d5:
         95:ef:8f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org