Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131352e302f32342d3234203d3e203338353233.roa
File:                     3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (raw, json)
Hash identifier:          Z7MZGS10toSXvLmV5iBfghuNSI8n4mTpT95+VkC6QfE=
Subject key identifier:   74:DB:D8:78:D6:2A:88:92:BF:65:E4:14:44:1C:4B:0E:EA:9E:2F:BA
Certificate issuer:       /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial:       5E56A8EB2F189F8C9BF5D014C42174D5318A412F
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131352e302f32342d3234203d3e203338353233.roa
Signing time:             Fri 02 Aug 2024 15:00:03 +0000
ROA not before:           Fri 02 Aug 2024 14:55:03 +0000
ROA not after:            Fri 01 Aug 2025 15:00:03 +0000
asID:                     38523
IP address blocks:        117.74.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
                          rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:56:a8:eb:2f:18:9f:8c:9b:f5:d0:14:c4:21:74:d5:31:8a:41:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
        Validity
            Not Before: Aug  2 14:55:03 2024 GMT
            Not After : Aug  1 15:00:03 2025 GMT
        Subject: CN=74DBD878D62A8892BF65E414441C4B0EEA9E2FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:f3:09:78:51:74:4b:2b:e5:fc:d2:27:8f:
                    99:eb:ef:0b:3c:f2:2a:5e:4c:31:72:03:ce:a9:05:
                    be:03:78:2c:60:00:80:11:a2:ea:82:d3:00:d2:ad:
                    49:e6:4d:92:fb:dc:a3:b7:90:64:ec:7e:e0:33:b8:
                    57:86:c3:c6:ca:16:50:bd:b1:1e:e1:c7:a5:e3:82:
                    53:0d:de:47:0f:5b:40:f1:fd:a4:ed:e2:ad:d8:43:
                    9a:ef:34:25:02:2a:59:48:4a:1c:ee:13:e0:90:8c:
                    22:b2:ed:56:89:69:d4:72:58:44:34:a1:88:ef:af:
                    db:13:76:19:f9:cd:89:32:77:ce:95:f4:fe:e5:7d:
                    67:b7:7f:50:47:aa:47:44:9a:5a:80:5a:32:95:2c:
                    28:7a:de:70:43:50:d0:ea:96:73:68:44:70:cd:34:
                    ab:57:4c:b7:3f:fe:3c:af:f4:36:22:4e:4c:a2:0d:
                    f2:d6:bb:05:dc:83:b2:5d:92:8e:2d:53:06:3f:1a:
                    f6:7d:e0:a0:9c:dc:f2:b4:1c:f9:26:ec:06:1d:f5:
                    27:8d:c2:66:9a:65:e9:83:4a:74:b9:9a:aa:a4:a5:
                    78:83:b4:ab:11:4e:3e:d7:c8:3d:98:e6:57:22:cf:
                    87:6b:3a:c3:e9:1a:4a:15:f3:03:a0:e8:0d:5b:83:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DB:D8:78:D6:2A:88:92:BF:65:E4:14:44:1C:4B:0E:EA:9E:2F:BA
            X509v3 Authority Key Identifier:
                keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131352e302f32342d3234203d3e203338353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:ff:fd:d3:1f:b9:66:b2:0c:f7:26:42:5f:bc:06:00:83:ec:
         b9:c2:d7:71:d4:5b:67:58:9b:80:99:5d:50:ae:38:cf:2a:cb:
         41:55:5c:8d:42:c8:5d:9e:fc:14:b6:7d:2d:03:45:23:5c:3c:
         f1:e1:f6:64:1c:a5:52:35:2c:52:c5:39:90:26:37:7c:3f:19:
         79:40:43:fe:d2:97:0f:39:df:55:63:f3:39:32:cf:50:7f:67:
         11:4b:d1:3e:75:60:20:8f:b5:3e:0c:18:90:43:f8:75:a5:5d:
         27:10:ea:81:b8:94:d6:3c:fc:ce:c7:81:43:ec:54:1d:5e:b8:
         99:0e:2f:49:84:16:66:8d:e5:f9:92:1f:19:6b:99:e1:d2:99:
         d4:e8:2a:e1:34:eb:41:1b:bf:59:a1:e8:0d:be:22:5c:45:1e:
         da:77:be:fc:06:3b:1a:0d:59:f4:6e:77:7e:15:69:d0:f7:74:
         a3:af:0c:d8:92:10:10:e4:bb:28:88:86:e4:14:2f:0b:34:33:
         32:cd:88:99:5d:21:d8:43:09:ee:8e:79:ab:96:af:8e:b5:c6:
         71:ed:24:75:f0:ea:b3:de:51:84:2e:03:dd:fa:f6:a6:76:0f:
         c1:81:79:66:0d:4f:2f:4a:a8:45:16:1f:e7:10:da:98:63:20:
         1f:9a:78:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:26 2024 by rpki-client on console-fra.rpki-client.org