Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131362e302f32342d3234203d3e203338353233.roa
File:                     3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (raw, json)
Hash identifier:          fcQPwUouCVaeNmPsgU50oUU5piCrvcz7X4WUkw36Gi0=
Subject key identifier:   E0:FA:E1:3B:93:D7:41:7C:20:76:7B:D5:6E:A2:5D:3A:26:4C:C3:BE
Certificate issuer:       /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial:       7ED507A09BCE362B754BB38E991AA740DB148C5D
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131362e302f32342d3234203d3e203338353233.roa
Signing time:             Fri 02 Aug 2024 15:00:03 +0000
ROA not before:           Fri 02 Aug 2024 14:55:03 +0000
ROA not after:            Fri 01 Aug 2025 15:00:03 +0000
asID:                     38523
IP address blocks:        117.74.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
                          rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 01:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d5:07:a0:9b:ce:36:2b:75:4b:b3:8e:99:1a:a7:40:db:14:8c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
        Validity
            Not Before: Aug  2 14:55:03 2024 GMT
            Not After : Aug  1 15:00:03 2025 GMT
        Subject: CN=E0FAE13B93D7417C20767BD56EA25D3A264CC3BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:fe:ed:82:ce:df:9b:af:55:12:16:dc:a4:
                    29:43:bc:10:56:08:f7:8c:41:41:c5:82:75:10:69:
                    74:c7:ca:08:8c:3c:87:04:69:64:7b:a0:0f:2e:28:
                    99:fa:c6:eb:6d:a2:5a:ba:ed:0b:e4:1a:ee:67:d2:
                    c5:6b:25:b0:d5:5d:3b:5d:9a:9e:01:84:23:c7:17:
                    06:f7:c2:a0:dd:52:de:50:f0:d2:57:44:cc:01:dd:
                    7c:47:2a:6a:d7:7d:fe:70:0b:6d:89:8b:ba:e4:3c:
                    e8:ce:0b:d0:2b:7f:cc:76:15:78:b2:4b:52:39:61:
                    28:6d:2e:df:f4:82:a9:d6:a2:c1:59:9e:45:24:eb:
                    8d:23:63:ee:00:d5:4f:c6:81:01:c8:dc:7d:c3:fc:
                    d3:b6:f1:e6:fb:6f:06:6d:bb:3e:a5:6a:6b:d8:3e:
                    51:bc:2b:e7:9c:94:e1:cc:75:cf:6d:1d:27:04:dc:
                    6c:f5:1e:89:ab:63:1f:a0:1d:da:9d:81:d1:97:a0:
                    63:e5:54:0c:e1:14:6c:8e:4a:37:eb:3e:3a:d9:84:
                    e7:a1:dc:0f:83:c4:c8:5e:64:50:58:82:5b:ef:58:
                    86:af:05:3f:35:3b:d6:e2:a3:ae:5e:ea:40:51:28:
                    0e:79:14:78:1c:a3:8b:d5:c4:e4:b2:4a:d3:2a:02:
                    cc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FA:E1:3B:93:D7:41:7C:20:76:7B:D5:6E:A2:5D:3A:26:4C:C3:BE
            X509v3 Authority Key Identifier:
                keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131362e302f32342d3234203d3e203338353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:33:42:04:50:a3:d9:b3:b5:fa:3e:ec:6d:96:6c:b1:f6:2d:
         2c:46:fc:53:05:38:1d:43:55:50:bd:8b:5c:f1:e4:bd:dd:3a:
         82:03:fa:35:1d:53:74:51:86:a2:bb:16:3d:46:8d:24:5e:4e:
         90:aa:8b:0d:65:8b:1e:17:67:af:ca:5a:3a:b7:9d:37:88:a5:
         ee:01:1a:e5:3b:d4:cf:6c:12:78:62:cd:cc:3f:8f:71:ae:b8:
         fc:61:e6:bc:67:8a:0a:31:ed:fe:4e:7d:c9:09:37:f0:c3:cf:
         91:2e:fd:f8:14:eb:5a:79:54:6e:66:0e:e4:4d:36:50:d6:1c:
         76:d3:70:23:02:75:dd:96:51:c3:77:80:da:d3:2f:c4:aa:a0:
         e1:35:54:da:fd:3b:16:56:d6:7e:43:1f:48:2f:c7:8b:ed:51:
         19:98:91:86:b6:aa:ab:7f:96:fb:67:5d:46:fa:60:50:0e:76:
         76:4b:f2:db:43:45:00:d9:63:85:20:d4:8c:02:56:39:07:5c:
         6d:01:3b:f7:e8:c8:35:98:7c:08:4c:e0:93:24:7f:6c:7a:09:
         0e:ea:19:00:32:d2:01:f3:87:05:fb:85:d7:c1:ec:ba:ee:a8:
         97:86:44:eb:f8:c7:59:59:a7:a7:02:10:a2:66:72:2e:12:a0:
         71:6b:db:f2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUftUHoJvONit1S7OOmRqnQNsUjF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2
MDM5NDQ4RjAeFw0yNDA4MDIxNDU1MDNaFw0yNTA4MDExNTAwMDNaMDMxMTAvBgNV
BAMTKEUwRkFFMTNCOTNENzQxN0MyMDc2N0JENTZFQTI1RDNBMjY0Q0MzQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9B/7tgs7fm69VEhbcpClDvBBW
CPeMQUHFgnUQaXTHygiMPIcEaWR7oA8uKJn6xuttolq67QvkGu5n0sVrJbDVXTtd
mp4BhCPHFwb3wqDdUt5Q8NJXRMwB3XxHKmrXff5wC22Ji7rkPOjOC9Arf8x2FXiy
S1I5YShtLt/0gqnWosFZnkUk640jY+4A1U/GgQHI3H3D/NO28eb7bwZtuz6lamvY
PlG8K+eclOHMdc9tHScE3Gz1HomrYx+gHdqdgdGXoGPlVAzhFGyOSjfrPjrZhOeh
3A+DxMheZFBYglvvWIavBT81O9bio65e6kBRKA55FHgco4vVxOSyStMqAswDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU4PrhO5PXQXwgdnvVbqJdOiZMw74wHwYDVR0j
BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE
MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5
NDQ4Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1NWExYTQ0LTMzN2QtNGRiNC05
MGQ3LTViZDRmMzcyMTRiOC8wLzMxMzEzNzJlMzczNDJlMzEzMTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKdDANBgkqhkiG
9w0BAQsFAAOCAQEAODNCBFCj2bO1+j7sbZZssfYtLEb8UwU4HUNVUL2LXPHkvd06
ggP6NR1TdFGGorsWPUaNJF5OkKqLDWWLHhdnr8paOredN4il7gEa5TvUz2wSeGLN
zD+Pca64/GHmvGeKCjHt/k59yQk38MPPkS79+BTrWnlUbmYO5E02UNYcdtNwIwJ1
3ZZRw3eA2tMvxKqg4TVU2v07FlbWfkMfSC/Hi+1RGZiRhraqq3+W+2ddRvpgUA52
dkvy20NFANljhSDUjAJWOQdcbQE79+jINZh8CEzgkyR/bHoJDuoZADLSAfOHBfuF
18Hsuu6ol4ZE6/jHWVmnpwIQomZyLhKgcWvb8g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:01 2024 by rpki-client on console-ams.rpki-client.org