Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131392e302f32342d3234203d3e203338353233.roa
File:                     3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (raw, json)
Hash identifier:          ECldTT7EpItwfxLDByM37zLx8vcI4wsesM44ZA7sMNQ=
Subject key identifier:   EA:79:36:DF:81:69:A8:A7:A3:70:75:96:50:9B:56:B2:4D:A0:74:D8
Certificate issuer:       /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial:       3581F2CB1C5F1EEFA210867CC97954BD99195294
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131392e302f32342d3234203d3e203338353233.roa
Signing time:             Fri 01 Sep 2023 14:26:24 +0000
ROA not before:           Fri 01 Sep 2023 14:21:24 +0000
ROA not after:            Fri 30 Aug 2024 14:26:24 +0000
asID:                     38523
IP address blocks:        117.74.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
                          rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 07:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:81:f2:cb:1c:5f:1e:ef:a2:10:86:7c:c9:79:54:bd:99:19:52:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
        Validity
            Not Before: Sep  1 14:21:24 2023 GMT
            Not After : Aug 30 14:26:24 2024 GMT
        Subject: CN=EA7936DF8169A8A7A3707596509B56B24DA074D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:05:12:cd:b2:c8:5a:7a:6d:4e:f9:ea:e6:3d:
                    56:10:da:44:ea:db:53:ff:32:97:6e:01:15:fc:cd:
                    02:3b:6e:07:28:24:af:cd:b4:07:a0:c7:62:4a:52:
                    6d:9a:1b:72:c7:36:d3:ae:28:20:d2:85:d6:fe:8b:
                    64:b0:92:1f:eb:a7:13:f0:a6:bb:0b:2e:46:9f:9c:
                    72:76:de:d5:0f:ee:09:25:4a:95:f8:f3:2b:a9:77:
                    96:15:b3:44:f6:be:f1:2b:2e:a8:c8:67:f6:47:0b:
                    3b:64:77:23:9c:f2:9b:72:ac:8e:8f:ca:2e:53:2d:
                    82:a5:32:0c:c6:fe:8f:8f:62:49:a1:b7:38:c2:66:
                    73:f4:d7:65:04:99:e6:2a:6c:d8:69:fe:40:5b:56:
                    a2:fd:3b:d8:00:ad:2e:11:f2:f8:8b:6e:1a:c2:a1:
                    0a:64:f2:f0:6c:97:9b:b0:64:01:ce:86:15:a3:67:
                    80:7b:78:16:43:03:db:76:0d:7a:ff:ca:37:75:9d:
                    e5:b6:b0:6d:2c:4f:18:ff:6e:db:8a:6f:98:b8:78:
                    03:4e:f5:b0:58:8f:70:5a:09:50:4c:f7:f2:86:6d:
                    22:31:19:3d:fc:09:28:5b:b3:df:6a:68:aa:37:e1:
                    e8:61:50:33:c6:35:33:44:a3:43:21:d3:aa:87:11:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:79:36:DF:81:69:A8:A7:A3:70:75:96:50:9B:56:B2:4D:A0:74:D8
            X509v3 Authority Key Identifier:
                keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131392e302f32342d3234203d3e203338353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:30:ce:d1:fb:08:c4:70:11:9a:36:d5:9c:9c:53:c3:cd:7e:
         16:22:a3:12:85:d3:19:10:f7:59:84:dc:b9:a9:48:5f:f1:dd:
         09:8f:1b:5f:50:17:d6:2e:dd:21:c8:68:eb:4f:8a:0d:3b:a3:
         33:c1:91:49:e7:34:90:1e:05:98:3c:2c:bb:59:7d:76:5c:6e:
         61:04:4b:9a:54:be:f5:11:26:19:8d:f5:92:24:d0:13:30:59:
         2b:b1:5a:59:17:b3:5a:c2:2b:e2:ac:72:8c:ef:6c:f9:c6:77:
         c2:b7:91:6e:d5:8c:c1:a2:23:37:06:c1:9d:8e:58:4f:42:2d:
         ec:d8:55:0b:ae:fc:d3:fc:cf:c6:7c:8a:56:92:05:63:ad:d1:
         ad:13:b0:a6:3f:0d:75:31:28:46:35:95:ed:9e:be:42:1d:82:
         96:50:d2:a5:fc:8f:92:55:8c:92:23:96:dc:80:c6:68:82:8d:
         60:81:6a:14:41:78:3a:bc:85:fe:db:50:96:88:fe:e6:c5:b1:
         99:88:f3:7a:96:05:20:00:7b:f2:c3:f3:4d:34:87:6c:0c:56:
         dd:e9:37:3f:07:97:34:ef:3d:10:b5:1a:21:72:e4:01:b8:3e:
         3f:ad:9c:56:12:30:cb:7e:f6:3b:e5:27:3f:41:81:b5:23:32:
         db:e3:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 06:46:50 2024 by rpki-client on console-ams.rpki-client.org