Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131342e37392e302e302f31382d3234203d3e203138303034.roa
File:                     3131342e37392e302e302f31382d3234203d3e203138303034.roa (raw, json)
Hash identifier:          UEVY3uEcL0+Hba8/4Qc6VZEm6AOlELnRud/0JqOy/PU=
Subject key identifier:   6A:48:11:9B:29:C2:AC:62:F2:EF:9D:E1:A8:85:A2:03:CD:06:D2:F9
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       2976065C748F0583424239898C4CB42949A7826F
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131342e37392e302e302f31382d3234203d3e203138303034.roa
Signing time:             Sun 02 Jul 2023 03:00:02 +0000
ROA not before:           Sun 02 Jul 2023 02:55:02 +0000
ROA not after:            Sun 30 Jun 2024 03:00:02 +0000
asID:                     18004
IP address blocks:        114.79.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 07:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:76:06:5c:74:8f:05:83:42:42:39:89:8c:4c:b4:29:49:a7:82:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Jul  2 02:55:02 2023 GMT
            Not After : Jun 30 03:00:02 2024 GMT
        Subject: CN=6A48119B29C2AC62F2EF9DE1A885A203CD06D2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fe:e4:53:5e:95:f6:95:98:e8:b9:b4:fa:39:
                    df:1c:b6:96:61:5e:1b:99:50:20:ee:eb:69:53:b3:
                    41:e8:1f:c5:e8:79:9f:67:05:73:6f:96:15:58:5a:
                    4d:2c:bb:c1:37:b2:92:97:89:72:35:45:1b:67:2e:
                    5c:a1:89:b1:ea:f6:60:08:93:0a:4e:48:f1:94:14:
                    83:0c:4a:5b:5e:ea:e6:41:8b:a5:cc:b6:2f:09:e1:
                    c9:58:95:8f:22:25:47:7d:2a:04:cc:48:dc:72:37:
                    44:23:ee:66:32:62:05:5e:5b:cb:a6:9c:af:14:65:
                    cd:26:1c:6a:0b:d5:84:cf:88:dc:d7:a9:95:97:c6:
                    a1:97:78:35:b8:cb:ec:11:91:ca:25:8b:26:18:55:
                    1c:28:7f:6c:d7:5b:37:ce:e7:49:44:96:39:38:cd:
                    b1:f5:6f:8e:95:d3:8b:8b:d1:ed:19:0d:ea:c8:ba:
                    b3:71:ce:26:9a:02:64:6a:41:f5:57:fa:1f:dc:cb:
                    cb:89:19:29:f6:26:b6:87:db:c7:3e:c1:a6:71:45:
                    91:be:ce:67:45:b7:04:bf:8b:4d:55:ad:41:41:93:
                    bb:9e:20:ce:9e:79:c8:92:00:8d:ad:0e:78:9a:d8:
                    3b:71:45:10:6c:aa:4a:ee:75:83:e7:f5:d4:d7:d2:
                    7e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:48:11:9B:29:C2:AC:62:F2:EF:9D:E1:A8:85:A2:03:CD:06:D2:F9
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131342e37392e302e302f31382d3234203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.79.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         19:b4:a5:56:b4:66:91:fd:39:8c:d9:15:3b:74:c5:45:45:89:
         f2:ad:8f:5a:60:0f:82:22:47:25:23:0e:bc:e6:19:62:4f:bc:
         cf:1c:fd:b3:eb:6d:c6:e4:ff:7a:8c:3f:2a:56:6e:8b:b2:15:
         9a:96:5d:be:fa:6b:97:dd:71:1e:55:97:35:5a:fc:43:5d:39:
         d8:b4:f1:8f:bd:73:62:1a:f1:ea:64:ed:72:44:74:ed:fe:b0:
         fa:4f:f9:0a:96:d3:09:8a:1c:1e:70:57:2b:e0:49:62:62:09:
         d7:47:89:47:c4:c3:ac:d4:cd:0c:c7:61:6d:41:22:10:b1:3e:
         f2:fa:06:96:73:b4:d9:18:9e:05:0c:cc:e2:ec:0a:de:38:96:
         3f:9c:0c:d5:17:43:84:69:d1:d7:09:d0:4e:a0:23:2c:30:36:
         b5:31:0b:6a:3b:c2:7b:17:f2:d3:1e:ba:43:85:3a:88:05:20:
         10:01:2e:d8:c5:24:59:c4:bb:a2:a9:bc:49:5e:d5:ed:64:77:
         81:39:45:4c:c9:a5:71:6c:3f:6c:d3:72:c0:ce:dd:03:c3:e3:
         19:3f:90:de:bc:58:93:ff:e5:84:61:df:52:7f:07:33:a1:b0:
         53:d9:d2:45:09:a5:aa:0f:ff:0b:1d:83:ca:fe:e6:3b:f2:ff:
         12:ea:ec:69
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUKXYGXHSPBYNCQjmJjEy0KUmngm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFG
M0IxOTc2NjAeFw0yMzA3MDIwMjU1MDJaFw0yNDA2MzAwMzAwMDJaMDMxMTAvBgNV
BAMTKDZBNDgxMTlCMjlDMkFDNjJGMkVGOURFMUE4ODVBMjAzQ0QwNkQyRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc/uRTXpX2lZjoubT6Od8ctpZh
XhuZUCDu62lTs0HoH8XoeZ9nBXNvlhVYWk0su8E3spKXiXI1RRtnLlyhibHq9mAI
kwpOSPGUFIMMSlte6uZBi6XMti8J4clYlY8iJUd9KgTMSNxyN0Qj7mYyYgVeW8um
nK8UZc0mHGoL1YTPiNzXqZWXxqGXeDW4y+wRkcoliyYYVRwof2zXWzfO50lEljk4
zbH1b46V04uL0e0ZDerIurNxziaaAmRqQfVX+h/cy8uJGSn2JraH28c+waZxRZG+
zmdFtwS/i01VrUFBk7ueIM6eeciSAI2tDnia2DtxRRBsqkrudYPn9dTX0n7PAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUakgRmynCrGLy753hqIWiA80G0vkwHwYDVR0j
BBgwFoAUc12HuoZ3OscBN89TEWNYofOxl2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZjVkMzY0YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMC83MzVEODdCQTg2
NzczQUM3MDEzN0NGNTMxMTYzNThBMUYzQjE5NzY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFGM0Ix
OTc2Ni5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY1ZDM2NGEtZGEwYi00NTQwLTkz
NDktNTkzMGJkNzI1Y2UzLzAvMzEzMTM0MmUzNzM5MmUzMDJlMzAyZjMxMzgyZDMy
MzQyMDNkM2UyMDMxMzgzMDMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZyTwAwDQYJKoZIhvcNAQEL
BQADggEBABm0pVa0ZpH9OYzZFTt0xUVFifKtj1pgD4IiRyUjDrzmGWJPvM8c/bPr
bcbk/3qMPypWbouyFZqWXb76a5fdcR5VlzVa/ENdOdi08Y+9c2Ia8epk7XJEdO3+
sPpP+QqW0wmKHB5wVyvgSWJiCddHiUfEw6zUzQzHYW1BIhCxPvL6BpZztNkYngUM
zOLsCt44lj+cDNUXQ4Rp0dcJ0E6gIywwNrUxC2o7wnsX8tMeukOFOogFIBABLtjF
JFnEu6KpvEle1e1kd4E5RUzJpXFsP2zTcsDO3QPD4xk/kN68WJP/5YRh31J/BzOh
sFPZ0kUJpaoP/wsdg8r+5jvy/xLq7Gk=
-----END CERTIFICATE-----
Generated at Fri May 17 01:00:59 2024 by rpki-client on console-ams.rpki-client.org