Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131352e302f32342d3234203d3e203535383138.roa
File:                     3131392e3131302e3131352e302f32342d3234203d3e203535383138.roa (raw, json)
Hash identifier:          lWpkOlXpV7d+APwXEEavcsOo0FfLAbs1/51YP/B+kmM=
Subject key identifier:   A1:5B:63:5B:AF:D5:AE:F1:6B:93:67:FF:BD:BC:6D:40:5A:63:70:FB
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       0FC5576EF2B3A327576E49455BBD9445AD4BAABC
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131352e302f32342d3234203d3e203535383138.roa
Signing time:             Sun 29 Sep 2024 06:00:00 +0000
ROA not before:           Sun 29 Sep 2024 05:55:00 +0000
ROA not after:            Sun 28 Sep 2025 06:00:00 +0000
asID:                     55818
IP address blocks:        119.110.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c5:57:6e:f2:b3:a3:27:57:6e:49:45:5b:bd:94:45:ad:4b:aa:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Sep 29 05:55:00 2024 GMT
            Not After : Sep 28 06:00:00 2025 GMT
        Subject: CN=A15B635BAFD5AEF16B9367FFBDBC6D405A6370FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:7a:92:be:db:83:a8:d2:20:40:09:80:97:
                    d3:36:33:66:29:ff:3d:c3:cb:6b:bc:90:00:7b:74:
                    7f:64:36:07:11:50:d2:d0:1c:7d:31:7c:ea:05:07:
                    75:ed:0c:e8:81:c9:74:35:c7:21:e5:bd:f9:e3:74:
                    fd:b1:e6:d6:d0:32:68:e7:1c:d1:71:cb:3d:c9:e5:
                    49:df:f7:f6:41:67:a8:09:0b:4f:f2:7e:77:d3:e8:
                    a2:c4:d1:ef:db:bf:3e:6a:e3:26:f1:2c:65:5e:99:
                    40:a1:e5:c3:18:ff:f7:22:88:07:8f:d7:ff:93:17:
                    ef:18:ef:13:35:b7:24:35:7f:dd:93:63:95:78:64:
                    14:2a:16:25:36:40:49:19:11:c4:ef:94:01:2e:4b:
                    60:07:26:a6:d7:2a:62:47:07:93:40:24:55:16:43:
                    1a:b3:c8:66:8a:65:cb:32:f0:75:e2:f5:04:32:a4:
                    2b:63:4d:58:96:ee:01:8c:36:31:60:93:ac:2a:25:
                    22:d3:fb:0f:fb:60:e9:bf:6d:38:d1:b9:fe:6b:28:
                    ce:5a:f8:b5:89:00:4a:a3:7a:86:c3:88:55:2d:28:
                    de:38:ae:2a:be:3b:f5:5a:fc:3f:62:c4:81:3f:40:
                    5b:f0:82:9a:3d:46:d4:a5:45:9f:60:f6:12:ee:ff:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5B:63:5B:AF:D5:AE:F1:6B:93:67:FF:BD:BC:6D:40:5A:63:70:FB
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131352e302f32342d3234203d3e203535383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:23:b2:a9:0f:2d:0d:26:1f:79:f7:c8:21:7e:83:57:ee:2e:
         33:af:94:f7:90:10:89:86:54:37:fd:88:0b:5a:cb:34:57:27:
         78:9b:f6:1b:6b:9a:7d:ee:09:ef:44:7b:90:8a:ac:8e:f5:84:
         fc:f6:fe:04:9e:cf:32:32:76:f1:78:bd:94:1e:a5:c8:ff:ec:
         9e:50:98:4e:b7:03:56:97:22:94:b3:10:0f:6d:25:a1:aa:f5:
         95:ff:90:d2:d7:b2:7e:10:c9:ad:92:0b:30:24:f8:8e:5d:d1:
         3e:64:6b:21:72:84:52:86:dc:60:c4:12:51:7e:78:8d:db:6e:
         c6:76:d3:e9:85:c3:0c:a3:db:e4:3e:21:1c:66:5f:d5:8a:01:
         81:d0:52:8c:19:f3:a9:44:dc:93:20:05:4b:53:10:68:fe:43:
         3a:8b:35:c6:21:47:24:fe:0d:37:68:64:62:e8:30:80:07:81:
         cb:39:e0:df:8c:fd:a8:91:1c:53:1c:65:ce:7d:83:7d:21:ed:
         2e:fa:b4:2d:d9:63:dc:26:45:b1:e0:54:07:d9:be:12:ed:2a:
         f2:91:1b:26:1e:ef:e4:5b:36:b3:fe:19:d0:fb:38:0f:89:9e:
         ff:f7:64:03:b7:15:09:81:e7:0f:a7:ff:4a:b7:5d:7d:70:08:
         6b:6a:1d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:02 2024 by rpki-client on console-ams.rpki-client.org