Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa
File:                     3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (raw, json)
Hash identifier:          J3DBbX7ZaKILS/cSQk/AnXUr3KY2yJBBGwr4Re0+yzo=
Subject key identifier:   E4:B6:17:5E:18:AB:35:4D:14:A4:A7:63:8E:9C:F4:C6:5F:DD:8C:E8
Certificate issuer:       /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
Certificate serial:       28C92FC5F2C8A953822B7A592D0B559AF92DFB3D
Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa
Signing time:             Mon 01 Jul 2024 01:06:13 +0000
ROA not before:           Mon 01 Jul 2024 01:01:13 +0000
ROA not after:            Mon 30 Jun 2025 01:06:13 +0000
asID:                     45294
IP address blocks:        113.212.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl
                          rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c9:2f:c5:f2:c8:a9:53:82:2b:7a:59:2d:0b:55:9a:f9:2d:fb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
        Validity
            Not Before: Jul  1 01:01:13 2024 GMT
            Not After : Jun 30 01:06:13 2025 GMT
        Subject: CN=E4B6175E18AB354D14A4A7638E9CF4C65FDD8CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:b2:a9:c0:93:ea:db:83:93:fa:16:fa:8d:
                    47:f8:8c:c7:63:ff:ec:6a:55:f4:32:1e:b3:df:4d:
                    da:18:e5:85:3f:60:c2:24:52:1d:f5:03:50:da:ba:
                    5d:c1:27:43:88:26:2f:3f:bb:d0:f4:22:29:db:d4:
                    64:4f:e6:e6:a3:23:7e:1f:5b:4c:af:41:c1:9c:fa:
                    94:50:56:7d:33:be:4c:24:c5:73:99:4b:f7:b1:dc:
                    10:ca:a7:d4:b5:d4:65:6f:7b:71:03:b0:a1:ba:22:
                    f0:63:ca:e8:30:71:1f:36:5e:27:1d:09:fb:0f:ca:
                    f9:8c:1e:e6:75:cf:03:45:06:59:df:8f:da:f3:37:
                    d7:de:66:2f:da:82:4d:4a:c1:bd:2c:ee:53:a1:0a:
                    d9:36:5e:35:b8:e8:a6:bc:f7:41:8c:5b:fd:c0:26:
                    5f:39:bd:8e:cd:b7:04:e0:cf:03:88:c7:e6:5d:d9:
                    80:5e:72:22:9b:98:01:71:4e:b2:44:04:d3:59:8c:
                    e2:66:14:24:ab:4b:74:23:05:ea:1a:54:c5:e9:10:
                    a5:f2:b3:0f:1d:28:f2:12:52:c7:fd:9f:28:bb:5c:
                    12:cb:78:92:f9:ae:5b:89:33:d9:fd:12:41:b3:72:
                    51:f3:22:04:28:02:9b:35:08:31:ee:7d:dc:cb:51:
                    88:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B6:17:5E:18:AB:35:4D:14:A4:A7:63:8E:9C:F4:C6:5F:DD:8C:E8
            X509v3 Authority Key Identifier:
                keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:2b:7d:57:d3:ea:ec:1a:c6:b6:ca:71:3b:a2:2b:cd:84:c4:
         d9:e4:71:64:ee:bc:19:71:63:ac:eb:4c:a7:b2:86:67:40:22:
         91:4d:a4:e8:33:29:ee:af:0c:08:62:b4:92:1b:96:2c:8b:ac:
         83:f5:8f:25:a0:a2:5a:c5:88:bf:72:42:b9:cd:f0:b5:d2:db:
         7b:4d:be:39:f3:ce:0b:f8:96:e4:d5:37:b6:96:5c:9d:54:a0:
         fb:d7:34:a4:89:bf:0b:c2:41:f9:12:1b:00:46:75:e5:47:10:
         a3:c8:cf:a3:4b:fe:10:0a:cf:c1:e9:a2:87:af:03:a0:4d:19:
         aa:b6:7e:d6:b8:ea:55:c4:c6:42:a7:61:22:61:e8:17:74:e3:
         72:11:f3:ff:39:f4:93:6e:cc:33:0f:61:3e:f7:b1:fc:8e:b0:
         07:78:3c:ce:a8:91:be:d9:64:99:36:09:47:48:5c:fa:cd:dd:
         1a:b7:32:d8:77:18:72:f2:ac:ec:73:c3:12:e7:63:ce:2d:eb:
         9d:24:fb:97:30:26:16:21:80:f5:83:0b:3d:45:97:b1:4b:1c:
         76:7c:37:e6:57:b2:06:8b:c7:fa:95:bd:e1:95:75:b7:53:00:
         e9:f1:09:98:04:99:20:09:e7:ff:d7:29:1c:f8:84:6d:86:04:
         ef:93:4d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org