Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32322d3232203d3e203338353135.roa
File:                     3131372e37342e3132302e302f32322d3232203d3e203338353135.roa (raw, json)
Hash identifier:          xEdRuUJTSivUpNPIDnPWLGfAdZM7XwpAuLlbwL66BaU=
Subject key identifier:   A3:8B:12:6A:EC:A8:B0:0D:36:F4:2D:40:77:3A:96:A0:17:A5:86:05
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       255459D044451C61BA2CA70441C67067C2DAED0F
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32322d3232203d3e203338353135.roa
Signing time:             Tue 04 Jun 2024 04:01:31 +0000
ROA not before:           Tue 04 Jun 2024 03:56:31 +0000
ROA not after:            Tue 03 Jun 2025 04:01:31 +0000
asID:                     38515
IP address blocks:        117.74.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:54:59:d0:44:45:1c:61:ba:2c:a7:04:41:c6:70:67:c2:da:ed:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jun  4 03:56:31 2024 GMT
            Not After : Jun  3 04:01:31 2025 GMT
        Subject: CN=A38B126AECA8B00D36F42D40773A96A017A58605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:14:62:d0:2b:6a:0a:18:4e:c4:58:95:cc:
                    b7:d2:0c:f4:59:db:fb:cb:21:f6:7e:21:56:b4:bc:
                    41:8f:9b:de:38:ec:52:64:62:74:88:59:6d:b4:fa:
                    43:3f:4b:89:74:f7:aa:1f:58:49:5a:f1:88:1a:84:
                    a1:48:c5:2b:cc:82:f5:10:86:a2:76:80:c9:fc:84:
                    ea:9f:16:7d:44:49:bc:bc:b1:1a:e1:f6:03:6f:e9:
                    a3:04:8a:78:69:6d:0c:c5:60:1a:9a:8b:20:37:fb:
                    5a:26:81:57:69:cb:79:bf:87:09:14:3e:63:ca:ee:
                    5d:c6:ac:fc:c1:23:a3:42:a1:b0:4f:af:28:87:7c:
                    89:bc:c7:24:f2:4f:83:fb:ba:a3:f2:5b:d9:eb:7a:
                    b4:9b:af:45:6e:cd:d6:6d:bf:ca:63:36:6a:de:b4:
                    fc:42:cc:97:ca:21:b3:98:5e:17:26:0d:1e:7a:8e:
                    b1:aa:cb:ec:aa:3e:ea:f2:45:0e:ca:90:64:ab:86:
                    14:8f:d2:86:17:aa:90:29:6d:51:d7:a5:97:a3:f4:
                    6a:ca:e7:a1:85:39:60:28:d5:7d:ed:38:4f:d7:a6:
                    49:c9:ab:aa:e3:af:e4:0a:e7:ea:fc:e9:47:d2:8b:
                    35:b4:66:7b:2a:5e:98:11:24:16:12:52:e8:bb:64:
                    bc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8B:12:6A:EC:A8:B0:0D:36:F4:2D:40:77:3A:96:A0:17:A5:86:05
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32322d3232203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:3a:1f:1d:35:68:bb:51:ea:23:bf:02:b7:29:5f:32:76:9b:
         ca:dc:44:e8:34:74:2b:15:b5:f7:63:3c:6a:a0:10:93:23:2c:
         8a:de:e0:29:78:43:bc:6f:68:15:7f:8a:b7:db:23:2d:d2:46:
         e1:5e:ca:26:a4:00:1a:4e:07:ae:15:3d:de:99:c7:88:f9:80:
         79:3f:59:b3:ae:93:e3:36:0d:42:f4:3a:38:0a:04:35:65:66:
         1e:66:b4:f2:1f:c5:2e:b1:a9:a7:6c:69:ef:0a:f8:2d:c8:98:
         53:12:9e:4a:58:d8:b1:c3:86:36:50:82:dc:60:61:b4:4d:00:
         a8:2e:cf:1a:54:a6:c1:7f:86:33:30:b1:64:f5:d7:90:6d:ef:
         56:bd:e0:b1:84:84:9c:a5:22:8c:a3:18:17:84:54:52:81:96:
         b1:08:bb:62:9a:7c:1f:d7:3b:94:df:c5:7a:e2:a1:79:1a:7d:
         25:38:37:69:49:33:b6:5f:0b:31:9e:f3:84:0d:67:68:5b:e6:
         f2:5b:2e:b4:52:5e:6c:3a:1f:1d:f2:cf:eb:d3:92:cb:60:c9:
         00:c0:16:bd:df:6b:d3:10:cb:b1:11:8e:9f:60:c8:aa:26:72:
         4c:66:5c:58:6d:92:3c:59:de:0b:87:c8:e1:cd:fc:f9:0a:c1:
         c2:d1:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org