Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          1DsSg30Xy7wVzu/nL8H8hRAnWhIsBpUqum19dGO3/mk=
Subject key identifier:   EB:F5:5C:E0:F3:D3:5C:25:34:1A:0C:41:F4:E3:AA:15:AF:C3:B0:BB
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       51B2F2C6C2B792BA34E5A7068DCDC5016BF0889D
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 01 Jul 2024 01:03:15 +0000
ROA not before:           Mon 01 Jul 2024 00:58:15 +0000
ROA not after:            Mon 30 Jun 2025 01:03:15 +0000
asID:                     38515
IP address blocks:        117.74.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b2:f2:c6:c2:b7:92:ba:34:e5:a7:06:8d:cd:c5:01:6b:f0:88:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jul  1 00:58:15 2024 GMT
            Not After : Jun 30 01:03:15 2025 GMT
        Subject: CN=EBF55CE0F3D35C25341A0C41F4E3AA15AFC3B0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:24:cd:41:f5:5b:29:17:60:78:64:12:08:
                    99:b3:38:d1:99:8f:13:0c:bb:10:9c:48:b6:32:7c:
                    bd:1a:e2:b4:46:f8:ec:db:98:e1:de:33:85:23:c8:
                    94:41:ce:7e:3f:69:4f:5e:be:a2:9b:44:c6:f7:87:
                    fb:8f:5f:54:22:a9:ea:27:d0:a0:f3:10:d2:32:70:
                    65:d7:80:9c:8b:5c:a2:46:28:55:69:13:65:22:13:
                    e1:88:2b:6e:13:de:e9:96:76:bd:f6:82:80:20:ff:
                    fd:25:89:a7:45:5f:46:2a:9c:85:b1:45:32:56:73:
                    1f:d7:27:63:d1:fe:54:4b:45:54:0e:59:97:12:3c:
                    9e:b1:a2:4f:cc:62:65:c9:2f:13:01:e3:9c:63:db:
                    0d:9f:cd:21:ea:2f:b3:7b:94:c0:49:4a:f9:a3:59:
                    ce:de:c3:20:38:fd:50:10:ee:5e:36:c7:6d:2b:f3:
                    a5:8a:70:8b:ef:53:32:7e:42:fb:13:74:b0:f3:ca:
                    38:e9:ac:21:e6:80:77:fd:a0:c8:79:49:8c:42:aa:
                    9f:e9:69:f4:c9:73:61:d6:97:1c:59:36:0c:49:c0:
                    f3:b2:52:fe:58:a5:5e:ad:dc:62:ad:00:a4:dd:59:
                    3c:6d:36:b3:64:e3:5b:47:eb:bc:52:cc:3b:1f:10:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F5:5C:E0:F3:D3:5C:25:34:1A:0C:41:F4:E3:AA:15:AF:C3:B0:BB
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:94:1d:04:8e:bc:dc:69:60:70:12:fa:e6:1e:14:8a:10:15:
         a5:be:80:70:ea:00:5c:d8:d9:56:7c:d3:27:30:4e:fa:41:c6:
         d4:e3:17:4a:06:b5:c1:e1:e6:1b:69:2d:de:8c:03:b8:c1:39:
         d5:42:73:3a:bf:33:21:8e:e5:58:64:94:26:88:db:8a:2b:78:
         d2:f5:17:7e:61:c3:4f:a3:3c:eb:87:9e:82:6c:15:eb:fd:59:
         a8:07:14:81:5e:47:64:18:a4:b5:e4:19:ab:5e:68:1a:01:6e:
         7d:f2:fb:2a:a3:3d:91:fa:9a:85:69:68:03:60:57:a4:8f:b3:
         6a:f9:a7:a8:de:cf:16:69:53:cc:a5:f8:09:c7:ff:b0:db:7d:
         36:07:e1:95:5e:85:74:93:46:0f:35:e1:e2:b2:be:70:dc:5f:
         c6:9e:1b:86:05:b9:b9:35:23:fb:5e:71:60:1d:50:47:c2:b0:
         f6:ee:a8:40:99:80:4b:cb:d5:95:9e:68:1c:51:f5:de:d7:b1:
         08:a6:d0:c8:7f:20:0b:f5:d4:ce:a8:e0:39:a3:0f:5f:c7:3c:
         61:e4:35:65:3f:ab:7b:4f:bc:86:4c:04:48:96:70:42:2b:c5:
         c8:6d:6e:48:1f:97:28:66:04:9d:b8:2b:87:3c:2c:67:96:db:
         2f:8d:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org