Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32322d3232203d3e203338353135.roa
File:                     3131372e37342e3132342e302f32322d3232203d3e203338353135.roa (raw, json)
Hash identifier:          cDY4Z9d9g+KrirZABQ3RMVXlQjWVTpJ4E7KqPsvflsA=
Subject key identifier:   AA:29:59:B8:13:EE:39:89:26:66:F2:89:D4:88:7F:68:3C:12:7E:DB
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       33200ACD9ACBCE3110064C2C4BA4570FDAB63BA3
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32322d3232203d3e203338353135.roa
Signing time:             Tue 04 Jun 2024 04:01:31 +0000
ROA not before:           Tue 04 Jun 2024 03:56:31 +0000
ROA not after:            Tue 03 Jun 2025 04:01:31 +0000
asID:                     38515
IP address blocks:        117.74.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:20:0a:cd:9a:cb:ce:31:10:06:4c:2c:4b:a4:57:0f:da:b6:3b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jun  4 03:56:31 2024 GMT
            Not After : Jun  3 04:01:31 2025 GMT
        Subject: CN=AA2959B813EE39892666F289D4887F683C127EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:2b:a0:35:7b:b7:d6:3b:88:17:c6:50:2d:
                    c6:8f:29:39:79:31:6b:a1:42:6c:8c:63:8e:b4:73:
                    5c:c2:59:1e:9f:37:3b:dc:3b:47:f9:75:35:a2:31:
                    33:e7:c4:6f:c6:ca:46:6a:49:c3:91:43:11:09:c8:
                    11:9c:a6:67:a7:72:53:f6:99:85:e9:3f:f2:df:a9:
                    87:ed:b6:13:2c:a8:34:ca:e7:cf:3f:dd:2f:2e:82:
                    90:4c:99:20:c7:7d:93:0b:c0:b2:65:5d:77:23:2c:
                    a0:fb:87:c1:6b:9a:75:c3:b4:14:4d:2e:f8:7e:44:
                    a8:c4:81:13:9b:4e:5c:91:35:e8:ee:9d:b2:e6:0d:
                    61:98:0e:a3:a6:f7:79:20:fe:34:bc:8e:f7:54:91:
                    ba:e7:74:05:99:fe:11:17:c2:3a:e0:a2:e6:35:9f:
                    42:8f:2d:fb:a6:8d:62:ee:a4:25:ba:63:7f:ec:8d:
                    d9:46:db:37:65:e2:21:7b:31:d8:81:0f:7e:88:78:
                    08:c8:af:f4:8c:6a:6b:85:ed:27:12:cd:0e:74:bd:
                    70:da:34:18:42:3a:a4:b5:3b:d9:68:91:2f:25:10:
                    d5:12:13:50:93:c1:13:13:46:fc:7b:30:42:40:13:
                    ff:f9:8e:3c:c7:66:fb:c4:c3:30:95:a9:e8:eb:81:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:29:59:B8:13:EE:39:89:26:66:F2:89:D4:88:7F:68:3C:12:7E:DB
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32322d3232203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:22:1e:ba:18:be:1f:ff:c0:21:82:8a:bb:8d:e1:b3:61:c7:
         42:ba:1f:09:ab:81:c5:c0:d1:5f:3b:eb:51:8f:29:72:ab:d7:
         4d:78:2f:38:97:b9:cd:6e:02:0d:31:93:5c:92:e2:7a:d5:f6:
         d0:9b:f0:ce:fa:6b:03:d0:5b:63:58:b4:28:62:56:20:c0:0e:
         5f:94:9f:88:15:0e:0a:14:30:b9:3c:47:e5:f2:08:f5:93:18:
         f6:c2:f5:b7:8a:ea:08:26:2d:b3:69:53:c6:56:7f:d5:72:bc:
         ab:11:97:ba:37:56:ce:f6:89:d1:e4:e6:e8:dc:74:5a:a2:0c:
         3f:a3:a5:28:fc:7f:7d:8d:55:15:e2:e7:20:5b:23:57:3b:ac:
         11:98:b3:9d:b8:90:02:05:5a:6b:14:59:96:ef:42:76:52:b7:
         01:e5:69:c3:d0:f1:1d:80:db:d5:d3:b0:dc:46:4b:d0:29:cf:
         6b:4b:33:17:33:4c:4d:8b:19:64:fb:35:88:4a:54:df:0a:f3:
         a3:79:90:6a:fc:5a:bb:50:8c:45:1e:4b:2a:24:a6:dd:5b:d8:
         f9:99:1b:e6:a4:73:86:93:40:74:4c:d5:43:8b:ea:88:7a:f9:
         7a:7c:c9:e4:39:ed:7f:97:aa:8a:67:26:1f:ee:16:86:e8:92:
         92:d7:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org