Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          f1JmznDZXZsYmE+EOn6/ixZplBrsI4tfJgjAi4Te3YM=
Subject key identifier:   75:12:F6:D6:9F:E8:AC:9E:26:31:D6:5D:17:A2:58:01:97:D5:9D:B0
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       0A67AF78A9067B48D95BF0AB0BAD504F604FED0B
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 01 Jul 2024 01:03:15 +0000
ROA not before:           Mon 01 Jul 2024 00:58:15 +0000
ROA not after:            Mon 30 Jun 2025 01:03:15 +0000
asID:                     38515
IP address blocks:        117.74.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:67:af:78:a9:06:7b:48:d9:5b:f0:ab:0b:ad:50:4f:60:4f:ed:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jul  1 00:58:15 2024 GMT
            Not After : Jun 30 01:03:15 2025 GMT
        Subject: CN=7512F6D69FE8AC9E2631D65D17A2580197D59DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:cb:a6:e8:6a:8d:bd:71:2f:4d:ef:a8:3a:
                    9c:20:09:1c:89:63:ae:89:73:30:18:c9:ae:66:ef:
                    7d:3c:e3:10:5b:7f:65:59:4b:69:49:5c:4b:c5:fc:
                    2e:6e:d6:bd:e9:6c:bc:e5:71:e1:b3:15:e5:bc:2f:
                    d6:7e:3f:8e:8e:3d:fa:5a:23:71:67:fd:75:6e:c0:
                    f8:a1:a3:19:50:d3:be:13:e5:c0:af:32:6b:86:a4:
                    ec:d0:22:fb:a6:0d:63:ce:58:59:24:a5:f3:bf:4a:
                    33:5f:ee:0f:1a:a3:f3:67:9e:dc:9e:f2:44:f8:ae:
                    e8:2d:39:3d:69:fc:93:a8:9e:f1:bf:96:d1:01:ce:
                    09:94:2d:25:7d:04:a7:bc:fc:79:4a:9a:69:25:8a:
                    1e:85:35:b8:aa:b8:dd:ad:30:2d:95:e0:64:91:f7:
                    4f:70:4e:02:bb:01:1c:36:4d:5f:8b:56:f0:13:a5:
                    4d:27:19:77:e0:d0:4c:ff:31:05:ae:f6:f1:bd:ed:
                    5c:4f:09:ad:3f:fb:b6:6d:4e:91:b7:cf:7c:7b:0a:
                    ce:3a:e2:df:90:02:95:98:0b:cb:4c:5e:e1:b7:3e:
                    2c:c2:44:17:20:2f:d5:57:fe:f2:36:64:67:03:dd:
                    3f:9e:c2:a8:ec:07:9b:57:ef:61:c8:9c:d4:78:27:
                    38:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:12:F6:D6:9F:E8:AC:9E:26:31:D6:5D:17:A2:58:01:97:D5:9D:B0
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:d5:ff:73:4a:47:9b:d5:e6:8e:e8:b6:b2:ba:5c:28:d4:80:
         53:f6:d7:c7:03:c1:1b:96:3b:e1:d9:14:f1:88:e1:6f:97:e7:
         d6:6b:52:b7:60:27:d4:c2:28:20:05:f3:b5:7c:9d:00:e1:65:
         74:a4:1c:1e:c8:5b:9d:fb:ef:e8:7c:96:20:f7:b6:5b:dc:6b:
         87:82:93:07:89:59:8a:14:0d:a8:88:ee:5e:47:c3:88:5f:01:
         4a:bb:5e:6e:96:a6:29:b6:3c:03:21:ac:02:ea:c2:6e:56:09:
         b0:2b:8e:1d:21:90:c8:dc:14:96:6c:b4:e1:58:93:fb:01:c8:
         9a:27:dd:f3:11:89:91:6f:45:58:01:ac:a5:63:09:2e:2b:1f:
         a4:19:77:d5:0e:eb:e5:cb:ce:64:ab:a7:ef:21:9b:a1:4f:ba:
         99:7e:b4:ed:85:1a:85:d3:62:db:c0:d8:a4:e2:a2:cb:dc:0c:
         51:4c:84:af:a3:a8:b3:36:d7:96:e8:09:da:aa:f6:9f:4c:73:
         bb:6f:1b:9b:ec:86:9b:70:84:37:f5:b8:d6:c6:d3:af:c3:88:
         e7:41:d7:71:c2:7d:39:4c:d8:4e:3b:10:3d:63:10:4b:f3:46:
         47:91:5d:a8:b8:50:d5:e3:94:19:af:79:ae:07:43:db:28:4a:
         03:86:8a:d8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUCmeveKkGe0jZW/CrC61QT2BP7QswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy
RERGRDhGMzAeFw0yNDA3MDEwMDU4MTVaFw0yNTA2MzAwMTAzMTVaMDMxMTAvBgNV
BAMTKDc1MTJGNkQ2OUZFOEFDOUUyNjMxRDY1RDE3QTI1ODAxOTdENTlEQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90Mum6GqNvXEvTe+oOpwgCRyJ
Y66JczAYya5m73084xBbf2VZS2lJXEvF/C5u1r3pbLzlceGzFeW8L9Z+P46OPfpa
I3Fn/XVuwPihoxlQ074T5cCvMmuGpOzQIvumDWPOWFkkpfO/SjNf7g8ao/Nnntye
8kT4rugtOT1p/JOonvG/ltEBzgmULSV9BKe8/HlKmmklih6FNbiquN2tMC2V4GSR
909wTgK7ARw2TV+LVvATpU0nGXfg0Ez/MQWu9vG97VxPCa0/+7ZtTpG3z3x7Cs46
4t+QApWYC8tMXuG3PizCRBcgL9VX/vI2ZGcD3T+ewqjsB5tX72HInNR4JzhtAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUdRL21p/orJ4mMdZdF6JYAZfVnbAwHwYDVR0j
BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4
OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG
RDhGMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04
NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzEzNzJlMzczNDJlMzEzMjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKfDANBgkqhkiG
9w0BAQsFAAOCAQEAnNX/c0pHm9Xmjui2srpcKNSAU/bXxwPBG5Y74dkU8Yjhb5fn
1mtSt2An1MIoIAXztXydAOFldKQcHshbnfvv6HyWIPe2W9xrh4KTB4lZihQNqIju
XkfDiF8BSrtebpamKbY8AyGsAurCblYJsCuOHSGQyNwUlmy04ViT+wHImifd8xGJ
kW9FWAGspWMJLisfpBl31Q7r5cvOZKun7yGboU+6mX607YUahdNi28DYpOKiy9wM
UUyEr6OoszbXlugJ2qr2n0xzu28bm+yGm3CEN/W41sbTr8OI50HXccJ9OUzYTjsQ
PWMQS/NGR5FdqLhQ1eOUGa95rgdD2yhKA4aK2A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org