Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132352e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          E3Ix9LCh0uoZASJHsryr0UOCFO0Y4eUcpygMjbixTxY=
Subject key identifier:   88:02:64:88:62:13:C5:01:C2:49:60:58:09:42:AD:D0:F3:94:48:C6
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       289FD21E1B91C2E091DB9CA6BA5FEAECDC283F9D
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132352e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 01 Jul 2024 01:03:14 +0000
ROA not before:           Mon 01 Jul 2024 00:58:14 +0000
ROA not after:            Mon 30 Jun 2025 01:03:14 +0000
asID:                     38515
IP address blocks:        117.74.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9f:d2:1e:1b:91:c2:e0:91:db:9c:a6:ba:5f:ea:ec:dc:28:3f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jul  1 00:58:14 2024 GMT
            Not After : Jun 30 01:03:14 2025 GMT
        Subject: CN=880264886213C501C24960580942ADD0F39448C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:23:0e:38:95:f6:e3:2b:43:13:0d:73:04:a2:
                    b7:63:ab:ef:8a:5a:46:d1:b7:ed:57:10:0f:5a:8a:
                    33:4c:4d:49:99:d6:91:7c:a7:0f:4e:98:d0:64:1e:
                    56:ef:89:45:d4:5c:f8:8e:66:5f:ef:d9:9a:77:13:
                    e3:a1:5d:df:c2:12:d6:83:15:93:b0:af:f8:3a:f7:
                    cc:4f:ed:67:dc:71:6f:31:05:0d:fe:89:af:2e:ce:
                    05:8c:9a:9e:38:16:03:b4:45:13:23:47:40:2d:cd:
                    7d:a9:17:c5:e5:d8:08:42:2e:fd:00:60:cc:ef:bd:
                    3a:e2:92:25:02:d7:b2:99:d1:64:df:72:16:ed:7e:
                    7c:36:cc:17:7e:2d:3e:e1:db:45:f9:7e:15:27:24:
                    e3:1a:df:4d:1e:ea:98:fe:20:59:36:6c:7b:4e:9e:
                    f1:4f:b2:79:56:e1:89:36:13:0e:74:c6:cf:e2:ed:
                    e4:26:b3:3b:51:c7:33:ae:73:86:fc:ec:7d:8f:08:
                    8d:77:45:18:e9:a7:f0:b8:9b:a8:63:92:b4:3f:1d:
                    61:fb:58:c7:db:49:23:14:1a:a5:2a:c1:66:cf:05:
                    64:2a:1c:bb:9c:d9:71:c0:0e:96:95:b3:28:7d:07:
                    24:dd:4d:ed:84:67:86:ef:48:5b:71:f3:f2:2f:b6:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:02:64:88:62:13:C5:01:C2:49:60:58:09:42:AD:D0:F3:94:48:C6
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132352e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:bf:86:c0:8e:1d:98:06:a7:47:64:ef:f1:ab:2a:cc:f1:6c:
         d7:6c:46:dc:3b:61:ff:e5:66:00:ab:89:d9:c9:96:1b:ad:db:
         9d:d0:b9:51:13:ae:69:3d:be:41:ab:ca:0c:d8:38:10:ad:c4:
         82:c6:88:65:8a:cd:d5:56:32:ac:d8:5f:55:f4:de:2c:59:37:
         e5:bf:90:cc:71:2d:e7:36:a1:8d:41:aa:1b:d6:b3:28:e6:e9:
         e3:5b:c2:10:0e:54:6a:45:26:2a:36:6b:8b:75:3e:22:e8:b4:
         4c:e9:09:02:d8:cc:72:57:ba:d1:0e:5a:21:23:62:fa:65:f0:
         ec:a3:c8:c1:35:05:52:11:fe:26:be:3d:33:ac:4a:f2:06:c1:
         a6:a8:1d:1f:d1:c3:76:27:08:8c:ff:a2:62:31:0e:01:55:09:
         6d:12:c7:eb:ff:7a:8a:97:a1:2f:95:c4:96:e9:f7:d8:da:ef:
         64:c1:d3:4c:cc:fc:9f:72:01:bb:7a:42:e4:e9:14:35:48:c6:
         5d:9f:4e:96:7f:26:70:7c:3e:e3:7e:3c:4f:f2:d3:bb:b5:4e:
         d0:1d:f2:5d:24:08:fc:96:ad:cc:8f:f3:84:a4:17:00:be:b0:
         34:d2:d3:e1:61:8f:e3:f5:65:77:d9:62:8e:6e:be:fb:51:78:
         3d:9a:bd:69
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKJ/SHhuRwuCR25ymul/q7NwoP50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy
RERGRDhGMzAeFw0yNDA3MDEwMDU4MTRaFw0yNTA2MzAwMTAzMTRaMDMxMTAvBgNV
BAMTKDg4MDI2NDg4NjIxM0M1MDFDMjQ5NjA1ODA5NDJBREQwRjM5NDQ4QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3Iw44lfbjK0MTDXMEordjq++K
WkbRt+1XEA9aijNMTUmZ1pF8pw9OmNBkHlbviUXUXPiOZl/v2Zp3E+OhXd/CEtaD
FZOwr/g698xP7WfccW8xBQ3+ia8uzgWMmp44FgO0RRMjR0AtzX2pF8Xl2AhCLv0A
YMzvvTrikiUC17KZ0WTfchbtfnw2zBd+LT7h20X5fhUnJOMa300e6pj+IFk2bHtO
nvFPsnlW4Yk2Ew50xs/i7eQmsztRxzOuc4b87H2PCI13RRjpp/C4m6hjkrQ/HWH7
WMfbSSMUGqUqwWbPBWQqHLuc2XHADpaVsyh9ByTdTe2EZ4bvSFtx8/IvtkitAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUiAJkiGITxQHCSWBYCUKt0POUSMYwHwYDVR0j
BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4
OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG
RDhGMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04
NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzEzNzJlMzczNDJlMzEzMjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKfTANBgkqhkiG
9w0BAQsFAAOCAQEAEb+GwI4dmAanR2Tv8asqzPFs12xG3Dth/+VmAKuJ2cmWG63b
ndC5UROuaT2+QavKDNg4EK3EgsaIZYrN1VYyrNhfVfTeLFk35b+QzHEt5zahjUGq
G9azKObp41vCEA5UakUmKjZri3U+Iui0TOkJAtjMcle60Q5aISNi+mXw7KPIwTUF
UhH+Jr49M6xK8gbBpqgdH9HDdicIjP+iYjEOAVUJbRLH6/96ipehL5XElun32Nrv
ZMHTTMz8n3IBu3pC5OkUNUjGXZ9Oln8mcHw+4348T/LTu7VO0B3yXSQI/JatzI/z
hKQXAL6wNNLT4WGP4/Vld9lijm6++1F4PZq9aQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org