Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132362e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132362e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          EEaEZh5b8qX6GK9UvSPlgYe2sVCD2bNdjCbgrn86OIw=
Subject key identifier:   F4:F5:CD:FC:B4:38:F2:10:31:D9:FF:EE:BD:85:65:0B:A2:DB:95:89
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       6B3ED757DD3527C98FFA2552983705F3AC7AA8E0
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132362e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 01 Jul 2024 01:03:15 +0000
ROA not before:           Mon 01 Jul 2024 00:58:15 +0000
ROA not after:            Mon 30 Jun 2025 01:03:15 +0000
asID:                     38515
IP address blocks:        117.74.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Mar 2025 07:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3e:d7:57:dd:35:27:c9:8f:fa:25:52:98:37:05:f3:ac:7a:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jul  1 00:58:15 2024 GMT
            Not After : Jun 30 01:03:15 2025 GMT
        Subject: CN=F4F5CDFCB438F21031D9FFEEBD85650BA2DB9589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:75:2a:4a:64:85:2d:21:76:8c:4b:c6:fc:
                    6e:6b:24:90:fb:47:bd:d1:6a:da:12:4f:90:fa:6f:
                    d4:c9:73:85:d1:9c:b8:4d:ab:a5:a1:6e:a2:f3:ef:
                    57:a1:59:01:63:2d:64:56:bc:11:2d:69:fa:42:15:
                    92:cc:e5:9e:02:fb:c4:b0:b1:13:42:d4:a8:b1:d5:
                    81:5e:c3:0a:32:20:56:81:dd:a5:f4:7c:6a:ea:c4:
                    ec:97:c8:7c:2e:69:ee:63:36:7b:53:e0:a5:29:3a:
                    22:48:66:fb:35:23:68:06:79:0a:14:b0:46:49:d6:
                    94:be:aa:2f:08:14:f0:69:59:0a:70:38:9c:10:77:
                    2e:38:93:aa:97:70:a6:7c:92:d4:cd:2a:71:3f:09:
                    02:f6:9a:04:9c:44:62:3f:e8:30:0b:c1:5e:7e:9e:
                    99:7b:f0:43:dc:24:ab:a0:fb:0d:e7:32:36:b6:aa:
                    32:2c:06:10:6f:ba:ad:bf:1f:b0:ee:d1:9f:53:4b:
                    77:06:1f:1f:4b:e2:bb:ed:7b:f8:5e:d8:ba:5a:a0:
                    47:23:10:30:87:a2:10:aa:11:d2:35:af:f9:8f:4e:
                    67:b2:15:db:d6:d2:d0:cd:db:fb:7c:82:91:de:bf:
                    c2:42:9f:aa:b2:2e:4e:09:41:34:26:b2:c2:38:14:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F5:CD:FC:B4:38:F2:10:31:D9:FF:EE:BD:85:65:0B:A2:DB:95:89
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132362e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f5:f8:1a:12:c3:85:cc:f2:3b:da:4e:d0:93:c4:11:5b:30:
         ab:0c:bd:8f:27:79:02:fa:8d:5b:c6:a5:f7:98:bb:01:f6:a1:
         0c:05:25:da:96:07:ae:42:38:71:8a:b4:f0:00:b4:c0:10:cb:
         43:8e:95:a6:c0:93:c2:01:4f:d8:e4:5a:a3:b2:ee:32:39:4b:
         5a:15:c9:34:d5:a8:ea:05:30:17:bc:d1:bd:28:37:9f:e3:1a:
         47:01:16:47:45:0e:b5:cb:3d:f7:1f:4c:f9:47:3c:d4:91:04:
         b0:91:75:87:14:72:ff:9a:4b:06:a2:d5:92:4e:3f:a0:98:5d:
         43:f5:ed:83:74:3b:40:b8:0d:32:bb:e0:5b:cb:06:2a:36:65:
         83:79:17:66:f7:0a:9e:42:df:13:ae:a4:d5:c0:0e:45:99:30:
         8a:a1:d8:5b:e7:02:f2:a5:dd:b2:8e:a7:24:69:5f:d5:e7:55:
         5c:df:41:78:a9:c8:59:19:b8:46:29:b9:f4:d4:a1:28:fc:2b:
         ba:46:1d:d2:2c:6d:a3:81:b1:c3:24:4f:e2:f2:e7:bb:92:4d:
         1b:50:4d:0d:65:0a:87:f4:8d:ff:bc:15:21:ba:f4:65:e1:3e:
         f3:14:72:7e:cf:e7:01:a0:b6:d2:f4:6c:da:8b:0b:b3:92:c3:
         00:a8:3e:23
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaz7XV901J8mP+iVSmDcF86x6qOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy
RERGRDhGMzAeFw0yNDA3MDEwMDU4MTVaFw0yNTA2MzAwMTAzMTVaMDMxMTAvBgNV
BAMTKEY0RjVDREZDQjQzOEYyMTAzMUQ5RkZFRUJEODU2NTBCQTJEQjk1ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDN3UqSmSFLSF2jEvG/G5rJJD7
R73RatoST5D6b9TJc4XRnLhNq6WhbqLz71ehWQFjLWRWvBEtafpCFZLM5Z4C+8Sw
sRNC1Kix1YFewwoyIFaB3aX0fGrqxOyXyHwuae5jNntT4KUpOiJIZvs1I2gGeQoU
sEZJ1pS+qi8IFPBpWQpwOJwQdy44k6qXcKZ8ktTNKnE/CQL2mgScRGI/6DALwV5+
npl78EPcJKug+w3nMja2qjIsBhBvuq2/H7Du0Z9TS3cGHx9L4rvte/he2LpaoEcj
EDCHohCqEdI1r/mPTmeyFdvW0tDN2/t8gpHev8JCn6qyLk4JQTQmssI4FN2vAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU9PXN/LQ48hAx2f/uvYVlC6LblYkwHwYDVR0j
BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4
OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG
RDhGMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04
NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzEzNzJlMzczNDJlMzEzMjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKfjANBgkqhkiG
9w0BAQsFAAOCAQEAEvX4GhLDhczyO9pO0JPEEVswqwy9jyd5AvqNW8al95i7Afah
DAUl2pYHrkI4cYq08AC0wBDLQ46VpsCTwgFP2ORao7LuMjlLWhXJNNWo6gUwF7zR
vSg3n+MaRwEWR0UOtcs99x9M+Uc81JEEsJF1hxRy/5pLBqLVkk4/oJhdQ/Xtg3Q7
QLgNMrvgW8sGKjZlg3kXZvcKnkLfE66k1cAORZkwiqHYW+cC8qXdso6nJGlf1edV
XN9BeKnIWRm4Rim59NShKPwrukYd0ixto4GxwyRP4vLnu5JNG1BNDWUKh/SN/7wV
Ibr0ZeE+8xRyfs/nAaC20vRs2osLs5LDAKg+Iw==
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:20 2025 by rpki-client