Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e302e302f32342d3234203d3e20313532303630.roa
File:                     3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (raw, json)
Hash identifier:          jlI5rW5xPaanc5u/XvfG7KNECoUznfu/S32+49+YBb0=
Subject key identifier:   4A:3D:29:83:A8:A5:46:E4:2B:A5:81:46:E3:85:50:E0:06:B4:1B:0C
Certificate issuer:       /CN=8762A545785B5A6352FB7DA20689CECA8A47432E
Certificate serial:       3D5F8F7D4BB630F450FB272D8AAA3F5D7B83BF0F
Authority key identifier: 87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e302e302f32342d3234203d3e20313532303630.roa
Signing time:             Tue 09 Jan 2024 09:52:36 +0000
ROA not before:           Tue 09 Jan 2024 09:47:36 +0000
ROA not after:            Tue 07 Jan 2025 09:52:36 +0000
asID:                     152060
IP address blocks:        113.192.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl
                          rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5f:8f:7d:4b:b6:30:f4:50:fb:27:2d:8a:aa:3f:5d:7b:83:bf:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8762A545785B5A6352FB7DA20689CECA8A47432E
        Validity
            Not Before: Jan  9 09:47:36 2024 GMT
            Not After : Jan  7 09:52:36 2025 GMT
        Subject: CN=4A3D2983A8A546E42BA58146E38550E006B41B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dc:c5:29:2b:6a:4b:1f:62:a0:e8:95:42:23:
                    c8:46:1e:2d:e0:36:d7:bb:86:68:37:b8:f2:94:32:
                    59:08:df:d0:ba:9c:77:e5:61:99:ec:99:ef:98:4e:
                    e3:56:96:af:47:e1:7a:1f:76:de:d6:a5:26:2a:80:
                    c1:38:5f:df:de:56:f3:ff:8a:9b:e4:7a:66:15:1f:
                    df:8e:ec:df:8e:f3:d7:38:48:a2:23:17:38:15:37:
                    e0:67:45:e9:c0:e3:ed:26:c3:a7:81:ba:ce:0b:35:
                    39:e6:76:b0:75:9b:08:81:58:73:40:38:52:18:63:
                    9b:81:b3:5e:38:c0:73:ba:b0:7f:66:8f:08:e0:78:
                    2f:53:57:8a:55:3b:2d:8a:4c:e3:74:89:6c:31:04:
                    e9:12:7d:5e:9b:ad:18:83:e3:13:9a:29:52:8a:2d:
                    9d:22:bd:a7:7f:92:c0:4f:b6:3e:97:b9:bc:48:b3:
                    1c:79:72:7d:a6:09:53:ad:de:b2:f6:66:87:98:be:
                    ac:75:c9:c6:93:1b:59:2a:33:80:52:61:10:14:de:
                    c6:5c:2d:8d:f4:b7:c8:22:6b:8c:e8:41:aa:ab:8b:
                    81:23:04:62:c2:37:5c:40:df:da:b0:d9:21:86:9b:
                    da:17:56:f1:9c:6a:17:a1:41:75:45:98:2c:e9:f4:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3D:29:83:A8:A5:46:E4:2B:A5:81:46:E3:85:50:E0:06:B4:1B:0C
            X509v3 Authority Key Identifier:
                keyid:87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e302e302f32342d3234203d3e20313532303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:88:3b:df:49:a8:ec:2c:43:2c:e6:81:e8:01:ee:b4:b3:cb:
         ee:a9:92:92:dd:21:7f:ba:40:87:83:b8:f8:56:9a:5b:2d:6a:
         2e:03:e8:12:36:c3:79:7f:f0:3a:31:8c:e9:62:15:65:0e:b8:
         82:5c:27:cb:c5:ea:b7:73:e0:77:85:fe:c2:d6:c2:11:68:4f:
         49:4e:d8:6e:e5:5d:9b:f0:21:94:46:5a:ff:df:3a:30:9c:de:
         37:5d:9d:26:82:e1:b3:dc:6f:18:7f:f4:1f:da:9f:dc:d1:16:
         05:03:56:bc:e6:98:f0:2a:6b:b8:0f:31:77:04:c3:53:24:e0:
         88:61:09:a8:82:46:b2:cd:46:0d:15:87:cd:45:83:2b:d0:f3:
         8a:af:b1:d1:78:29:23:cd:cd:6f:a9:b9:76:69:f9:3d:13:5a:
         63:f0:fc:3c:18:2c:94:c5:0f:ed:d9:2d:08:69:c0:9d:30:e1:
         5a:50:81:ca:61:e4:b8:88:91:e0:2d:82:d9:81:08:27:c5:45:
         c7:9e:b1:2d:d7:aa:2c:6f:10:67:9d:d6:87:d1:82:d2:13:58:
         d1:af:a2:4b:84:f8:a7:16:4f:1e:f0:40:aa:98:2e:99:f8:bc:
         18:05:03:35:26:4a:d9:8e:6b:9f:7d:00:14:c3:a4:2c:a2:d4:
         5f:52:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org