Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e312e302f32342d3234203d3e20313532303630.roa
File:                     3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (raw, json)
Hash identifier:          oj9chbs5OVG53Fer0emzdLkJa1HgsbB46XHGonJX/no=
Subject key identifier:   88:69:F9:2B:1C:F5:5E:32:96:DE:8F:55:2A:8F:43:70:29:C2:03:C4
Certificate issuer:       /CN=8762A545785B5A6352FB7DA20689CECA8A47432E
Certificate serial:       7B64AA23AAB6550BC3DF375C700DB2A0D11D8E91
Authority key identifier: 87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e312e302f32342d3234203d3e20313532303630.roa
Signing time:             Tue 10 Dec 2024 10:00:01 +0000
ROA not before:           Tue 10 Dec 2024 09:55:01 +0000
ROA not after:            Tue 09 Dec 2025 10:00:01 +0000
asID:                     152060
IP address blocks:        113.192.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl
                          rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 22:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:64:aa:23:aa:b6:55:0b:c3:df:37:5c:70:0d:b2:a0:d1:1d:8e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8762A545785B5A6352FB7DA20689CECA8A47432E
        Validity
            Not Before: Dec 10 09:55:01 2024 GMT
            Not After : Dec  9 10:00:01 2025 GMT
        Subject: CN=8869F92B1CF55E3296DE8F552A8F437029C203C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:a9:52:44:11:18:7b:af:5c:de:02:3f:8a:
                    a9:94:1d:cd:1d:e3:fd:ee:22:53:b5:c3:9d:2e:4f:
                    70:79:d4:63:02:4c:d0:c8:89:a2:e1:40:e8:e9:76:
                    a3:be:72:19:4a:a5:33:c8:e8:aa:a6:dd:c5:5c:cc:
                    7e:c2:c0:cc:23:36:63:bd:73:dc:31:7e:e9:c2:0f:
                    d4:f6:dd:89:c3:f8:8c:38:3e:fc:30:e7:44:f3:70:
                    c9:58:9a:f6:a4:25:c9:4c:5f:81:d2:ca:42:37:32:
                    70:b1:19:43:c0:60:51:f5:ce:6a:40:10:6a:a7:f7:
                    51:91:46:12:87:5c:d4:57:87:2d:3c:37:92:28:b5:
                    4e:72:c4:9f:31:af:12:4e:c5:15:2d:35:f9:ab:56:
                    99:8c:62:56:84:a3:71:31:d7:2c:b9:f3:b8:bf:10:
                    aa:e2:df:e7:d9:a6:95:e8:c0:6e:4f:8b:8d:65:16:
                    39:cf:ed:7f:35:24:ab:00:f9:ce:0d:a1:3d:10:9c:
                    61:c6:89:dd:a6:2f:bf:e9:b3:37:d5:dc:e5:84:b3:
                    a9:23:40:43:3a:73:33:6d:fc:81:be:2e:c3:c6:d0:
                    1f:79:2a:f9:1c:27:d6:0b:8e:67:84:85:ef:c4:4b:
                    8e:75:4e:c3:60:13:08:6e:e6:f7:46:e3:af:9f:86:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:69:F9:2B:1C:F5:5E:32:96:DE:8F:55:2A:8F:43:70:29:C2:03:C4
            X509v3 Authority Key Identifier:
                keyid:87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e312e302f32342d3234203d3e20313532303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:e2:97:95:5e:33:30:c4:20:24:fb:e3:75:43:bc:c5:36:ba:
         84:1d:e1:bb:55:83:c1:1f:b1:c5:88:6a:4d:f6:8d:54:c1:fb:
         bf:73:a3:c6:c2:e9:c4:f2:ab:0b:d9:68:1c:d0:b4:10:78:e8:
         e3:53:c8:45:12:d3:34:d3:b3:15:04:e2:0f:e7:74:38:7b:3b:
         ce:04:7b:ad:04:43:a4:13:18:20:44:ed:48:74:c8:dd:18:b8:
         6c:03:32:0e:47:cc:4f:77:7b:26:9e:3e:d0:24:56:c4:73:10:
         23:cf:54:d5:b9:fa:63:02:bc:c2:ed:39:35:e9:82:b8:9f:30:
         ec:3f:6b:ab:a1:03:69:06:73:a5:f7:fd:ac:c2:64:94:6b:9c:
         52:a7:46:12:9e:f7:58:03:a3:01:e8:10:ae:e7:61:cb:0a:e3:
         f6:e2:27:32:34:6f:fe:2c:48:75:66:9f:e5:cf:71:20:21:7c:
         25:3a:6e:91:63:4f:31:7f:61:3f:73:a4:ab:8a:dd:10:ee:95:
         5b:be:3a:4f:bc:58:f6:f1:62:12:6f:8c:89:76:61:c6:52:21:
         8f:6e:15:58:13:65:3b:b3:a1:ec:b7:0c:e3:8e:03:a1:ba:87:
         d7:48:49:26:4f:71:f4:9d:2f:7c:b7:52:7f:6c:fe:a0:d9:5d:
         12:ee:ba:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:51:56 2025 by rpki-client