Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa
File:                     3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          zDZzwolkh/z1veTW3dY3oJTU+teKtol4fjkfVmPgtvY=
Subject key identifier:   56:B5:79:9D:7A:34:EC:66:F5:81:C1:58:E8:C9:AF:1B:BD:12:5E:B2
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       068E3EA12297A7FD62673C18F437D5174DBC5E50
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 21 Apr 2024 05:00:02 +0000
ROA not before:           Sun 21 Apr 2024 04:55:02 +0000
ROA not after:            Sun 20 Apr 2025 05:00:02 +0000
asID:                     9341
IP address blocks:        119.252.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8e:3e:a1:22:97:a7:fd:62:67:3c:18:f4:37:d5:17:4d:bc:5e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr 21 04:55:02 2024 GMT
            Not After : Apr 20 05:00:02 2025 GMT
        Subject: CN=56B5799D7A34EC66F581C158E8C9AF1BBD125EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b2:13:81:c9:a9:28:1c:56:23:ca:ec:82:c2:
                    00:a7:19:7c:d5:59:ee:15:56:26:c1:c0:d5:06:ac:
                    4a:ba:88:8c:c8:24:31:3f:69:05:e8:8e:2e:29:52:
                    de:89:9b:96:f9:b4:0b:36:3d:f0:17:c0:91:62:00:
                    2c:7a:d9:76:30:fb:9a:b2:c2:59:42:e7:77:c5:ae:
                    08:4b:3e:f3:fb:46:e1:f0:e2:9b:f5:3a:61:c5:5b:
                    4b:4f:a5:07:85:a4:88:80:0a:c8:8b:15:04:56:70:
                    a7:fe:4a:46:9b:b4:d3:db:a4:cc:7b:b6:a7:09:f2:
                    3d:33:a4:b3:92:96:8f:27:05:e3:3e:5e:2c:da:0d:
                    7e:86:e6:59:4d:be:ea:56:f8:84:c6:f6:57:d8:f1:
                    af:57:52:9c:68:d9:94:62:98:5d:e2:96:1a:04:62:
                    19:33:29:43:2e:2f:0c:b9:6b:51:77:2e:7d:15:62:
                    7c:e1:fa:33:51:a3:5d:8e:c0:48:53:6a:77:05:d3:
                    9f:ad:a4:3f:02:2d:b9:ae:85:ce:04:e0:a2:24:3c:
                    13:df:bf:ae:0a:55:f4:8d:ae:40:3c:ce:f5:cf:cc:
                    18:68:30:21:d2:72:70:8b:b1:22:11:bd:73:f3:b6:
                    51:a7:28:44:4a:ba:98:31:c6:4b:90:bc:73:f3:5a:
                    ca:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B5:79:9D:7A:34:EC:66:F5:81:C1:58:E8:C9:AF:1B:BD:12:5E:B2
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.252.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:1a:45:2c:13:ce:82:20:7d:50:1e:3b:f2:df:df:dd:20:36:
         4b:af:5a:f7:3b:d9:6b:2c:6e:b9:34:45:08:23:b3:f9:17:c1:
         4e:06:fa:94:ef:71:b7:66:53:a8:e8:65:94:b2:bc:9d:2d:b9:
         34:b2:df:16:8e:66:43:cf:d5:a3:1f:59:f2:2d:51:56:86:3d:
         e5:37:4a:a0:9b:88:59:56:9f:19:dd:6a:5d:3b:5d:51:35:43:
         d1:90:66:ea:cf:4b:7f:68:74:53:ad:9d:19:ad:89:88:9d:4e:
         10:cb:83:7a:df:a2:2b:66:af:37:e1:aa:f0:0c:c2:c5:73:4d:
         23:26:ab:1d:b8:af:62:fe:47:43:76:19:4e:b0:7e:f5:40:03:
         08:9e:d2:36:da:a3:ea:70:42:26:74:e9:3d:b9:15:45:42:de:
         38:11:d8:02:ec:3d:84:5f:fc:75:a8:4a:3e:bc:90:91:f2:02:
         a1:7a:fe:62:6e:80:e7:da:bf:ac:98:ad:01:0f:2b:b1:57:05:
         1c:82:8c:0b:08:df:f8:3c:24:3a:e9:ba:2b:9d:a4:bb:f4:d4:
         63:ac:3d:b1:f6:3d:dd:23:ec:d6:6c:58:e1:5a:23:16:02:33:
         3e:9a:56:7a:92:d3:94:f1:a2:75:dd:c3:c0:e3:98:04:51:25:
         4f:62:ea:b9
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBo4+oSKXp/1iZzwY9DfVF028XlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNDA0MjEwNDU1MDJaFw0yNTA0MjAwNTAwMDJaMDMxMTAvBgNV
BAMTKDU2QjU3OTlEN0EzNEVDNjZGNTgxQzE1OEU4QzlBRjFCQkQxMjVFQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWshOByakoHFYjyuyCwgCnGXzV
We4VVibBwNUGrEq6iIzIJDE/aQXoji4pUt6Jm5b5tAs2PfAXwJFiACx62XYw+5qy
wllC53fFrghLPvP7RuHw4pv1OmHFW0tPpQeFpIiACsiLFQRWcKf+SkabtNPbpMx7
tqcJ8j0zpLOSlo8nBeM+XizaDX6G5llNvupW+ITG9lfY8a9XUpxo2ZRimF3ilhoE
YhkzKUMuLwy5a1F3Ln0VYnzh+jNRo12OwEhTancF05+tpD8CLbmuhc4E4KIkPBPf
v64KVfSNrkA8zvXPzBhoMCHScnCLsSIRvXPztlGnKERKupgxxkuQvHPzWsqDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVrV5nXo07Gb1gcFY6MmvG70SXrIwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM2MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8ojANBgkqhkiG
9w0BAQsFAAOCAQEAGxpFLBPOgiB9UB478t/f3SA2S69a9zvZayxuuTRFCCOz+RfB
Tgb6lO9xt2ZTqOhllLK8nS25NLLfFo5mQ8/Vox9Z8i1RVoY95TdKoJuIWVafGd1q
XTtdUTVD0ZBm6s9Lf2h0U62dGa2JiJ1OEMuDet+iK2avN+Gq8AzCxXNNIyarHbiv
Yv5HQ3YZTrB+9UADCJ7SNtqj6nBCJnTpPbkVRULeOBHYAuw9hF/8dahKPryQkfIC
oXr+Ym6A59q/rJitAQ8rsVcFHIKMCwjf+DwkOum6K52ku/TUY6w9sfY93SPs1mxY
4VojFgIzPppWepLTlPGidd3DwOOYBFElT2LquQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:21 2024 by rpki-client on console-fra.rpki-client.org